last executing test programs: 22.724328891s ago: executing program 0 (id=2655): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) userfaultfd(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x24044004) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="12f0dda7f17f60", 0x7, 0x800, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') ioctl$TIOCSETD(r0, 0x5423, 0x0) 22.562173494s ago: executing program 0 (id=2656): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) ptrace(0x11, r4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xfffffffffffffd75, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfa}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) 19.199815257s ago: executing program 3 (id=2662): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) ptrace(0x11, r4) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xfffffffffffffd75, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfa}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) 18.36793349s ago: executing program 0 (id=2665): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioperm(0x2, 0x7, 0x13) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240), 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5126}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000040)=""/58, 0x0, 0xeeee8000}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) 18.36773448s ago: executing program 4 (id=2666): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r5) getsockname$packet(r5, 0x0, &(0x7f00000003c0)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0xf8, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) 14.953824834s ago: executing program 3 (id=2668): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) userfaultfd(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x24044004) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="12f0dda7f17f60", 0x7, 0x800, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') ioctl$TIOCSETD(r0, 0x5423, 0x0) 14.772369656s ago: executing program 4 (id=2670): socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x1c6) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=rdma,p']) 14.729017027s ago: executing program 3 (id=2671): mkdir(0x0, 0x54) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x315b83, 0x0) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x15, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_usb_connect(0x3, 0x664, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xee, 0xce, 0x10, 0x9022, 0xd630, 0x97a9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x652, 0x4, 0x6, 0x0, 0xc0, 0xc, [{{0x9, 0x4, 0x1c, 0x0, 0x6, 0x35, 0xc2, 0x69, 0x63, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xc023, 0x6, 0xa0}, @as_header={0x7, 0x24, 0x1, 0x0, 0x5, 0x3}]}, @generic={0xa2, 0xe, "a6e0c681e2bd48ae3570ecb50c35ce2ab4aa725178620c5f1fd5585aab6b36057de3b4390b0bdcddf156a60b66351f38515f727b4e8bab6b2777d73bc5c583afffc684f75f4edf92372389c58b3344e528ab51b3f38a71004b9c779be9d16c0ef65f6b6865236fe976e264f06245de006ca85968cd5399573b0e1b4125dc7335caf225bbd0c703502da0f4af943e50eda75cca641236138d923f6cb429e46c8c"}], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x10, 0xec, 0x3, [@generic={0x92, 0x21, "c7eb06d07b34fd13ec1fd90497fae21be7cf1d9b7a3eb7ae400a5b3cb1a683b262f98d0bd54405b35dde8b03aa5f5ab3ee13f3f5bffa90420da408bba71dad2d25264c83ea250b780666dfe8bda405d09922e30f28cee0efe8be542d2f11e04ae534475eae5920be0ba9f723892aa8154fbbd16ce82ee776def83ef09efac7a379b032bf4f873fa3d004ae48abbf630f"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0x3, 0x3, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x1, 0x7, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x10, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x0, 0x6, 0x6, [@generic={0xf5, 0x23, "bae690d72f3c6488768865ba63c31a3899b8d8e0c13622063faeed6816d437249ee42ad10b28a6e4e3e754dd142f055a9dcdc28c3a6f4ff46c50b0ba14d575582dedd7d79047ad72a5bfb7b57fe85a803219b24868c1c35bd8acbb0e11a63b554f1189f504054ca283e7a81540ed7f6e6892034bdfb3c203991c58691cd8df1d9b49519ea4b10e58e58396869006f36e9880a2b85a90b98fa0cb659487a91f336d0333aac92b374e723456fe5ef723d95869c7b47a042d51ba4d0837cfd2a274e26fa4ba6ba0b717588ede1df2cc7e58404c1686318ecdce29585a246a366573adea3f76f3b70c82bcfe824db7f7c040dfdfee"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x628, 0x9, 0x3, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}]}}]}}, {{0x9, 0x4, 0x4, 0x5, 0x1, 0x84, 0xa0, 0x9a, 0x6, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "79ca75"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xb73, 0x3ff, 0x7}, [@dmm={0x7, 0x24, 0x14, 0xf5fc, 0x80}, @obex={0x5}, @acm={0x4, 0x24, 0x2, 0x3}, @dmm={0x7, 0x24, 0x14, 0xd, 0x7}, @mdlm_detail={0x5f, 0x24, 0x13, 0x8, "c4988a6a19a24b9158224cf65a1c2b798888a03828133b349da8eba330b38cf8d5c99946ee93a26409f2e05ae75c3d27c9b1308d0e439a72719679efc26c67a1373f85934dfc0800773dac5d2481516f93b35fd46189f3bde48515"}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x8, 0x9, 0x7}]}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x19, 0x4, 0xa4}}]}}, {{0x9, 0x4, 0x56, 0x9, 0xa, 0xff, 0x96, 0x46, 0xf8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "e6b8"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5cae, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0x3, 0x30}, [@dmm={0x7, 0x24, 0x14, 0xa5, 0x6}, @obex={0x5, 0x24, 0x15, 0x2}, @dmm={0x7, 0x24, 0x14, 0x5, 0x8d}, @dmm={0x7, 0x24, 0x14, 0x400, 0x8}, @dmm={0x7, 0x24, 0x14, 0x7}]}], [{{0x9, 0x5, 0x5, 0x2, 0x440, 0x6, 0x40, 0x9, [@generic={0x16, 0x23, "6689eaf6943f05ae1bc3619df05b8f68c5a60fd9"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x9, 0x7, 0x27}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1, 0x4, 0x8, [@generic={0xfc, 0xd, "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"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x9}, @generic={0xb9, 0x3, "883cc6f6d4c4918c1872d889b6039339738e118cc3c2dcb97dba1d85b4760abb43914c32f14d34e4c1152265c5b9785fe2863dd781a1bd28d2e40df4c576ae3c302d32aaa3b84883e76d275b0f2e10bbe02b93443bc232758fa0adfb01e80f93b28adf3bd2b44f5b3d3df619526aa1ee1d6da1a183ee57410e07e9a25266ae4f824ae8dc43a08d289f2a411f2c8e4cdce1d58f56102afe5aff46f90390d5767a452f6ba724d7a9f7c33f9f211abda94007ef43d34dd59a"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x0, 0xff, 0x7, 0x69}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0xe, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x6, 0x3, 0x1}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x1, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7b, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x80, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x28, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x8}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x4, 0x86, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x70, 0x1}]}}]}}, {{0x9, 0x4, 0xbf, 0x7, 0x2, 0xe0, 0xaa, 0x5e, 0xfb, [@generic={0x2, 0x24}, @uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x1, 0x3, 0x3, "241e9158494c5a"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x6, 0x2, "9d58cc"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0xa, 0x3, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x9, 0xf, 0xe, [@generic={0x36, 0xe, "a2abdde1729358e3b3ebeddf97f74295e373f958589f3fff2bb4084aa9c341b279eeea145be0f0c53c401b83551e9320ce1d283a"}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xa2, 0x1, 0x9, 0xff, 0xbe}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x480a}}]}) 11.177236133s ago: executing program 3 (id=2678): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) ptrace(0x11, r4) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xfffffffffffffd75, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfa}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) 10.624563772s ago: executing program 1 (id=2679): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0x101, 0x7, "ea71061d0000000001000200", 0x0, 0x80}) writev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 10.051825711s ago: executing program 2 (id=2680): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfef, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0xc000000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xf0, 0x130, 0x0, {0x9401}, [@common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e20, 0x3, 'lc\x00', 0x2, 0x3, 0x4e}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x6, 0x3, 0x1815}, {@private=0xa010102, 0xce20, 0x4, 0xa, 0x80812f58, 0x12d5c}}, 0x44) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCOUTQ(r5, 0x5411, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) 9.077272207s ago: executing program 1 (id=2681): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r5) getsockname$packet(r5, 0x0, &(0x7f00000003c0)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0xf8, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) 9.016152548s ago: executing program 0 (id=2682): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) userfaultfd(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x24044004) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="12f0dda7f17f60", 0x7, 0x800, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') ioctl$TIOCSETD(r1, 0x5423, 0x0) 8.105192532s ago: executing program 2 (id=2683): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x80, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="3b000000010006", 0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) 8.104082322s ago: executing program 3 (id=2684): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "184194", 0x9c, 0x6, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x5e, 0xa, 0x4, 0x5, 0x4a, 0x48, 0xd6b, [@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty]}, @dstopts={0x1, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x7, 0x0, 0x3, 0x9, 0x3, 0x1, 0x3, 0x9, 0x3, 0x4e20, 0x4e20}, 0x3, 0x4}, 0x2}, 0x4}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x4001) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000000)={&(0x7f00000000c0), 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfd}]}, 0x1c}}, 0x240048c5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0xa}]}]}]}]}, 0x2c}}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, 0x0) set_mempolicy(0x6, &(0x7f0000000040)=0x2003c, 0x5) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) socket$inet6(0xa, 0x3, 0x8000000003c) 7.853694146s ago: executing program 4 (id=2685): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00', 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) ustat(0x801, &(0x7f0000000300)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 7.498165832s ago: executing program 1 (id=2686): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x20002, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0xff}}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9, 0x0, 0x0, r10], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000000480)=r11) 7.389226603s ago: executing program 0 (id=2687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x90000, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)=0x1000) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x3, 0xffffffffffffffff}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10, 0x3}, {0xf, 0xffff}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) fsmount(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) r6 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) 7.204157896s ago: executing program 2 (id=2688): mkdir(0x0, 0x54) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x315b83, 0x0) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_usb_connect(0x3, 0x664, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xee, 0xce, 0x10, 0x9022, 0xd630, 0x97a9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x652, 0x4, 0x6, 0x0, 0xc0, 0xc, [{{0x9, 0x4, 0x1c, 0x0, 0x6, 0x35, 0xc2, 0x69, 0x63, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xc023, 0x6, 0xa0}, @as_header={0x7, 0x24, 0x1, 0x0, 0x5, 0x3}]}, @generic={0xa2, 0xe, "a6e0c681e2bd48ae3570ecb50c35ce2ab4aa725178620c5f1fd5585aab6b36057de3b4390b0bdcddf156a60b66351f38515f727b4e8bab6b2777d73bc5c583afffc684f75f4edf92372389c58b3344e528ab51b3f38a71004b9c779be9d16c0ef65f6b6865236fe976e264f06245de006ca85968cd5399573b0e1b4125dc7335caf225bbd0c703502da0f4af943e50eda75cca641236138d923f6cb429e46c8c"}], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x10, 0xec, 0x3, [@generic={0x92, 0x21, "c7eb06d07b34fd13ec1fd90497fae21be7cf1d9b7a3eb7ae400a5b3cb1a683b262f98d0bd54405b35dde8b03aa5f5ab3ee13f3f5bffa90420da408bba71dad2d25264c83ea250b780666dfe8bda405d09922e30f28cee0efe8be542d2f11e04ae534475eae5920be0ba9f723892aa8154fbbd16ce82ee776def83ef09efac7a379b032bf4f873fa3d004ae48abbf630f"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0x3, 0x3, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x1, 0x7, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x10, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x0, 0x6, 0x6, [@generic={0xf5, 0x23, "bae690d72f3c6488768865ba63c31a3899b8d8e0c13622063faeed6816d437249ee42ad10b28a6e4e3e754dd142f055a9dcdc28c3a6f4ff46c50b0ba14d575582dedd7d79047ad72a5bfb7b57fe85a803219b24868c1c35bd8acbb0e11a63b554f1189f504054ca283e7a81540ed7f6e6892034bdfb3c203991c58691cd8df1d9b49519ea4b10e58e58396869006f36e9880a2b85a90b98fa0cb659487a91f336d0333aac92b374e723456fe5ef723d95869c7b47a042d51ba4d0837cfd2a274e26fa4ba6ba0b717588ede1df2cc7e58404c1686318ecdce29585a246a366573adea3f76f3b70c82bcfe824db7f7c040dfdfee"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x628, 0x9, 0x3, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}]}}]}}, {{0x9, 0x4, 0x4, 0x5, 0x1, 0x84, 0xa0, 0x9a, 0x6, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "79ca75"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xb73, 0x3ff, 0x7}, [@dmm={0x7, 0x24, 0x14, 0xf5fc, 0x80}, @obex={0x5}, @acm={0x4, 0x24, 0x2, 0x3}, @dmm={0x7, 0x24, 0x14, 0xd, 0x7}, @mdlm_detail={0x5f, 0x24, 0x13, 0x8, "c4988a6a19a24b9158224cf65a1c2b798888a03828133b349da8eba330b38cf8d5c99946ee93a26409f2e05ae75c3d27c9b1308d0e439a72719679efc26c67a1373f85934dfc0800773dac5d2481516f93b35fd46189f3bde48515"}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x8, 0x9, 0x7}]}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x19, 0x4, 0xa4}}]}}, {{0x9, 0x4, 0x56, 0x9, 0xa, 0xff, 0x96, 0x46, 0xf8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "e6b8"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5cae, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0x3, 0x30}, [@dmm={0x7, 0x24, 0x14, 0xa5, 0x6}, @obex={0x5, 0x24, 0x15, 0x2}, @dmm={0x7, 0x24, 0x14, 0x5, 0x8d}, @dmm={0x7, 0x24, 0x14, 0x400, 0x8}, @dmm={0x7, 0x24, 0x14, 0x7}]}], [{{0x9, 0x5, 0x5, 0x2, 0x440, 0x6, 0x40, 0x9, [@generic={0x16, 0x23, "6689eaf6943f05ae1bc3619df05b8f68c5a60fd9"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x9, 0x7, 0x27}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1, 0x4, 0x8, [@generic={0xfc, 0xd, "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"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x9}, @generic={0xb9, 0x3, "883cc6f6d4c4918c1872d889b6039339738e118cc3c2dcb97dba1d85b4760abb43914c32f14d34e4c1152265c5b9785fe2863dd781a1bd28d2e40df4c576ae3c302d32aaa3b84883e76d275b0f2e10bbe02b93443bc232758fa0adfb01e80f93b28adf3bd2b44f5b3d3df619526aa1ee1d6da1a183ee57410e07e9a25266ae4f824ae8dc43a08d289f2a411f2c8e4cdce1d58f56102afe5aff46f90390d5767a452f6ba724d7a9f7c33f9f211abda94007ef43d34dd59a"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x0, 0xff, 0x7, 0x69}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0xe, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x6, 0x3, 0x1}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x1, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7b, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x80, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x28, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x8}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x4, 0x86, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x70, 0x1}]}}]}}, {{0x9, 0x4, 0xbf, 0x7, 0x2, 0xe0, 0xaa, 0x5e, 0xfb, [@generic={0x2, 0x24}, @uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x1, 0x3, 0x3, "241e9158494c5a"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x6, 0x2, "9d58cc"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0xa, 0x3, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x9, 0xf, 0xe, [@generic={0x36, 0xe, "a2abdde1729358e3b3ebeddf97f74295e373f958589f3fff2bb4084aa9c341b279eeea145be0f0c53c401b83551e9320ce1d283a"}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xa2, 0x1, 0x9, 0xff, 0xbe}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x480a}}]}) 6.169936872s ago: executing program 1 (id=2689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @remote}, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000043c0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00') r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) ioctl$SG_IO(r4, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffd, 0x6, 0x68, @buffer={0xfb, 0x8a, &(0x7f0000000500)=""/138}, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x10010, 0x4, 0x0}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x25, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500ffffffff000000002100000008000300", @ANYRES32=r2, @ANYBLOB="38002d800a00000002020202020202020200000a0000000101010000000000000004000a0000000202020202020000"], 0x54}}, 0x0) 5.759733119s ago: executing program 4 (id=2690): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000080)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0) read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="3b000000010006", 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 2.918542374s ago: executing program 0 (id=2691): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) ptrace(0x11, r3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xfffffffffffffd75, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfa}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) 2.893619014s ago: executing program 3 (id=2692): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddc26f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b04761c340f273410ad620a1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sysfs$2(0x2, 0x100000000, &(0x7f0000000200)=""/4096) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b5000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x64, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x40c89}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x32}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0xe3}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xc334}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.861569075s ago: executing program 1 (id=2693): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000340)={0xf8, 0x1}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.751192467s ago: executing program 2 (id=2694): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfef, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0xc000000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e20, 0x3, 'lc\x00', 0x2, 0x3, 0x4e}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x6, 0x3, 0x1815}, {@private=0xa010102, 0xce20, 0x4, 0xa, 0x80812f58, 0x12d5c}}, 0x44) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCOUTQ(r5, 0x5411, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) 2.292334354s ago: executing program 4 (id=2695): socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x1c6) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=rdma,p']) 1.381154258s ago: executing program 1 (id=2696): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setpgid(r3, r3) setpgid(0x0, r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) fspick(r5, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c001600421bff9d727dc600fedbdf250500000007fff70005b578516d171e9ff3598a3fe6824d27119527c0143da4a8ebad19600293e09e11b940217c9ee230701b8e8788ee3baea35fe1ca6ffbe99dff53eb7895003ef638fe394d023f117a39566e2398a0c0a39d891f1a4277d69aa0eae233116ad74fe7d4c13880560c19b7559b", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 1.380099569s ago: executing program 2 (id=2697): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 417.146974ms ago: executing program 2 (id=2698): r0 = socket(0x18, 0x6, 0x200000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x410) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = accept4(r1, &(0x7f00000003c0)=@can, &(0x7f0000000440)=0x80, 0x0) sendmsg$nl_generic(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x20010}, 0x0) read$msr(r1, &(0x7f00000016c0)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x41) mount$9p_fd(0x0, 0x0, 0x0, 0x4080, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0400050000000000080005", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="10000400000000002000010000000000"], 0x3c, 0x1) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef", 0xcb}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) 0s ago: executing program 4 (id=2699): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x20002, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0xff}}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9, 0x0, 0x0, r10], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000000480)=r11) kernel console output (not intermixed with test programs): e type 20 has an invalid length. [ 533.070249][ T9461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1291'. [ 535.602406][ T9499] netlink: 'syz.4.1300': attribute type 21 has an invalid length. [ 535.610386][ T9499] netlink: 'syz.4.1300': attribute type 6 has an invalid length. [ 535.618195][ T9499] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1300'. [ 536.805144][ T9515] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 536.812066][ T9515] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 536.812603][ T7468] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 536.829327][ T9515] vhci_hcd vhci_hcd.0: Device attached [ 536.857372][ T9516] vhci_hcd: connection closed [ 537.102682][ T4400] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 538.049733][ T4426] vhci_hcd: stop threads [ 538.055163][ T4426] vhci_hcd: release socket [ 538.090343][ T4426] vhci_hcd: disconnect device [ 538.223937][ T7468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.277336][ T7468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.282765][ T4400] usb 35-1: enqueue for inactive port 0 [ 538.303129][ T7468] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 538.338521][ T7468] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 538.348050][ T7468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.368837][ T7468] usb 1-1: config 0 descriptor?? [ 538.483144][ T4400] vhci_hcd: vhci_device speed not set [ 539.009440][ T7468] ryos 0003:1E7D:3232.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 540.238904][ T7128] usb 1-1: USB disconnect, device number 14 [ 540.804781][ T9560] fuse: Bad value for 'fd' [ 540.967653][ T9541] fido_id[9541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 543.834046][ T9596] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 543.840632][ T9596] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 543.848865][ T9598] vhci_hcd: connection closed [ 543.850264][ T9596] vhci_hcd vhci_hcd.0: Device attached [ 543.865099][ T9594] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1319'. [ 543.875263][ T4629] vhci_hcd: stop threads [ 544.112562][ T7468] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 544.238367][ T4629] vhci_hcd: release socket [ 544.275568][ T4629] vhci_hcd: disconnect device [ 544.325253][ T7468] usb 37-1: enqueue for inactive port 0 [ 544.402648][ T7468] vhci_hcd: vhci_device speed not set [ 545.022736][ T7128] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 545.367263][ T7128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.414456][ T7128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.449868][ T7128] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 545.478706][ T7128] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 545.690570][ T7128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.737970][ T7128] usb 3-1: config 0 descriptor?? [ 545.861716][ T9626] fuse: Bad value for 'fd' [ 546.200301][ T7128] ryos 0003:1E7D:3232.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 546.295934][ T9632] netlink: 'syz.4.1327': attribute type 21 has an invalid length. [ 546.303852][ T9632] netlink: 'syz.4.1327': attribute type 6 has an invalid length. [ 546.311611][ T9632] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1327'. [ 546.781426][ T9651] netlink: 'syz.4.1332': attribute type 21 has an invalid length. [ 546.789453][ T9651] netlink: 'syz.4.1332': attribute type 6 has an invalid length. [ 546.797225][ T9651] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1332'. [ 547.549027][ T7468] usb 3-1: USB disconnect, device number 13 [ 548.425391][ T9677] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1333'. [ 549.131511][ T9690] fuse: Bad value for 'fd' [ 549.629472][ T9700] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1342'. [ 551.888461][ T9728] netlink: 'syz.2.1345': attribute type 21 has an invalid length. [ 551.896796][ T9728] netlink: 'syz.2.1345': attribute type 6 has an invalid length. [ 551.905525][ T9728] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1345'. [ 552.578938][ T4317] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 552.684611][ T4317] usb 4-1: USB disconnect, device number 11 [ 552.996090][ T9754] fuse: Bad value for 'fd' [ 553.122741][ T4317] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 553.314372][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.352627][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.391273][ T4317] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 553.422134][ T4317] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 553.537677][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.567630][ T4317] usb 4-1: config 0 descriptor?? [ 554.282999][ T4317] ryos 0003:1E7D:3232.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.3-1/input0 [ 555.595517][ T7128] usb 4-1: USB disconnect, device number 12 [ 556.683680][ T9815] netlink: 'syz.2.1360': attribute type 21 has an invalid length. [ 556.692044][ T9815] netlink: 'syz.2.1360': attribute type 6 has an invalid length. [ 556.700094][ T9815] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1360'. [ 557.564783][ T9825] fuse: Bad value for 'fd' [ 561.587138][ T9877] netlink: 'syz.2.1374': attribute type 21 has an invalid length. [ 561.596571][ T9877] netlink: 'syz.2.1374': attribute type 6 has an invalid length. [ 561.604607][ T9877] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1374'. [ 562.815673][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.824134][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.838106][ T5348] sl0: compressed packet ignored [ 562.838347][ T5359] sl1: compressed packet ignored [ 562.917047][ T5364] sl2: compressed packet ignored [ 564.215583][ T9910] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1380'. [ 567.090407][ T9943] netlink: 'syz.3.1387': attribute type 21 has an invalid length. [ 567.099784][ T9943] netlink: 'syz.3.1387': attribute type 6 has an invalid length. [ 567.108260][ T9943] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1387'. [ 567.913165][ T9949] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1389'. [ 570.718294][ T9980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1396'. [ 572.051499][T10004] netlink: 'syz.2.1400': attribute type 21 has an invalid length. [ 572.061636][T10004] netlink: 'syz.2.1400': attribute type 6 has an invalid length. [ 572.069837][T10004] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1400'. [ 573.710483][T10024] netlink: 'syz.4.1406': attribute type 21 has an invalid length. [ 573.718410][T10024] netlink: 'syz.4.1406': attribute type 6 has an invalid length. [ 573.726183][T10024] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1406'. [ 574.230806][T10031] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1407'. [ 577.551464][T10074] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1418'. [ 577.693255][T10077] netlink: 'syz.1.1419': attribute type 21 has an invalid length. [ 577.701474][T10077] netlink: 'syz.1.1419': attribute type 6 has an invalid length. [ 577.709757][T10077] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1419'. [ 578.424911][T10086] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1420'. [ 578.959135][T10095] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1422'. [ 583.293447][ C0] sl1: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20460 ms [ 583.301568][ C0] sl1: transmit timed out, driver error? [ 583.302711][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20460 ms [ 583.307251][ C0] sl2: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20470 ms [ 583.315187][ C1] sl0: transmit timed out, driver error? [ 583.323168][ C0] sl2: transmit timed out, driver error? [ 585.180904][T10144] netlink: 'syz.0.1434': attribute type 21 has an invalid length. [ 585.189200][T10144] netlink: 'syz.0.1434': attribute type 6 has an invalid length. [ 585.196992][T10144] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1434'. [ 585.533123][T10164] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1436'. [ 586.614069][T10174] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1439'. [ 587.782218][T10195] netlink: 'syz.2.1442': attribute type 21 has an invalid length. [ 587.791881][T10195] netlink: 'syz.2.1442': attribute type 6 has an invalid length. [ 587.799879][T10195] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1442'. [ 590.047630][T10218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1447'. [ 591.097942][T10243] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1450'. [ 592.572942][T10267] fuse: Bad value for 'fd' [ 594.611244][T10269] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1453'. [ 594.925486][T10280] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1456'. [ 595.385554][T10281] netlink: 'syz.0.1457': attribute type 21 has an invalid length. [ 595.400638][T10281] netlink: 'syz.0.1457': attribute type 6 has an invalid length. [ 595.409311][T10281] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1457'. [ 599.377994][T10336] netlink: 'syz.3.1465': attribute type 21 has an invalid length. [ 599.390577][T10336] netlink: 'syz.3.1465': attribute type 6 has an invalid length. [ 599.398930][T10336] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1465'. [ 601.118728][T10361] netlink: 'syz.3.1469': attribute type 21 has an invalid length. [ 601.127021][T10361] netlink: 'syz.3.1469': attribute type 6 has an invalid length. [ 601.135109][T10361] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1469'. [ 601.585873][T10364] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1471'. [ 601.642903][T10364] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1471'. [ 602.041656][T10369] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1470'. [ 603.859939][T10384] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1474'. [ 605.876243][T10424] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1480'. [ 606.454644][T10430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1484'. [ 606.823451][T10433] netlink: 'syz.2.1483': attribute type 20 has an invalid length. [ 606.867717][T10433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1483'. [ 608.116922][T10440] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 608.123452][T10440] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 608.131233][T10440] vhci_hcd vhci_hcd.0: Device attached [ 608.202656][T10442] vhci_hcd: connection closed [ 608.622522][ T7128] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 608.965954][ T11] vhci_hcd: stop threads [ 608.970219][ T11] vhci_hcd: release socket [ 608.999697][ T11] vhci_hcd: disconnect device [ 610.288287][T10463] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1491'. [ 612.089633][T10486] tmpfs: Unknown parameter 'quota' [ 612.123466][T10486] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1496'. [ 614.085904][T10503] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1501'. [ 614.172647][ T7128] vhci_hcd: vhci_device speed not set [ 615.557006][T10525] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 615.563534][T10525] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 615.571339][T10525] vhci_hcd vhci_hcd.0: Device attached [ 615.600016][T10531] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1506'. [ 615.882536][ T7128] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 615.939888][T10526] vhci_hcd: connection reset by peer [ 615.969162][ T5350] vhci_hcd: stop threads [ 615.974571][ T5350] vhci_hcd: release socket [ 616.621913][ T5350] vhci_hcd: disconnect device [ 616.921881][T10545] tmpfs: Unknown parameter 'quota' [ 616.981919][T10545] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1509'. [ 618.355191][T10560] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1514'. [ 621.124131][ T7128] vhci_hcd: vhci_device speed not set [ 621.138180][T10598] netlink: 'syz.4.1518': attribute type 21 has an invalid length. [ 621.146116][T10598] netlink: 'syz.4.1518': attribute type 6 has an invalid length. [ 621.153910][T10598] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1518'. [ 622.880387][T10624] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1525'. [ 622.911602][T10624] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1525'. [ 624.254301][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.260638][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.269213][ T4846] sl1: compressed packet ignored [ 624.274266][ T5359] sl2: compressed packet ignored [ 624.279445][ T4629] sl0: compressed packet ignored [ 624.364380][T10643] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1528'. [ 625.494556][T10656] tmpfs: Unknown parameter 'quota' [ 625.511173][T10656] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1532'. [ 627.212901][T10681] netlink: 'syz.0.1535': attribute type 21 has an invalid length. [ 627.221398][T10681] netlink: 'syz.0.1535': attribute type 6 has an invalid length. [ 627.229353][T10681] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1535'. [ 629.025287][ T4310] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 629.213434][T10706] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1540'. [ 629.445073][ T4310] usb 3-1: device descriptor read/64, error -71 [ 629.732561][ T4310] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 629.892672][ T4310] usb 3-1: device descriptor read/64, error -71 [ 630.013122][ T4310] usb usb3-port1: attempt power cycle [ 631.014530][ T4310] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 631.261538][ T4310] usb 3-1: device descriptor read/8, error -71 [ 631.295268][T10724] tmpfs: Unknown parameter 'quota' [ 631.323516][T10724] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1543'. [ 633.251093][T10759] netlink: 'syz.3.1549': attribute type 21 has an invalid length. [ 633.262189][T10759] netlink: 'syz.3.1549': attribute type 6 has an invalid length. [ 633.270141][T10759] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1549'. [ 633.713947][T10765] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1548'. [ 633.748618][T10765] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1548'. [ 635.379592][T10792] tmpfs: Unknown parameter 'quota' [ 635.447193][T10792] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1554'. [ 636.506814][T10806] tmpfs: Unknown parameter 'quota' [ 636.588668][T10806] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1556'. [ 639.568242][T10854] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1563'. [ 639.993738][T10858] tmpfs: Unknown parameter 'quota' [ 640.001671][T10858] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1565'. [ 640.157669][T10863] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1568'. [ 640.305472][T10863] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1568'. [ 641.301320][T10876] tmpfs: Unknown parameter 'quota' [ 641.324002][T10876] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1569'. [ 644.083202][T10893] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1573'. [ 644.732779][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20470 ms [ 644.740830][ C1] sl0: transmit timed out, driver error? [ 645.330798][T10906] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1577'. [ 645.379907][ C0] sl2: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 21110 ms [ 645.388080][ C0] sl2: transmit timed out, driver error? [ 645.393764][ C0] sl1: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 21130 ms [ 645.401731][ C0] sl1: transmit timed out, driver error? [ 645.803704][T10908] tmpfs: Unknown parameter 'quota' [ 646.445236][T10907] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1578'. [ 646.780559][T10922] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1581'. [ 647.527316][T10927] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 647.601425][T10927] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1582'. [ 649.917131][T10959] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1589'. [ 650.656921][T10969] tmpfs: Unknown parameter 'quota' [ 650.696268][T10969] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1592'. [ 651.257617][T10974] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1593'. [ 652.408944][T10987] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 652.464185][T10987] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1597'. [ 655.985233][T11023] tmpfs: Unknown parameter 'quota' [ 656.081517][T11023] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1604'. [ 656.537767][T11027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1606'. [ 656.821838][T11015] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1603'. [ 659.443456][ T7170] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 659.961126][ T7170] usb 3-1: device descriptor read/64, error -71 [ 660.339920][T11069] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1615'. [ 660.462517][T11069] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1615'. [ 660.526113][ T7170] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 660.614431][T11073] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1616'. [ 661.042515][ T7170] usb 3-1: device descriptor read/64, error -71 [ 661.150019][T11076] tmpfs: Unknown parameter 'quota' [ 661.158234][T11076] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1617'. [ 661.172700][ T7170] usb usb3-port1: attempt power cycle [ 662.039430][T11081] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1619'. [ 662.102768][ T7170] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 662.238041][ T7170] usb 3-1: device descriptor read/8, error -71 [ 662.439853][T11090] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1620'. [ 665.758805][T11122] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1627'. [ 665.994270][T11122] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1627'. [ 666.173342][T11131] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1629'. [ 672.850547][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1644'. [ 672.863417][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1644'. [ 673.082627][ T4325] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 673.383008][ T4325] usb 1-1: device descriptor read/64, error -71 [ 674.032890][ T4325] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 674.288174][ T4325] usb 1-1: device descriptor read/64, error -71 [ 674.523487][ T4325] usb usb1-port1: attempt power cycle [ 675.163378][T11214] netlink: 'syz.2.1647': attribute type 20 has an invalid length. [ 675.202663][ T4325] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 675.229694][T11214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1647'. [ 675.233195][ T4325] usb 1-1: device descriptor read/8, error -71 [ 677.539942][T11232] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 677.629279][T11232] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1650'. [ 678.107196][T11236] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1652'. [ 678.140939][T11236] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1652'. [ 680.833547][T11263] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 680.855432][T11263] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1659'. [ 681.006084][T11280] netlink: 'syz.3.1661': attribute type 21 has an invalid length. [ 681.014470][T11280] netlink: 'syz.3.1661': attribute type 6 has an invalid length. [ 681.022281][T11280] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1661'. [ 683.885507][T11310] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1667'. [ 683.895451][T11310] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1667'. [ 684.992547][ T4325] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 685.694530][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.700950][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.714966][ T4426] sl0: compressed packet ignored [ 685.741754][ T5375] sl1: compressed packet ignored [ 685.782209][ T4394] sl2: compressed packet ignored [ 686.024404][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.061660][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.152531][ T4325] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.176275][ T4325] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 686.218269][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.256798][T11338] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1673'. [ 686.364510][T11339] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1674'. [ 686.662940][ T4325] usb 1-1: config 0 descriptor?? [ 687.081718][ T4325] ryos 0003:1E7D:3232.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 687.643250][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1676'. [ 687.652812][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1676'. [ 687.748899][T11358] netlink: 'syz.4.1677': attribute type 21 has an invalid length. [ 687.756977][T11358] netlink: 'syz.4.1677': attribute type 6 has an invalid length. [ 687.764859][T11358] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1677'. [ 688.696378][ T4255] usb 1-1: USB disconnect, device number 19 [ 692.143493][ T4255] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 692.385502][ T4255] usb 2-1: no configurations [ 692.390657][ T4255] usb 2-1: can't read configurations, error -22 [ 692.912238][T11425] netlink: 'syz.3.1689': attribute type 21 has an invalid length. [ 692.920532][T11425] netlink: 'syz.3.1689': attribute type 6 has an invalid length. [ 692.928532][T11425] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1689'. [ 693.312158][T11430] tmpfs: Unknown parameter 'quota' [ 693.436586][ T4255] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 693.652958][T11429] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1686'. [ 693.893093][ T4255] usb 2-1: no configurations [ 693.897824][ T4255] usb 2-1: can't read configurations, error -22 [ 693.908190][ T4255] usb usb2-port1: attempt power cycle [ 694.363505][T11448] netlink: 'syz.3.1693': attribute type 21 has an invalid length. [ 694.371838][T11448] netlink: 'syz.3.1693': attribute type 6 has an invalid length. [ 694.379892][T11448] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1693'. [ 694.509077][ T4255] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 694.733481][ T4255] usb 2-1: no configurations [ 694.742458][ T4255] usb 2-1: can't read configurations, error -22 [ 696.863136][T11487] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1700'. [ 697.013564][T11498] tmpfs: Unknown parameter 'quota' [ 697.082111][T11498] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1702'. [ 698.050742][T11508] netlink: 'syz.1.1704': attribute type 21 has an invalid length. [ 698.059797][T11508] netlink: 'syz.1.1704': attribute type 6 has an invalid length. [ 698.067752][T11508] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1704'. [ 698.452546][ T7468] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 698.643960][ T7468] usb 4-1: config index 0 descriptor too short (expected 146, got 18) [ 698.772488][ T7468] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.783185][ T7468] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 698.794723][ T7468] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 698.823208][ T7468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.833631][ T7468] usb 4-1: Product: syz [ 698.837857][ T7468] usb 4-1: Manufacturer: syz [ 698.844197][ T7468] usb 4-1: SerialNumber: syz [ 699.607437][ T7468] usb 4-1: config 0 descriptor?? [ 699.705709][T11536] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1710'. [ 699.879139][ T7468] usb 4-1: USB disconnect, device number 13 [ 701.162641][ T4255] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 701.377451][ T4255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.427902][ T4255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.439049][ T4255] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 701.453093][ T4255] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 701.468890][ T4255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.523432][ T4255] usb 4-1: config 0 descriptor?? [ 702.057453][ T4255] ryos 0003:1E7D:3232.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.3-1/input0 [ 702.259525][T11573] tmpfs: Unknown parameter 'quota' [ 702.331510][T11573] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1716'. [ 702.949431][T11585] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1717'. [ 703.685660][ T4255] usb 4-1: USB disconnect, device number 14 [ 704.159055][T11605] netlink: 'syz.3.1719': attribute type 21 has an invalid length. [ 704.167871][T11605] netlink: 'syz.3.1719': attribute type 6 has an invalid length. [ 704.175783][T11605] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1719'. [ 706.172429][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20460 ms [ 706.172741][ C0] sl1: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20460 ms [ 706.180544][ C1] sl0: transmit timed out, driver error? [ 706.188518][ C0] sl1: transmit timed out, driver error? [ 706.188543][ C0] sl2: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20470 ms [ 706.188561][ C0] sl2: transmit timed out, driver error? [ 707.244511][T11641] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 707.251069][T11641] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 707.265157][T11641] vhci_hcd vhci_hcd.0: Device attached [ 707.319396][T11642] vhci_hcd: connection closed [ 707.321397][ T11] vhci_hcd: stop threads [ 707.672522][ T11] vhci_hcd: release socket [ 707.677260][ T11] vhci_hcd: disconnect device [ 707.713212][T11374] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 707.732128][T11374] usb 33-1: enqueue for inactive port 0 [ 707.836915][T11374] vhci_hcd: vhci_device speed not set [ 708.924269][T11658] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 708.939357][T11658] F2FS-fs (loop7): Unable to read 1th superblock [ 708.953006][T11658] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 708.964196][T11658] F2FS-fs (loop7): Unable to read 2th superblock [ 711.322351][T11660] netlink: 'syz.4.1731': attribute type 21 has an invalid length. [ 711.330339][T11660] netlink: 'syz.4.1731': attribute type 6 has an invalid length. [ 711.338233][T11660] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1731'. [ 711.633064][ T4333] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 712.409246][T11683] netlink: 'syz.4.1734': attribute type 21 has an invalid length. [ 712.417510][T11683] netlink: 'syz.4.1734': attribute type 6 has an invalid length. [ 712.425275][T11683] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1734'. [ 712.782532][ T4333] usb 1-1: device descriptor read/64, error -71 [ 713.931838][ T4333] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 714.774938][ T4333] usb 1-1: config index 0 descriptor too short (expected 146, got 18) [ 714.820601][ T4333] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.841285][ T4333] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 714.913637][ T4333] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 715.492504][ T4333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.750632][ T4333] usb 1-1: Product: syz [ 715.767378][ T4333] usb 1-1: Manufacturer: syz [ 715.942468][ T4333] usb 1-1: SerialNumber: syz [ 716.106194][ T4333] usb 1-1: config 0 descriptor?? [ 716.125610][ T4333] usb 1-1: can't set config #0, error -71 [ 716.246956][ T4333] usb 1-1: USB disconnect, device number 21 [ 716.535797][T11724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1743'. [ 716.564978][T11730] netlink: 'syz.1.1745': attribute type 21 has an invalid length. [ 716.597920][T11730] netlink: 'syz.1.1745': attribute type 6 has an invalid length. [ 716.609285][T11730] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1745'. [ 716.635672][T11739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1746'. [ 716.886373][T11762] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 717.017467][T11762] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1751'. [ 718.792803][ T7468] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 719.001204][ T7468] usb 3-1: config index 0 descriptor too short (expected 146, got 18) [ 719.011824][ T7468] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.360262][T11791] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1758'. [ 719.419614][ T7468] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 719.458541][ T7468] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 719.488299][ T7468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.507451][ T7468] usb 3-1: Product: syz [ 719.521283][ T7468] usb 3-1: Manufacturer: syz [ 719.617404][T11808] netlink: 'syz.3.1761': attribute type 21 has an invalid length. [ 719.632935][T11808] netlink: 'syz.3.1761': attribute type 6 has an invalid length. [ 719.640766][T11808] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1761'. [ 719.715122][ T7468] usb 3-1: SerialNumber: syz [ 719.797799][ T7468] usb 3-1: config 0 descriptor?? [ 720.031986][ T4333] usb 3-1: USB disconnect, device number 22 [ 720.593939][T11837] tmpfs: Unknown parameter 'quota' [ 720.666795][T11837] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1764'. [ 721.368049][T11838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1765'. [ 722.653599][ T4255] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 723.022552][ T4255] usb 4-1: Using ep0 maxpacket: 16 [ 723.031772][ T4255] usb 4-1: config 6 has an invalid interface number: 28 but max is 3 [ 723.081516][ T4255] usb 4-1: config 6 has an invalid interface number: 4 but max is 3 [ 723.106357][ T4255] usb 4-1: config 6 has an invalid interface number: 86 but max is 3 [ 723.195835][ T4255] usb 4-1: config 6 has an invalid interface number: 191 but max is 3 [ 723.335882][ T4255] usb 4-1: config 6 has no interface number 0 [ 723.653874][ T4255] usb 4-1: config 6 has no interface number 1 [ 723.659992][ T4255] usb 4-1: config 6 has no interface number 2 [ 723.706293][ T4255] usb 4-1: config 6 has no interface number 3 [ 723.763383][ T4255] usb 4-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 723.856289][ T4255] usb 4-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 723.894042][ T4255] usb 4-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 723.983007][ T4255] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 724.835199][T11886] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 724.841846][T11886] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 724.849707][T11886] vhci_hcd vhci_hcd.0: Device attached [ 724.858348][T11887] vhci_hcd: connection closed [ 724.859766][ T5377] vhci_hcd: stop threads [ 725.343136][ T5377] vhci_hcd: release socket [ 725.454993][ T4255] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 725.498786][ T5377] vhci_hcd: disconnect device [ 725.519483][T11895] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1774'. [ 725.779286][ T4255] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 725.968245][T11898] netlink: 'syz.3.1775': attribute type 21 has an invalid length. [ 725.978395][T11898] netlink: 'syz.3.1775': attribute type 6 has an invalid length. [ 725.987010][T11898] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1775'. [ 726.218956][ T4255] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 726.252147][ T4255] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 726.469276][ T4255] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 726.548632][ T4255] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 726.561587][ T4255] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 726.572680][ T4255] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 726.583855][ T4255] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 726.594709][ T4255] usb 4-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 726.613643][ T4255] usb 4-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 726.663223][ T4255] usb 4-1: config 6 interface 4 has no altsetting 0 [ 726.702727][ T4255] usb 4-1: config 6 interface 86 has no altsetting 0 [ 726.729819][ T4255] usb 4-1: config 6 interface 191 has no altsetting 0 [ 726.840710][ T4255] usb 4-1: string descriptor 0 read error: -71 [ 726.985735][ T4255] usb 4-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 727.355581][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.046502][ T4255] usb 4-1: can't set config #6, error -71 [ 728.076633][ T4255] usb 4-1: USB disconnect, device number 15 [ 729.040015][T11942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1782'. [ 730.300799][T11970] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1788'. [ 733.856659][T12033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1801'. [ 735.662350][T12053] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 735.679775][T12053] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1806'. [ 735.921347][T12069] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1809'. [ 736.062555][ T4309] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 736.299302][ T4309] usb 1-1: config index 0 descriptor too short (expected 146, got 18) [ 737.067705][ T4309] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 737.077083][ T4309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.086084][ T4309] usb 1-1: Product: syz [ 737.090330][ T4309] usb 1-1: Manufacturer: syz [ 737.129714][ T4309] usb 1-1: SerialNumber: syz [ 737.149206][ T4309] usb 1-1: config 0 descriptor?? [ 737.161901][ T4309] sierra 1-1:0.0: Sierra USB modem converter detected [ 737.365164][ T4309] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 737.436447][ T4309] usb 1-1: USB disconnect, device number 22 [ 737.539494][ T4309] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 737.605801][ T4309] sierra 1-1:0.0: device disconnected [ 737.763164][T12109] netlink: 'syz.4.1816': attribute type 20 has an invalid length. [ 737.835495][T12109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1816'. [ 744.095258][T12177] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1831'. [ 744.289440][T12185] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 744.373830][T12185] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 744.532608][T12185] netlink: 'syz.0.1830': attribute type 3 has an invalid length. [ 744.540495][T12185] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1830'. [ 745.451358][T12205] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 746.993303][T12231] netlink: 'syz.1.1842': attribute type 20 has an invalid length. [ 747.133681][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.140151][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.149842][ T9725] sl0: compressed packet ignored [ 747.155061][ T5373] sl1: compressed packet ignored [ 747.160021][ T5373] sl2: compressed packet ignored [ 747.237340][T12236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1842'. [ 748.718678][T12248] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 748.728036][T12248] F2FS-fs (loop9): Unable to read 1th superblock [ 748.734617][T12248] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 748.743793][T12248] F2FS-fs (loop9): Unable to read 2th superblock [ 751.495212][T12293] tipc: Enabling of bearer rejected, failed to enable media [ 751.512494][ T4255] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 751.706692][ T4255] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.732154][ T4255] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 751.757844][T12301] netlink: 'syz.3.1856': attribute type 20 has an invalid length. [ 751.767570][T12301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1856'. [ 751.792900][ T4255] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 751.801981][ T4255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.857493][ T4255] usb 3-1: config 0 descriptor?? [ 751.929893][T12307] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1857'. [ 752.082059][T12311] netlink: 'syz.4.1859': attribute type 21 has an invalid length. [ 752.090142][T12311] netlink: 'syz.4.1859': attribute type 6 has an invalid length. [ 752.097977][T12311] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1859'. [ 754.197883][T12314] syz.2.1853 (12314) used greatest stack depth: 17728 bytes left [ 754.254049][ T14] usb 3-1: USB disconnect, device number 23 [ 754.805721][T12326] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1862'. [ 755.144352][T12341] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1865'. [ 756.888183][T12367] fuse: Bad value for 'fd' [ 761.614168][T12406] tmpfs: Unknown parameter 'quota' [ 761.634363][T12406] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1879'. [ 763.181666][T12420] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1884'. [ 763.983350][T12430] netlink: 'syz.1.1886': attribute type 21 has an invalid length. [ 763.991587][T12430] netlink: 'syz.1.1886': attribute type 6 has an invalid length. [ 763.999573][T12430] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1886'. [ 765.501001][T12450] netlink: 'syz.4.1891': attribute type 20 has an invalid length. [ 765.565765][T12459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1891'. [ 765.642761][T11374] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 765.853809][T11374] usb 4-1: config index 0 descriptor too short (expected 146, got 18) [ 765.868515][T11374] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 766.592623][T11374] usb 4-1: config 0 has no interface number 0 [ 766.666924][T11374] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 766.789632][T11374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.798176][T11374] usb 4-1: Product: syz [ 766.802517][T11374] usb 4-1: Manufacturer: syz [ 766.807213][T11374] usb 4-1: SerialNumber: syz [ 766.815895][T11374] usb 4-1: config 0 descriptor?? [ 766.830774][T11374] sierra 4-1:0.153: Sierra USB modem converter detected [ 766.928005][T12476] vivid-004: ================= START STATUS ================= [ 766.937166][T12476] vivid-004: Radio HW Seek Mode: Bounded [ 766.944855][T12476] vivid-004: Radio Programmable HW Seek: false [ 766.951220][T12476] vivid-004: RDS Rx I/O Mode: Block I/O [ 766.957003][T12476] vivid-004: Generate RBDS Instead of RDS: false [ 766.963482][T12476] vivid-004: RDS Reception: true [ 766.968612][T12476] vivid-004: RDS Program Type: 0 inactive [ 766.974729][T12476] vivid-004: RDS PS Name: inactive [ 767.009098][T12476] vivid-004: RDS Radio Text: inactive [ 767.015100][T12476] vivid-004: RDS Traffic Announcement: false inactive [ 767.022502][T12476] vivid-004: RDS Traffic Program: false inactive [ 767.029204][T12476] vivid-004: RDS Music: false inactive [ 767.035137][T12476] vivid-004: ================== END STATUS ================== [ 767.833870][T11374] usb 4-1: USB disconnect, device number 16 [ 767.839999][T11374] sierra 4-1:0.153: device disconnected [ 768.074092][T12485] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1897'. [ 768.252398][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 21110 ms [ 768.260437][ C1] sl0: transmit timed out, driver error? [ 768.383871][ C0] sl2: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 21240 ms [ 768.391872][ C0] sl2: transmit timed out, driver error? [ 768.397597][ C0] sl1: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 21250 ms [ 768.405623][ C0] sl1: transmit timed out, driver error? [ 768.883949][T12503] vhci_hcd vhci_hcd.0: failed to lookup sock [ 770.598926][T12523] tmpfs: Unknown parameter 'quota' [ 770.733108][T12523] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1906'. [ 771.057354][T12535] netlink: 'syz.4.1909': attribute type 20 has an invalid length. [ 771.124761][T12535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1909'. [ 772.042503][T11374] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 772.286307][T11374] usb 4-1: Using ep0 maxpacket: 16 [ 772.822298][T11374] usb 4-1: config 6 has an invalid interface number: 28 but max is 3 [ 773.047186][T11374] usb 4-1: config 6 has an invalid interface number: 4 but max is 3 [ 773.468096][T11374] usb 4-1: config 6 has an invalid interface number: 86 but max is 3 [ 773.502606][T11374] usb 4-1: config 6 has an invalid interface number: 191 but max is 3 [ 773.510954][T11374] usb 4-1: config 6 has no interface number 0 [ 773.524565][T11374] usb 4-1: config 6 has no interface number 1 [ 773.530653][T11374] usb 4-1: config 6 has no interface number 2 [ 773.557417][T11374] usb 4-1: config 6 has no interface number 3 [ 773.588711][T11374] usb 4-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 773.622534][T11374] usb 4-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 773.640555][T11374] usb 4-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 773.652661][T11374] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 773.664248][T11374] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 773.675958][T11374] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 773.686922][T11374] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 773.698346][T11374] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 773.708295][T11374] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 773.719258][T11374] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 773.730860][T11374] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 773.741832][T11374] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 773.807189][T11374] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 773.818289][T11374] usb 4-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 773.829383][T11374] usb 4-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 773.841304][T11374] usb 4-1: config 6 interface 4 has no altsetting 0 [ 773.943820][T12599] tmpfs: Unknown parameter 'quota' [ 774.027529][T12599] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1919'. [ 774.382930][T11374] usb 4-1: config 6 interface 86 has no altsetting 0 [ 774.434680][T11374] usb 4-1: config 6 interface 191 has no altsetting 0 [ 774.477107][T12600] block device autoloading is deprecated and will be removed. [ 774.481102][T11374] usb 4-1: string descriptor 0 read error: -71 [ 774.491147][T11374] usb 4-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 774.522074][T11374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.546863][T11374] usb 4-1: can't set config #6, error -71 [ 774.581717][T11374] usb 4-1: USB disconnect, device number 17 [ 775.473688][T12629] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1923'. [ 775.485110][T12629] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 775.549319][T12629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 777.776414][T12658] tipc: Started in network mode [ 777.786844][T12658] tipc: Node identity 164b8ea79b32, cluster identity 4711 [ 777.866088][T12670] tmpfs: Unknown parameter 'quota' [ 778.034714][T11374] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 778.043719][T12658] tipc: Enabled bearer , priority 0 [ 778.084525][T12670] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1931'. [ 778.128265][T12658] tipc: Resetting bearer [ 778.157628][T12662] device syzkaller0 entered promiscuous mode [ 778.196663][T12662] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 778.250546][T12657] tipc: Resetting bearer [ 778.303565][T12657] tipc: Disabling bearer [ 778.432545][T11374] usb 1-1: Using ep0 maxpacket: 32 [ 778.441135][T11374] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 778.492998][T11374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.521880][T11374] usb 1-1: Product: syz [ 778.526210][T11374] usb 1-1: Manufacturer: syz [ 778.530876][T11374] usb 1-1: SerialNumber: syz [ 778.653615][T11374] usb 1-1: config 0 descriptor?? [ 778.675109][T11374] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 780.857813][T11374] gspca_stk1135: reg_w 0xd err -71 [ 780.869456][T11374] gspca_stk1135: serial bus timeout: status=0x00 [ 780.876841][T11374] gspca_stk1135: Sensor write failed [ 780.882296][T11374] gspca_stk1135: serial bus timeout: status=0x00 [ 780.892015][T11374] gspca_stk1135: Sensor write failed [ 780.904606][T11374] gspca_stk1135: serial bus timeout: status=0x00 [ 780.911216][T11374] gspca_stk1135: Sensor read failed [ 780.919104][T11374] gspca_stk1135: serial bus timeout: status=0x00 [ 780.925995][T11374] gspca_stk1135: Sensor read failed [ 780.931283][T11374] gspca_stk1135: Detected sensor type unknown (0x0) [ 780.938243][T11374] gspca_stk1135: serial bus timeout: status=0x00 [ 780.944852][T11374] gspca_stk1135: Sensor read failed [ 780.951354][T11374] gspca_stk1135: serial bus timeout: status=0x00 [ 781.045495][T11374] gspca_stk1135: Sensor read failed [ 781.051145][T11374] gspca_stk1135: serial bus timeout: status=0x00 [ 781.058270][T11374] gspca_stk1135: Sensor write failed [ 781.063859][T11374] gspca_stk1135: serial bus timeout: status=0x00 [ 781.082521][T11374] gspca_stk1135: Sensor write failed [ 781.088573][T11374] stk1135: probe of 1-1:0.0 failed with error -71 [ 781.097722][T11374] usb 1-1: USB disconnect, device number 23 [ 782.001700][T12720] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1940'. [ 782.104496][T12728] tmpfs: Unknown parameter 'quota' [ 782.112113][T12728] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1943'. [ 782.225823][T12731] tipc: Enabled bearer , priority 0 [ 782.233227][T12731] device syzkaller0 entered promiscuous mode [ 782.259983][T12731] tipc: Resetting bearer [ 782.278002][T12730] tipc: Resetting bearer [ 782.313799][ T4333] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 782.416515][T12730] tipc: Disabling bearer [ 783.233932][ T4333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.279961][ T4333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.303674][T12742] netlink: 'syz.4.1946': attribute type 20 has an invalid length. [ 783.327770][ T4333] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 783.372911][T12749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1946'. [ 783.402210][ T4333] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 783.446560][ T4333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.484227][ T4333] usb 4-1: config 0 descriptor?? [ 784.332159][ T4333] ryos 0003:1E7D:3232.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.3-1/input0 [ 784.685980][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1951'. [ 784.695277][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1951'. [ 784.762723][ T4309] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 785.019060][ T4309] usb 2-1: config index 0 descriptor too short (expected 146, got 18) [ 785.705709][ T4309] usb 2-1: config 0 has an invalid interface number: 153 but max is 0 [ 785.705888][ T4333] usb 4-1: USB disconnect, device number 18 [ 785.730382][ T4309] usb 2-1: config 0 has no interface number 0 [ 785.751258][ T4309] usb 2-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 785.761650][ T4309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.770235][ T4309] usb 2-1: Product: syz [ 785.780872][ T4309] usb 2-1: Manufacturer: syz [ 785.806562][ T4309] usb 2-1: SerialNumber: syz [ 785.836247][ T4309] usb 2-1: config 0 descriptor?? [ 786.309177][ T4309] sierra 2-1:0.153: Sierra USB modem converter detected [ 786.479547][ T4309] usb 2-1: USB disconnect, device number 10 [ 787.261118][ T4309] sierra 2-1:0.153: device disconnected [ 789.346134][T12839] netlink: 'syz.1.1962': attribute type 20 has an invalid length. [ 789.590821][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'. [ 789.599774][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1963'. [ 789.609163][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'. [ 789.618232][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1963'. [ 789.699629][T12836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1962'. [ 790.789421][ T7] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 791.025180][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.582567][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.592469][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 791.607562][ T7] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 791.625159][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.669979][ T7] usb 4-1: config 0 descriptor?? [ 791.970891][T12879] tmpfs: Unknown parameter 'quota' [ 792.043454][T12879] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1971'. [ 792.383123][ T7] ryos 0003:1E7D:3232.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.3-1/input0 [ 793.869293][ T4309] usb 4-1: USB disconnect, device number 19 [ 794.038986][T12916] tipc: Started in network mode [ 794.051296][T12916] tipc: Node identity e2b3734b83bc, cluster identity 4711 [ 794.100675][T12916] tipc: Enabled bearer , priority 0 [ 794.124105][T12924] device syzkaller0 entered promiscuous mode [ 794.566330][T12916] tipc: Resetting bearer [ 794.603702][T12904] tipc: Resetting bearer [ 794.778766][T12904] tipc: Disabling bearer [ 794.962279][T12929] netlink: 'syz.0.1979': attribute type 20 has an invalid length. [ 795.099962][T12929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1979'. [ 796.328412][T12950] tmpfs: Unknown parameter 'quota' [ 796.407516][T12950] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1984'. [ 796.933984][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1987'. [ 796.943344][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1987'. [ 796.956550][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1987'. [ 796.965612][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1987'. [ 797.509368][T12965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1991'. [ 800.766586][T13001] tmpfs: Unknown parameter 'quota' [ 800.864361][T13001] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1997'. [ 801.246195][T13004] netlink: 'syz.4.2000': attribute type 20 has an invalid length. [ 801.346477][T13013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2000'. [ 804.101998][T13053] tmpfs: Unknown parameter 'quota' [ 804.217729][T13053] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2010'. [ 804.980749][T13069] netlink: 'syz.3.2015': attribute type 20 has an invalid length. [ 805.168966][T13069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2015'. [ 807.780736][T13087] device syzkaller0 entered promiscuous mode [ 808.574612][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.581242][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.610375][ T5377] sl0: compressed packet ignored [ 808.618459][ T5350] sl2: compressed packet ignored [ 808.630051][ T9725] sl1: compressed packet ignored [ 808.661861][ T4310] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 808.832619][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 808.963956][ T4310] usb 1-1: config index 0 descriptor too short (expected 146, got 18) [ 808.979120][ T4310] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 808.989872][ T4310] usb 1-1: config 0 has no interface number 0 [ 809.004422][ T4310] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 809.018823][ T4310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.027033][ T4310] usb 1-1: Product: syz [ 809.031290][ T4310] usb 1-1: Manufacturer: syz [ 809.039169][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.051164][ T4310] usb 1-1: SerialNumber: syz [ 809.056813][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.067564][ T4310] usb 1-1: config 0 descriptor?? [ 809.078101][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 809.092224][ T7] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 809.104608][ T4310] sierra 1-1:0.153: Sierra USB modem converter detected [ 809.112048][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.130316][ T7] usb 2-1: config 0 descriptor?? [ 809.352043][T13122] Device name cannot be null; rc = [-22] [ 809.904475][ T4310] usb 1-1: USB disconnect, device number 24 [ 809.923533][ T7] ryos 0003:1E7D:3232.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 809.954295][ T4310] sierra 1-1:0.153: device disconnected [ 811.173670][ T4310] usb 2-1: USB disconnect, device number 11 [ 811.492997][T13174] netlink: 'syz.0.2029': attribute type 21 has an invalid length. [ 811.501258][T13174] netlink: 'syz.0.2029': attribute type 6 has an invalid length. [ 811.509143][T13174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2029'. [ 812.893625][T13183] tipc: Enabling of bearer rejected, failed to enable media [ 815.922475][ T4309] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 816.842318][ T4309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.925423][ T4309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.944925][ T4309] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 816.958664][ T4309] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 817.670516][ T4309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.786145][ T4309] usb 2-1: config 0 descriptor?? [ 818.316728][ T4309] ryos 0003:1E7D:3232.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 819.785373][T13270] netlink: 'syz.0.2051': attribute type 20 has an invalid length. [ 819.802263][T13270] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2051'. [ 819.874322][ T4309] usb 2-1: USB disconnect, device number 12 [ 820.452577][ T4309] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 821.103786][ T4309] usb 2-1: config index 0 descriptor too short (expected 146, got 18) [ 821.119527][ T4309] usb 2-1: config 0 has an invalid interface number: 153 but max is 0 [ 821.129191][ T4309] usb 2-1: config 0 has no interface number 0 [ 821.147288][ T4309] usb 2-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 821.157161][ T4309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.198059][ T4309] usb 2-1: Product: syz [ 821.212883][ T4309] usb 2-1: Manufacturer: syz [ 821.231141][ T4309] usb 2-1: SerialNumber: syz [ 821.261399][ T4309] usb 2-1: config 0 descriptor?? [ 821.290321][ T4309] sierra 2-1:0.153: Sierra USB modem converter detected [ 821.496096][ T4309] usb 2-1: USB disconnect, device number 13 [ 821.524663][ T4309] sierra 2-1:0.153: device disconnected [ 822.075767][T13323] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2058'. [ 822.084888][T13323] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 822.093386][T13323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 823.649435][T13342] netlink: 'syz.4.2064': attribute type 21 has an invalid length. [ 823.657404][T13342] netlink: 'syz.4.2064': attribute type 6 has an invalid length. [ 823.665251][T13342] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2064'. [ 823.712315][T13343] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 823.773407][T13343] F2FS-fs (loop1): Unable to read 1th superblock [ 823.807272][T13343] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 823.820636][T13343] F2FS-fs (loop1): Unable to read 2th superblock [ 826.096833][T13375] netlink: 'syz.1.2072': attribute type 20 has an invalid length. [ 826.209925][ T7] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 826.818752][T13383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2072'. [ 826.873980][ T7] usb 4-1: config index 0 descriptor too short (expected 146, got 18) [ 826.889442][ T7] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 826.903300][ T7] usb 4-1: config 0 has no interface number 0 [ 826.988112][ T7] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 827.032728][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.136509][T13392] netlink: 'syz.0.2075': attribute type 21 has an invalid length. [ 827.146478][T13392] netlink: 'syz.0.2075': attribute type 6 has an invalid length. [ 827.154496][T13392] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2075'. [ 827.440957][ T7] usb 4-1: Product: syz [ 827.448279][ T7] usb 4-1: Manufacturer: syz [ 827.460783][ T7] usb 4-1: SerialNumber: syz [ 827.532297][T13396] fuse: Bad value for 'fd' [ 829.052386][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20460 ms [ 829.052556][ C0] sl1: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20460 ms [ 829.060511][ C1] sl0: transmit timed out, driver error? [ 829.068431][ C0] sl1: transmit timed out, driver error? [ 829.068454][ C0] sl2: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20460 ms [ 829.068488][ C0] sl2: transmit timed out, driver error? [ 829.112887][ T7] usb 4-1: config 0 descriptor?? [ 829.177612][ T7] usb 4-1: can't set config #0, error -71 [ 829.212170][ T7] usb 4-1: USB disconnect, device number 20 [ 830.343784][T13423] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 830.467302][T13423] F2FS-fs (loop5): Unable to read 1th superblock [ 830.552019][T13423] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 830.619377][T13423] F2FS-fs (loop5): Unable to read 2th superblock [ 831.632851][T13440] netlink: 'syz.2.2085': attribute type 21 has an invalid length. [ 831.641027][T13440] netlink: 'syz.2.2085': attribute type 6 has an invalid length. [ 831.649122][T13440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2085'. [ 831.936824][T13454] netlink: 'syz.4.2088': attribute type 21 has an invalid length. [ 831.944872][T13454] netlink: 'syz.4.2088': attribute type 6 has an invalid length. [ 831.952836][T13454] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2088'. [ 832.116211][T13456] fuse: Bad value for 'fd' [ 832.142530][ T4310] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 832.344355][ T4310] usb 3-1: config index 0 descriptor too short (expected 146, got 18) [ 832.368883][ T4310] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 832.416379][ T4310] usb 3-1: config 0 has no interface number 0 [ 832.470984][ T4310] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 832.499763][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.518043][ T4310] usb 3-1: Product: syz [ 832.540322][ T4310] usb 3-1: Manufacturer: syz [ 832.558579][ T4310] usb 3-1: SerialNumber: syz [ 832.594294][ T4310] usb 3-1: config 0 descriptor?? [ 832.639313][ T4310] sierra 3-1:0.153: Sierra USB modem converter detected [ 832.822904][ T4310] usb 3-1: USB disconnect, device number 24 [ 832.911338][ T4310] sierra 3-1:0.153: device disconnected [ 833.171732][T13475] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 833.222027][T13475] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2093'. [ 833.814346][T13489] netlink: 'syz.3.2094': attribute type 20 has an invalid length. [ 833.871801][T13489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2094'. [ 833.925456][T13490] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 833.981814][T13490] F2FS-fs (loop5): Unable to read 1th superblock [ 834.008045][T13490] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 834.192841][T13490] F2FS-fs (loop5): Unable to read 2th superblock [ 837.876928][T13534] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 837.956182][T13534] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2105'. [ 839.802541][ T14] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 839.958341][T13562] tmpfs: Unknown parameter 'quota' [ 839.981848][T13562] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2112'. [ 839.995276][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.068084][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.122701][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 840.139123][ T14] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 840.149331][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.165710][ T14] usb 3-1: config 0 descriptor?? [ 841.199212][ T14] ryos 0003:1E7D:3232.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 841.434468][ T14] usb 3-1: USB disconnect, device number 25 [ 841.851736][T13598] netlink: 'syz.4.2117': attribute type 20 has an invalid length. [ 841.899002][T13587] fido_id[13587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 842.040084][T13603] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2117'. [ 842.751542][T13616] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 842.785497][T13616] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2120'. [ 844.662965][T13629] tmpfs: Unknown parameter 'quota' [ 844.740431][T13629] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2123'. [ 847.771210][T13669] Device name cannot be null; rc = [-22] [ 848.640637][T13680] tipc: Started in network mode [ 848.684714][T13680] tipc: Node identity bae29c217a06, cluster identity 4711 [ 848.711296][T13680] tipc: Enabled bearer , priority 0 [ 848.728790][T13686] device syzkaller0 entered promiscuous mode [ 848.886660][T13679] tipc: Resetting bearer [ 848.945425][T13679] tipc: Disabling bearer [ 851.718041][T13725] Device name cannot be null; rc = [-22] [ 852.625043][T13741] tmpfs: Unknown parameter 'quota' [ 852.702691][T13740] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2147'. [ 853.050665][T13744] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 853.067739][T13744] F2FS-fs (loop9): Unable to read 1th superblock [ 853.085266][T13744] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 853.100364][T13744] F2FS-fs (loop9): Unable to read 2th superblock [ 853.150351][T13749] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2149'. [ 853.174041][T13749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2149'. [ 855.621411][T13780] Device name cannot be null; rc = [-22] [ 858.538141][T13807] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 859.099155][T13807] F2FS-fs (loop3): Unable to read 1th superblock [ 859.130246][T13807] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 859.761746][T13807] F2FS-fs (loop3): Unable to read 2th superblock [ 860.117806][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2166'. [ 860.127267][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2166'. [ 861.087782][T13844] fuse: Bad value for 'fd' [ 862.717047][T13860] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2174'. [ 862.802834][T13860] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2174'. [ 863.226458][T13870] netlink: 'syz.1.2177': attribute type 21 has an invalid length. [ 863.238114][T13870] netlink: 'syz.1.2177': attribute type 6 has an invalid length. [ 863.249968][T13870] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2177'. [ 866.420489][T13900] fuse: Bad value for 'fd' [ 867.008230][T13923] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2186'. [ 867.247538][T13923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2186'. [ 868.216102][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 868.231628][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 868.243227][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 868.251208][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 868.263626][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 868.270833][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 868.852787][ T4378] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 868.911439][ T4378] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.930851][T13938] netlink: 'syz.1.2189': attribute type 21 has an invalid length. [ 868.950065][T13938] netlink: 'syz.1.2189': attribute type 6 has an invalid length. [ 869.002784][T13938] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2189'. [ 869.080598][ T4378] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.109274][ T4378] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.374984][ T4378] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.388583][ T4378] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.418418][T13971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2192'. [ 870.023222][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.029747][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.054207][T10152] sl2: compressed packet ignored [ 870.061181][ T4426] sl1: compressed packet ignored [ 870.332504][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 870.385310][T13993] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2195'. [ 870.476560][ T4378] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.950700][ T4378] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.142152][T14005] Bluetooth: MGMT ver 1.22 [ 871.559057][T14010] fuse: Bad value for 'fd' [ 872.412437][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 874.368992][T13943] chnl_net:caif_netlink_parms(): no params data found [ 874.492490][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 874.639036][T13943] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.651743][T13943] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.671639][T13943] device bridge_slave_0 entered promiscuous mode [ 874.740358][T13943] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.748525][T13943] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.758808][T13943] device bridge_slave_1 entered promiscuous mode [ 874.867954][T13943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.927978][T13943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.151937][T13943] team0: Port device team_slave_0 added [ 875.323789][T13943] team0: Port device team_slave_1 added [ 875.505726][T14248] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2207'. [ 875.553361][T13943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.574490][T13943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.572586][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 876.588778][T13943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.708283][T14273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2206'. [ 876.737601][T14273] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.746506][T14273] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.755248][T14273] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.764437][T14273] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.825982][T13943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.862714][T13943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.962679][T13943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.686649][T13943] device hsr_slave_0 entered promiscuous mode [ 879.741502][T13943] device hsr_slave_1 entered promiscuous mode [ 879.918917][T13943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 879.932238][T13943] Cannot create hsr debugfs directory [ 880.017927][T14346] Device name cannot be null; rc = [-22] [ 881.026825][T14350] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2214'. [ 881.128261][T14350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2214'. [ 881.526378][T14374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2217'. [ 885.756514][ T4378] device hsr_slave_0 left promiscuous mode [ 885.819893][ T4378] device hsr_slave_1 left promiscuous mode [ 885.937475][ T4378] batman_adv: batadv0: Interface deactivated: dummy0 [ 886.039858][T14457] Device name cannot be null; rc = [-22] [ 887.643637][ T4378] batman_adv: batadv0: Removing interface: dummy0 [ 887.658098][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.669461][ T4378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.686405][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.739864][ T4378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.797190][ T4378] device bridge_slave_1 left promiscuous mode [ 887.831894][ T4378] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.875518][ T4378] device bridge_slave_0 left promiscuous mode [ 887.921781][ T4378] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.093335][ T4378] device veth1_macvtap left promiscuous mode [ 888.115801][ T4378] device veth0_macvtap left promiscuous mode [ 888.153176][T14465] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 888.153347][ T4378] device veth1_vlan left promiscuous mode [ 888.213571][ T4378] device veth0_vlan left promiscuous mode [ 888.333103][T14465] F2FS-fs (loop7): Unable to read 1th superblock [ 888.339767][T14465] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 888.349348][T14465] F2FS-fs (loop7): Unable to read 2th superblock [ 890.692545][ T4325] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 890.871825][ T4378] team0 (unregistering): Port device team_slave_1 removed [ 890.884361][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.896750][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.907275][ T4325] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 890.916732][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.933893][ T4325] usb 2-1: config 0 descriptor?? [ 890.952432][ T4378] team0 (unregistering): Port device team_slave_0 removed [ 891.028596][ T4378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.086493][ T4378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.139188][ C0] sl2: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 21090 ms [ 891.147303][ C0] sl2: transmit timed out, driver error? [ 891.153052][ C0] sl1: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 21110 ms [ 891.161062][ C0] sl1: transmit timed out, driver error? [ 891.552749][ T4325] usb 2-1: language id specifier not provided by device, defaulting to English [ 891.719655][ T4378] bond0 (unregistering): Released all slaves [ 891.754025][ T4325] uclogic 0003:256C:006D.000D: failed retrieving Huion firmware version: -71 [ 891.762956][ T4325] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 891.770441][ T4325] uclogic: probe of 0003:256C:006D.000D failed with error -71 [ 891.790401][ T4325] usb 2-1: USB disconnect, device number 14 [ 893.140200][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2237'. [ 893.150921][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2237'. [ 893.389687][T14542] Device name cannot be null; rc = [-22] [ 894.287584][T13943] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 897.512161][T13943] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 897.664536][T13943] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 898.603208][T13943] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 899.914951][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2249'. [ 899.945575][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2249'. [ 900.640662][T14626] Device name cannot be null; rc = [-22] [ 901.420353][T13943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.838664][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 901.961154][T14635] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 902.310719][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 903.196839][T14635] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2253'. [ 903.210476][T13943] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.347050][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 903.369552][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 903.421124][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.428260][ T4378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.460567][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 903.546773][T14656] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 904.986727][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 905.422827][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.431167][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.624534][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 905.678733][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 906.197394][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 906.207720][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 906.620860][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 906.652229][T13943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 906.664137][T13943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 906.692009][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 906.758884][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 906.884742][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 907.267102][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 907.276384][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 907.293615][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 907.302251][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 907.311209][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 907.331008][T14673] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2260'. [ 907.340028][T14673] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 907.348094][T14673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 907.974636][T14687] device syzkaller0 entered promiscuous mode [ 910.684732][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 910.723320][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 911.636652][T13943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.689705][T14757] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2274'. [ 914.698776][T14757] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 914.706874][T14757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 914.952360][T14772] netlink: 'syz.1.2275': attribute type 20 has an invalid length. [ 916.093514][T14776] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 916.100069][T14776] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 916.109698][T14776] vhci_hcd vhci_hcd.0: Device attached [ 916.118562][T14777] vhci_hcd: connection closed [ 916.119285][ T9725] vhci_hcd: stop threads [ 916.349291][ T9725] vhci_hcd: release socket [ 916.375677][ T9725] vhci_hcd: disconnect device [ 916.412531][ T4333] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 916.468229][ T4333] usb 37-1: enqueue for inactive port 0 [ 916.517780][T14774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2275'. [ 916.572542][ T4333] vhci_hcd: vhci_device speed not set [ 916.582758][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 916.600186][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 916.640890][T13943] device veth0_vlan entered promiscuous mode [ 916.652654][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 916.670006][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 916.685558][T13943] device veth1_vlan entered promiscuous mode [ 916.704471][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 916.759077][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 918.667226][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 918.687024][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 918.719656][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 918.734018][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 918.745312][T13943] device veth0_macvtap entered promiscuous mode [ 918.758245][T13943] device veth1_macvtap entered promiscuous mode [ 918.782830][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.912378][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.922220][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.165091][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.175925][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.187219][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.238535][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.294804][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.433483][T13943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.444885][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.456064][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.469940][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.484499][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.718844][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.839951][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.856512][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.870317][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.909566][T13943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 921.065961][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 921.077454][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 921.087883][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 921.100972][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 921.864551][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 921.883504][T14835] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 921.890058][T14835] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 922.000280][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 922.073182][T14837] vhci_hcd: connection closed [ 922.075949][T14835] vhci_hcd vhci_hcd.0: Device attached [ 922.089105][T13943] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.248812][ T5348] vhci_hcd: stop threads [ 922.257997][ T5348] vhci_hcd: release socket [ 922.261710][T13943] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.272222][T13943] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.309130][T13943] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.347627][ T5348] vhci_hcd: disconnect device [ 923.056656][T14853] netlink: 'syz.1.2291': attribute type 20 has an invalid length. [ 923.448493][ T5377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.579376][ T5377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.400275][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 924.446415][T14853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2291'. [ 924.535596][ T4394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.581992][ T4394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.611994][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 929.358642][T14950] device vlan2 entered promiscuous mode [ 929.397752][T14950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2305'. [ 931.454136][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.460583][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.490140][ T4426] sl1: compressed packet ignored [ 931.490167][ T5373] sl2: compressed packet ignored [ 931.762407][ T7128] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 932.632416][ T7128] usb 5-1: Using ep0 maxpacket: 16 [ 932.780060][ T7128] usb 5-1: config 6 has an invalid interface number: 28 but max is 3 [ 932.852493][ T7128] usb 5-1: config 6 has an invalid interface number: 4 but max is 3 [ 932.860535][ T7128] usb 5-1: config 6 has an invalid interface number: 86 but max is 3 [ 932.869053][ T7128] usb 5-1: config 6 has an invalid interface number: 191 but max is 3 [ 932.902254][ T7128] usb 5-1: config 6 has no interface number 0 [ 932.922377][ T7128] usb 5-1: config 6 has no interface number 1 [ 932.928505][ T7128] usb 5-1: config 6 has no interface number 2 [ 932.974511][ T7128] usb 5-1: config 6 has no interface number 3 [ 932.995429][ T7128] usb 5-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 933.122475][ T7128] usb 5-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 933.135403][ T7128] usb 5-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 933.148209][ T7128] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 933.160673][ T7128] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 933.173421][ T7128] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 933.186835][ T7128] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 933.199965][ T7128] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 933.211725][ T7128] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 933.224394][ T7128] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 933.236602][ T7128] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 933.249257][ T7128] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 933.262210][ T7128] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 933.285293][ T7128] usb 5-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 933.323136][ T7128] usb 5-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 933.345589][ T7128] usb 5-1: config 6 interface 4 has no altsetting 0 [ 933.352642][ T7128] usb 5-1: config 6 interface 86 has no altsetting 0 [ 933.359673][ T7128] usb 5-1: config 6 interface 191 has no altsetting 0 [ 933.400653][ T7128] usb 5-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 933.412516][ T7128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.420838][ T7128] usb 5-1: Product: syz [ 933.425442][ T7128] usb 5-1: Manufacturer: syz [ 933.431953][ T7128] usb 5-1: SerialNumber: syz [ 934.364471][T15041] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2319'. [ 935.523717][ T7128] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 935.559263][ T7128] usb 5-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 935.584151][ T7128] usb 5-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 935.868294][T15070] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 935.923964][T15070] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2325'. [ 939.818632][T15110] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2333'. [ 940.225524][T15113] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2335'. [ 940.235189][T15113] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 940.253407][T15113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 940.699733][T15114] netlink: 'syz.4.2334': attribute type 20 has an invalid length. [ 941.382328][T15131] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 941.522651][T15130] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2336'. [ 941.531971][T15115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2334'. [ 941.604234][T15131] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2338'. [ 941.771284][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2336'. [ 944.294252][T15181] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2348'. [ 944.589284][T15190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2349'. [ 944.608706][T15190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2349'. [ 944.894920][T15199] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2352'. [ 944.917128][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2352'. [ 945.854670][T15208] tmpfs: Unknown parameter 'quota' [ 946.196492][T15208] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2354'. [ 948.342825][ T127] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 948.469908][T15244] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2361'. [ 948.902493][ T127] usb 3-1: Using ep0 maxpacket: 16 [ 948.911941][ T127] usb 3-1: config 6 has an invalid interface number: 28 but max is 3 [ 949.026976][ T127] usb 3-1: config 6 has an invalid interface number: 4 but max is 3 [ 949.036084][ T127] usb 3-1: config 6 has an invalid interface number: 86 but max is 3 [ 949.044789][ T127] usb 3-1: config 6 has an invalid interface number: 191 but max is 3 [ 949.053049][ T127] usb 3-1: config 6 has no interface number 0 [ 949.060512][ T127] usb 3-1: config 6 has no interface number 1 [ 949.066863][ T127] usb 3-1: config 6 has no interface number 2 [ 949.077541][ T127] usb 3-1: config 6 has no interface number 3 [ 949.089149][ T127] usb 3-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 949.162100][T15257] autofs4:pid:15257:autofs_fill_super: called with bogus options [ 949.332632][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 949.711108][ T127] usb 3-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 949.722674][ T127] usb 3-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 949.733482][ T127] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 949.744219][ T127] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 949.762633][ T127] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 949.765893][ T7] usb 2-1: config index 0 descriptor too short (expected 146, got 18) [ 949.810494][ T7] usb 2-1: config 0 has an invalid interface number: 153 but max is 0 [ 949.823742][ T7] usb 2-1: config 0 has no interface number 0 [ 949.841666][ T7] usb 2-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 949.870078][ T127] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 949.881687][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.881712][ T7] usb 2-1: Product: syz [ 949.899938][ T127] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 949.992441][ T127] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 950.002411][ T7] usb 2-1: Manufacturer: syz [ 950.007648][ T7] usb 2-1: SerialNumber: syz [ 950.008606][ T127] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 950.027458][ T127] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 950.038666][ T127] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 950.065833][ T127] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 950.083383][ T127] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 950.094628][ T127] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 950.106019][ T127] usb 3-1: config 6 interface 4 has no altsetting 0 [ 950.112923][ T127] usb 3-1: config 6 interface 86 has no altsetting 0 [ 950.120307][ T127] usb 3-1: config 6 interface 191 has no altsetting 0 [ 950.143064][ T127] usb 3-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 950.152737][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.160874][ T127] usb 3-1: Product: syz [ 950.168739][ T127] usb 3-1: Manufacturer: syz [ 950.202394][ T127] usb 3-1: SerialNumber: syz [ 950.401361][ T7] usb 2-1: config 0 descriptor?? [ 950.441878][ T127] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 950.574081][ T7] sierra 2-1:0.153: Sierra USB modem converter detected [ 950.778917][ T7] usb 2-1: USB disconnect, device number 15 [ 950.797606][ T7] sierra 2-1:0.153: device disconnected [ 952.032406][ C0] sl1: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20570 ms [ 952.040507][ C0] sl1: transmit timed out, driver error? [ 952.046180][ C0] sl2: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20580 ms [ 952.054173][ C0] sl2: transmit timed out, driver error? [ 953.162480][T15324] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 954.749944][T15325] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 954.878716][T15325] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2372'. [ 955.501954][T15338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2375'. [ 955.777765][T15357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2377'. [ 960.711066][T15438] netlink: 'syz.1.2388': attribute type 20 has an invalid length. [ 961.154114][T15436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2388'. [ 962.397650][T15475] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 962.406864][T15475] F2FS-fs (loop1): Unable to read 1th superblock [ 962.413455][T15475] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 962.422622][T15475] F2FS-fs (loop1): Unable to read 2th superblock [ 963.682425][ T7468] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 964.052587][ T7468] usb 4-1: Using ep0 maxpacket: 16 [ 964.059392][ T7468] usb 4-1: config 6 has an invalid interface number: 28 but max is 3 [ 964.146947][ T7468] usb 4-1: config 6 has an invalid interface number: 4 but max is 3 [ 964.180185][ T7468] usb 4-1: config 6 has an invalid interface number: 86 but max is 3 [ 964.211910][ T7468] usb 4-1: config 6 has an invalid interface number: 191 but max is 3 [ 964.221561][ T7468] usb 4-1: config 6 has no interface number 0 [ 964.245027][ T7468] usb 4-1: config 6 has no interface number 1 [ 964.252654][ T7468] usb 4-1: config 6 has no interface number 2 [ 964.258812][ T7468] usb 4-1: config 6 has no interface number 3 [ 964.266589][ T7468] usb 4-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 964.292176][ T7468] usb 4-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 964.329522][ T7468] usb 4-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 964.365741][ T7468] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 964.396054][ T7468] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 964.456067][ T7468] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 964.501861][ T7468] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 964.536978][ T7468] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 964.556461][ T7468] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 964.585824][ T7468] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 964.611091][ T7468] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 964.682000][ T7468] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 964.718123][ T7468] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 964.787600][ T7468] usb 4-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 964.798949][ T7468] usb 4-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 964.811299][ T7468] usb 4-1: config 6 interface 4 has no altsetting 0 [ 964.824298][ T7468] usb 4-1: config 6 interface 86 has no altsetting 0 [ 964.831262][ T7468] usb 4-1: config 6 interface 191 has no altsetting 0 [ 964.846547][T15501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2399'. [ 964.851520][ T7468] usb 4-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 964.877108][ T7468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.891683][ T7468] usb 4-1: Product: syz [ 964.896403][ T7468] usb 4-1: Manufacturer: syz [ 964.901317][ T7468] usb 4-1: SerialNumber: syz [ 965.809167][T15526] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2402'. [ 965.959891][T15531] tmpfs: Unknown parameter 'quota' [ 965.980932][T15531] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2403'. [ 966.423173][ T7468] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 967.382914][T15551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2407'. [ 967.858223][T15555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2408'. [ 968.839441][T15568] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 968.911071][T15568] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2410'. [ 969.890175][T15589] netlink: 'syz.4.2414': attribute type 20 has an invalid length. [ 970.520716][T15590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2414'. [ 973.303984][T15634] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2421'. [ 973.962433][T15647] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 974.096810][T15647] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2423'. [ 974.331208][T15644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2422'. [ 976.884068][T15698] netlink: 'syz.2.2432': attribute type 20 has an invalid length. [ 977.495162][T15701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2432'. [ 980.389249][T15735] netlink: 'syz.2.2438': attribute type 20 has an invalid length. [ 981.200711][T15733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2438'. [ 981.892584][T11374] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 982.544978][T11374] usb 1-1: config index 0 descriptor too short (expected 146, got 18) [ 982.572183][T11374] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 982.610758][T11374] usb 1-1: config 0 has no interface number 0 [ 982.707454][T15767] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 982.716976][T15767] F2FS-fs (loop3): Unable to read 1th superblock [ 982.724403][T15767] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 982.733912][T15767] F2FS-fs (loop3): Unable to read 2th superblock [ 983.129841][T11374] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 983.157568][T11374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.188066][T11374] usb 1-1: Product: syz [ 983.192258][T11374] usb 1-1: Manufacturer: syz [ 983.202939][T11374] usb 1-1: SerialNumber: syz [ 983.239923][T11374] usb 1-1: config 0 descriptor?? [ 983.281993][T11374] sierra 1-1:0.153: Sierra USB modem converter detected [ 983.464721][T11374] usb 1-1: USB disconnect, device number 25 [ 983.515994][T11374] sierra 1-1:0.153: device disconnected [ 985.011307][T15804] fuse: Bad value for 'fd' [ 989.797472][T15841] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 989.806747][T15841] F2FS-fs (loop7): Unable to read 1th superblock [ 989.818996][T15841] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 989.828333][T15841] F2FS-fs (loop7): Unable to read 2th superblock [ 991.318845][T15864] fuse: Bad value for 'fd' [ 992.941121][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.042795][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.087819][ T5350] sl1: compressed packet ignored [ 993.087867][ T4386] sl2: compressed packet ignored [ 994.973565][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 995.657276][T15893] netlink: 'syz.2.2464': attribute type 20 has an invalid length. [ 995.920955][T15898] tmpfs: Unknown parameter 'quota' [ 996.695250][T15898] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2465'. [ 997.280963][T15902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2464'. [ 998.018461][ T7468] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 998.018580][ T127] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 998.268981][ T7128] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 998.486884][ T127] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 998.550632][ T7128] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 998.569028][ T127] usb 3-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 998.581108][ T127] usb 3-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 998.590685][ T7468] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 999.465173][T15943] fuse: Bad value for 'fd' [ 999.495470][T15938] batman_adv: batadv0: Adding interface: dummy0 [ 999.525595][T15938] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.552444][T15938] batman_adv: batadv0: Interface activated: dummy0 [ 999.586721][T15945] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 999.706413][T15950] netlink: 'syz.0.2472': attribute type 21 has an invalid length. [ 999.714764][T15950] netlink: 'syz.0.2472': attribute type 6 has an invalid length. [ 999.723047][T15950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2472'. [ 1000.061621][T15945] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2474'. [ 1000.215462][T15954] tipc: Enabled bearer , priority 0 [ 1001.076925][T15954] tipc: Resetting bearer [ 1001.311235][T15969] tmpfs: Unknown parameter 'quota' [ 1001.603531][ T4317] tipc: Node number set to 3236207649 [ 1001.744089][T15953] tipc: Disabling bearer [ 1001.995428][T15968] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2478'. [ 1002.582474][T15990] netlink: 'syz.3.2482': attribute type 20 has an invalid length. [ 1002.650973][T15990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2482'. [ 1005.053296][T16013] netlink: 'syz.1.2488': attribute type 21 has an invalid length. [ 1005.061538][T16013] netlink: 'syz.1.2488': attribute type 6 has an invalid length. [ 1005.069554][T16013] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2488'. [ 1005.540729][T16014] fuse: Bad value for 'fd' [ 1007.624464][T16031] tipc: Enabled bearer , priority 0 [ 1007.643175][T16031] tipc: Resetting bearer [ 1007.723893][T16030] tipc: Disabling bearer [ 1007.863994][T16040] tmpfs: Unknown parameter 'quota' [ 1007.916641][T16040] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2492'. [ 1008.833140][T16057] netlink: 'syz.1.2496': attribute type 20 has an invalid length. [ 1010.269281][T16057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2496'. [ 1011.107392][T16090] netlink: 'syz.2.2503': attribute type 21 has an invalid length. [ 1011.116082][T16090] netlink: 'syz.2.2503': attribute type 6 has an invalid length. [ 1011.124046][T16090] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2503'. [ 1011.810300][T16102] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 1011.883414][T16102] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2504'. [ 1012.891902][T16110] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1012.901749][T16110] F2FS-fs (loop9): Unable to read 1th superblock [ 1012.910670][T16110] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1012.920507][T16110] F2FS-fs (loop9): Unable to read 2th superblock [ 1013.270922][T16107] tmpfs: Unknown parameter 'quota' [ 1014.012303][ C0] sl2: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20970 ms [ 1014.020372][ C0] sl2: transmit timed out, driver error? [ 1014.026076][ C0] sl1: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20980 ms [ 1014.034090][ C0] sl1: transmit timed out, driver error? [ 1015.503726][T16142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2514'. [ 1015.532418][T16142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2514'. [ 1016.183677][T16155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2517'. [ 1016.654579][T16156] netlink: 'syz.2.2516': attribute type 21 has an invalid length. [ 1016.671571][T16156] netlink: 'syz.2.2516': attribute type 6 has an invalid length. [ 1016.679608][T16156] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2516'. [ 1018.490160][T16172] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 1018.524876][T16172] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2520'. [ 1020.244174][T16190] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2525'. [ 1020.660417][T16202] tmpfs: Unknown parameter 'quota' [ 1021.293232][T16222] netlink: 'syz.3.2530': attribute type 20 has an invalid length. [ 1021.340746][T16222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2530'. [ 1025.170593][T16267] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2539'. [ 1025.423927][T16273] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 1025.501370][T16273] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2542'. [ 1027.557316][T16285] tmpfs: Unknown parameter 'quota' [ 1028.158032][T16293] tipc: Enabling of bearer rejected, failed to enable media [ 1028.521165][T16306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2549'. [ 1028.533808][T16306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2549'. [ 1029.353301][T16315] netlink: 'syz.4.2552': attribute type 21 has an invalid length. [ 1029.361551][T16315] netlink: 'syz.4.2552': attribute type 6 has an invalid length. [ 1029.369538][T16315] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2552'. [ 1030.016055][T16319] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2551'. [ 1032.698844][T16338] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1032.709198][T16338] F2FS-fs (loop3): Unable to read 1th superblock [ 1032.717454][T16338] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1032.727014][T16338] F2FS-fs (loop3): Unable to read 2th superblock [ 1033.520794][T16347] netlink: 'syz.3.2559': attribute type 20 has an invalid length. [ 1033.562623][T16347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2559'. [ 1035.637300][T16361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2562'. [ 1035.853624][T16371] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2565'. [ 1036.241717][T16361] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.250622][T16361] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.259603][T16361] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.268375][T16361] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.808388][T16377] netlink: 'syz.0.2566': attribute type 21 has an invalid length. [ 1036.819534][T16377] netlink: 'syz.0.2566': attribute type 6 has an invalid length. [ 1036.827572][T16377] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2566'. [ 1037.661181][T16385] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2570'. [ 1041.998596][T16445] netlink: 'syz.3.2580': attribute type 21 has an invalid length. [ 1042.011612][T16445] netlink: 'syz.3.2580': attribute type 6 has an invalid length. [ 1042.019705][T16445] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2580'. [ 1042.164858][T16444] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2579'. [ 1043.781516][T16453] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2582'. [ 1046.068245][T16471] netlink: 'syz.3.2587': attribute type 20 has an invalid length. [ 1046.116850][T16471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2587'. [ 1046.837068][T16482] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1046.874721][T16482] F2FS-fs (loop3): Unable to read 1th superblock [ 1046.926886][T16482] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1046.938911][T16482] F2FS-fs (loop3): Unable to read 2th superblock [ 1049.698349][T16508] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2593'. [ 1049.992151][T16499] netlink: 'syz.1.2592': attribute type 21 has an invalid length. [ 1050.001076][T16499] netlink: 'syz.1.2592': attribute type 6 has an invalid length. [ 1050.009272][T16499] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2592'. [ 1050.542109][T16515] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2597'. [ 1051.063354][T16525] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2599'. [ 1051.092432][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2599'. [ 1051.112750][T16524] tipc: Enabling of bearer rejected, failed to enable media [ 1052.271375][T16549] netlink: 'syz.2.2603': attribute type 20 has an invalid length. [ 1053.301622][T16550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2603'. [ 1053.915674][T16563] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2605'. [ 1053.924655][T16563] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1053.932827][T16563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1054.336988][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.343578][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.371821][T16360] sl2: compressed packet ignored [ 1054.422330][ T4386] sl1: compressed packet ignored [ 1056.036972][T16580] netlink: 'syz.3.2609': attribute type 21 has an invalid length. [ 1056.046191][T16580] netlink: 'syz.3.2609': attribute type 6 has an invalid length. [ 1056.054450][T16580] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2609'. [ 1057.024109][T16597] tipc: Enabling of bearer rejected, failed to enable media [ 1057.268221][T16605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2615'. [ 1057.657013][T16618] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2617'. [ 1057.666683][T16618] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1058.023898][T16618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1059.459574][ T7128] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1059.474516][ T7468] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1059.492909][ T127] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1059.937496][ T7468] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 1059.951235][ T7128] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 1059.973727][ T127] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 1060.073523][ T7468] usb 4-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 1060.429311][ T7468] usb 4-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 1060.463060][T16640] netlink: 'syz.1.2621': attribute type 21 has an invalid length. [ 1060.471252][T16640] netlink: 'syz.1.2621': attribute type 6 has an invalid length. [ 1060.479126][T16640] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2621'. [ 1062.219298][T16665] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2626'. [ 1063.203856][T16673] tipc: Enabling of bearer rejected, failed to enable media [ 1064.292342][ T4325] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1064.532325][ T4325] usb 2-1: Using ep0 maxpacket: 16 [ 1064.542026][ T4325] usb 2-1: config 6 has an invalid interface number: 28 but max is 3 [ 1064.552475][ T4325] usb 2-1: config 6 has an invalid interface number: 4 but max is 3 [ 1064.561042][ T4325] usb 2-1: config 6 has an invalid interface number: 86 but max is 3 [ 1064.575618][ T4325] usb 2-1: config 6 has an invalid interface number: 191 but max is 3 [ 1064.584364][ T4325] usb 2-1: config 6 has no interface number 0 [ 1064.590802][ T4325] usb 2-1: config 6 has no interface number 1 [ 1064.597766][ T4325] usb 2-1: config 6 has no interface number 2 [ 1064.604544][ T4325] usb 2-1: config 6 has no interface number 3 [ 1064.670259][ T4325] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1064.681513][ T4325] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1064.693647][ T4325] usb 2-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1064.867732][T16695] netlink: 'syz.0.2632': attribute type 21 has an invalid length. [ 1064.878174][T16695] netlink: 'syz.0.2632': attribute type 6 has an invalid length. [ 1064.886175][T16695] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2632'. [ 1065.067529][ T4325] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 1065.079400][ T4325] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 1065.090399][ T4325] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 1065.276159][ T4325] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 1065.339052][ T4325] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 1065.502755][ T4325] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 1065.616508][T16704] netlink: 'syz.4.2634': attribute type 20 has an invalid length. [ 1065.733872][ T4325] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 1065.854140][ T4325] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 1065.916227][ T4325] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1065.937490][ T4325] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1065.968577][ T4325] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 1065.995639][ T4325] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 1066.129520][ T4325] usb 2-1: config 6 interface 4 has no altsetting 0 [ 1066.139586][ T4325] usb 2-1: config 6 interface 86 has no altsetting 0 [ 1066.148811][ T4325] usb 2-1: config 6 interface 191 has no altsetting 0 [ 1066.362347][ T4325] usb 2-1: string descriptor 0 read error: -71 [ 1066.368745][ T4325] usb 2-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 1066.378425][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.432643][ T4325] usb 2-1: can't set config #6, error -71 [ 1066.797232][ T4325] usb 2-1: USB disconnect, device number 16 [ 1067.110298][T16703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2634'. [ 1069.107485][T16742] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2639'. [ 1069.348199][T16742] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1069.413340][T16742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1069.774568][T16754] tipc: Enabling of bearer rejected, failed to enable media [ 1069.930603][T16764] netlink: 'syz.4.2643': attribute type 21 has an invalid length. [ 1069.938946][T16764] netlink: 'syz.4.2643': attribute type 6 has an invalid length. [ 1069.949046][T16764] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2643'. [ 1071.269117][T16784] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2648'. [ 1071.316749][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2648'. [ 1072.688760][T16805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2651'. [ 1074.804464][T16825] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2654'. [ 1074.813651][ C0] sl1: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20460 ms [ 1074.813752][ C0] sl1: transmit timed out, driver error? [ 1074.813793][ C0] sl2: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20460 ms [ 1074.813828][ C0] sl2: transmit timed out, driver error? [ 1075.420212][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1075.490289][T16825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1075.506636][T16828] netlink: 'syz.0.2656': attribute type 20 has an invalid length. [ 1075.778740][T16834] netlink: 'syz.2.2657': attribute type 21 has an invalid length. [ 1075.787120][T16834] netlink: 'syz.2.2657': attribute type 6 has an invalid length. [ 1075.795214][T16834] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2657'. [ 1077.424189][T16845] autofs4:pid:16845:autofs_fill_super: called with bogus options [ 1080.437994][T16870] fuse: Bad value for 'fd' [ 1080.522476][T11374] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1082.369881][T16865] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2665'. [ 1082.409262][T16865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2665'. [ 1083.871096][T16903] netlink: 'syz.2.2673': attribute type 21 has an invalid length. [ 1083.879966][T16903] netlink: 'syz.2.2673': attribute type 6 has an invalid length. [ 1083.891043][T16903] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2673'. [ 1085.598025][T16915] autofs4:pid:16915:autofs_fill_super: called with bogus options [ 1086.825631][T16927] netlink: 'syz.3.2678': attribute type 20 has an invalid length. [ 1086.861602][T16927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2678'. [ 1087.396002][T16930] fuse: Bad value for 'fd' [ 1089.639332][T16938] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2683'. [ 1094.262808][T16974] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 1094.661511][T16987] netlink: 'syz.0.2691': attribute type 20 has an invalid length. [ 1094.736917][T16987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2691'. [ 1095.068156][T16990] fuse: Bad value for 'fd' [ 1095.876732][T16986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2692'. [ 1096.138261][T17001] Device name cannot be null; rc = [-22] [ 1097.266405][ T28] INFO: task udevd:4258 blocked for more than 143 seconds. [ 1097.274224][ T28] Not tainted 6.1.146-syzkaller #0 [ 1097.282331][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1097.291352][ T28] task:udevd state:D stack:25824 pid:4258 ppid:3637 flags:0x00004002 [ 1097.804814][ T28] Call Trace: [ 1097.813034][ T28] [ 1097.819736][ T28] __schedule+0x10e9/0x40d0 [ 1097.831548][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 1097.992471][ T28] ? __mutex_trylock_common+0x80/0x250 [ 1098.009601][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1098.016269][ T28] schedule+0xb9/0x180 [ 1098.650130][ T28] schedule_preempt_disabled+0xf/0x20 [ 1098.662404][ T28] __mutex_lock+0x555/0xaf0 [ 1098.667089][ T28] ? __mutex_lock+0x3a5/0xaf0 [ 1098.671880][ T28] ? uevent_show+0x16c/0x320 [ 1098.676904][ T28] ? mutex_lock_nested+0x10/0x10 [ 1098.691967][ T28] uevent_show+0x16c/0x320 [ 1098.702922][ T28] dev_attr_show+0x50/0xb0 [ 1098.717461][ T28] sysfs_kf_seq_show+0x349/0x4b0 [ 1098.725295][ T28] ? device_get_ownership+0xa0/0xa0 [ 1098.731063][ T28] seq_read_iter+0x49b/0xd50 [ 1098.764765][ T28] ? common_file_perm+0x171/0x1c0 [ 1098.769919][ T28] vfs_read+0x434/0x920 [ 1098.777697][ T28] ? kernel_read+0x1e0/0x1e0 [ 1098.787054][ T28] ? __rseq_handle_notify_resume+0x392/0x1220 [ 1098.797212][ T28] ? __fdget_pos+0x2b5/0x360 [ 1098.804228][ T28] ksys_read+0x143/0x240 [ 1098.808672][ T28] ? vfs_write+0x960/0x960 [ 1098.814380][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1098.820000][ T28] do_syscall_64+0x4c/0xa0 [ 1098.850104][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1098.860240][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1098.869263][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1098.875789][ T28] RIP: 0033:0x7f51df8a7407 [ 1098.880317][ T28] RSP: 002b:00007ffe647ca030 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1098.896574][ T28] RAX: ffffffffffffffda RBX: 00007f51e00aa880 RCX: 00007f51df8a7407 [ 1098.905033][ T28] RDX: 0000000000001000 RSI: 000055aefc138d30 RDI: 0000000000000008 [ 1098.913618][ T28] RBP: 00007f51df9efff0 R08: 0000000000000000 R09: 0000000000000000 [ 1098.921813][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 1098.942487][ T28] R13: 00007f51df9efea0 R14: 0000000000000000 R15: 000055aefc12ef30 [ 1098.950976][ T28] [ 1098.954215][ T28] INFO: task udevd:4885 blocked for more than 145 seconds. [ 1098.969117][ T28] Not tainted 6.1.146-syzkaller #0 [ 1098.976018][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1098.985966][ T28] task:udevd state:D stack:23040 pid:4885 ppid:3637 flags:0x00004002 [ 1098.998583][ T28] Call Trace: [ 1099.001922][ T28] [ 1099.005064][ T28] __schedule+0x10e9/0x40d0 [ 1099.009816][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 1099.015931][ T28] ? __mutex_trylock_common+0x80/0x250 [ 1099.021541][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1099.027837][ T28] schedule+0xb9/0x180 [ 1099.032001][ T28] schedule_preempt_disabled+0xf/0x20 [ 1099.037483][ T28] __mutex_lock+0x555/0xaf0 [ 1099.042116][ T28] ? __mutex_lock+0x3a5/0xaf0 [ 1099.047019][ T28] ? uevent_show+0x16c/0x320 [ 1099.051791][ T28] ? mutex_lock_nested+0x10/0x10 [ 1099.057426][ T28] uevent_show+0x16c/0x320 [ 1099.062019][ T28] dev_attr_show+0x50/0xb0 [ 1099.066700][ T28] sysfs_kf_seq_show+0x349/0x4b0 [ 1099.072524][ T28] ? device_get_ownership+0xa0/0xa0 [ 1099.077882][ T28] seq_read_iter+0x49b/0xd50 [ 1099.082686][ T28] ? common_file_perm+0x171/0x1c0 [ 1099.087874][ T28] vfs_read+0x434/0x920 [ 1099.092103][ T28] ? kernel_read+0x1e0/0x1e0 [ 1099.096906][ T28] ? __rseq_handle_notify_resume+0x392/0x1220 [ 1099.103282][ T28] ? __fdget_pos+0x2b5/0x360 [ 1099.107972][ T28] ksys_read+0x143/0x240 [ 1099.113511][ T28] ? vfs_write+0x960/0x960 [ 1099.118020][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1099.123907][ T28] do_syscall_64+0x4c/0xa0 [ 1099.128661][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1099.133969][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1099.139066][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1099.146155][ T28] RIP: 0033:0x7f51df8a7407 [ 1099.150981][ T28] RSP: 002b:00007ffe647ca030 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1099.159612][ T28] RAX: ffffffffffffffda RBX: 00007f51e00aa880 RCX: 00007f51df8a7407 [ 1099.167932][ T28] RDX: 0000000000001000 RSI: 000055aefc12da10 RDI: 0000000000000008 [ 1099.176918][ T28] RBP: 00007f51df9efff0 R08: 0000000000000000 R09: 0000000000000000 [ 1099.185437][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 1099.193987][ T28] R13: 00007f51df9efea0 R14: 0000000000000000 R15: 000055aefc12ef30 [ 1099.202280][ T28] [ 1099.207357][ T28] [ 1099.207357][ T28] Showing all locks held in the system: [ 1099.219622][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1099.309873][ T28] #0: ffffffff8cb2b7b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1099.324806][ T28] 1 lock held by rcu_tasks_trace/13: [ 1099.331228][ T28] #0: ffffffff8cb2bfd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1099.343768][ T28] 2 locks held by kworker/1:1/26: [ 1099.348891][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1099.359655][ T28] #1: ffffc90000a1fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1099.371442][ T28] 1 lock held by khungtaskd/28: [ 1099.378289][ T28] #0: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1099.390954][ T28] 5 locks held by kworker/1:2/127: [ 1099.396388][ T28] #0: ffff88801d29d938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1099.407568][ T28] #1: ffffc90002637d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1099.419370][ T28] #2: ffff888145723190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x5210 [ 1099.430602][ T28] #3: ffff888054785190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 1099.439963][ T28] #4: ffff88805964f118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 1099.449389][ T28] 1 lock held by klogd/3626: [ 1099.454373][ T28] #0: ffff8880b8e3aa98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa5/0x140 [ 1099.466731][ T28] 2 locks held by getty/4028: [ 1099.471444][ T28] #0: ffff88814d5cc098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1099.482406][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 1099.492778][ T28] 4 locks held by udevd/4258: [ 1099.497657][ T28] #0: ffff88807e2f5d58 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 1099.506794][ T28] #1: ffff888078fedc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0 [ 1099.516296][ T28] #2: ffff888059423490 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3b0 [ 1099.529139][ T28] #3: ffff888054785190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 [ 1099.538293][ T28] 1 lock held by syz-executor/4272: [ 1099.544197][ T28] #0: ffffffff8cb30af8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 [ 1099.557402][ T28] 4 locks held by udevd/4282: [ 1099.562373][ T28] #0: ffff88802f6df2f0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 1099.572693][ T28] #1: ffff888056318888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0 [ 1099.582818][ T28] #2: ffff8880579e9e88 (kn->active#26){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x3b0 [ 1099.592556][ T28] #3: ffff88807d35f190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x22/0x90 [ 1099.602133][ T28] 4 locks held by udevd/4885: [ 1099.607325][ T28] #0: ffff88807cb5b2f0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 1099.616595][ T28] #1: ffff888023b9fc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0 [ 1099.629433][ T28] #2: ffff8880620ee578 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3b0 [ 1099.642013][ T28] #3: ffff88807d81d190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 [ 1099.651710][ T28] 5 locks held by kworker/1:10/7128: [ 1099.657126][ T28] #0: ffff88801d29d938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1099.668536][ T28] #1: ffffc90003817d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1099.681014][ T28] #2: ffff888145798190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x5210 [ 1099.690927][ T28] #3: ffff88807d81d190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 1099.715580][ T28] #4: ffff888054ec9118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 1099.725040][ T28] 6 locks held by kworker/1:12/7468: [ 1099.730487][ T28] #0: ffff88801d29d938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1099.741467][ T28] #1: ffffc90004b37d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1099.752978][ T28] #2: ffff888144f80190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x5210 [ 1099.762302][ T28] #3: ffff88807d35f190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 1099.771738][ T28] #4: ffff888026674118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 1099.782262][ T28] #5: ffffffff8c9d79b0 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_trylock+0xec/0x2a0 [ 1099.793444][ T28] [ 1099.795825][ T28] ============================================= [ 1099.795825][ T28] [ 1099.804396][ T28] NMI backtrace for cpu 0 [ 1099.808830][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0 [ 1099.816723][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1099.826783][ T28] Call Trace: [ 1099.830052][ T28] [ 1099.832969][ T28] dump_stack_lvl+0x168/0x22e [ 1099.837643][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 1099.843006][ T28] ? show_regs_print_info+0x12/0x12 [ 1099.848188][ T28] ? load_image+0x3b0/0x3b0 [ 1099.852676][ T28] ? vprintk_emit+0x571/0x680 [ 1099.857343][ T28] ? printk_sprint+0x460/0x460 [ 1099.862093][ T28] nmi_cpu_backtrace+0x3f4/0x470 [ 1099.867295][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1099.873543][ T28] ? _printk+0xcc/0x110 [ 1099.877703][ T28] ? load_image+0x3b0/0x3b0 [ 1099.882194][ T28] ? load_image+0x3b0/0x3b0 [ 1099.886687][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1099.892759][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1099.898854][ T28] watchdog+0xeee/0xf30 [ 1099.903021][ T28] ? watchdog+0x1ed/0xf30 [ 1099.907338][ T28] kthread+0x29d/0x330 [ 1099.911403][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1099.916422][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1099.921021][ T28] ret_from_fork+0x1f/0x30 [ 1099.925434][ T28] [ 1099.928469][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.935512][ T28] Sending NMI from CPU 0 to CPUs 1: [ 1099.940761][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10 [ 1099.952853][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1099.959732][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0 [ 1099.968241][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1099.978315][ T28] Call Trace: [ 1099.981619][ T28] [ 1099.984552][ T28] dump_stack_lvl+0x168/0x22e [ 1099.989228][ T28] ? memcpy+0x3c/0x60 [ 1099.993212][ T28] ? show_regs_print_info+0x12/0x12 [ 1099.998400][ T28] ? load_image+0x3b0/0x3b0 [ 1100.002925][ T28] panic+0x2c9/0x710 [ 1100.006807][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1100.011296][ T28] ? watchdog+0xf1c/0xf30 [ 1100.015752][ T28] watchdog+0xf2d/0xf30 [ 1100.019896][ T28] ? watchdog+0x1ed/0xf30 [ 1100.024297][ T28] kthread+0x29d/0x330 [ 1100.028349][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1100.033364][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1100.038285][ T28] ret_from_fork+0x1f/0x30 [ 1100.042728][ T28] [ 1100.046057][ T28] Kernel Offset: disabled [ 1100.050374][ T28] Rebooting in 86400 seconds..