last executing test programs: 33m31.389706009s ago: executing program 32 (id=43): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) 32m30.793838954s ago: executing program 33 (id=235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 32m22.372176167s ago: executing program 34 (id=272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c000000090603000000000000000000050000000900020073797a3100000000050001000700000034000780060004404e21000005000700840000000c00018008000140ac14143b05000300060000000c00148008000140"], 0x5c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) 30m23.1371096s ago: executing program 35 (id=665): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ffdbdf250900020073797a300000002008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a31"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 30m10.579663523s ago: executing program 36 (id=692): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) unshare(0x62040200) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000140)=0x8003, 0x2) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x16) 29m42.732860263s ago: executing program 37 (id=733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = gettid() setns(0xc9, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd35, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 29m21.20124104s ago: executing program 38 (id=760): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x6, 0x0, 0x9, 0x0, 0xfffffe0000000002, 0xfa14, 0xffffffff}, 0x0) unshare(0x42060680) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x4000000a00}) socket(0x11, 0x6, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r4, 0x5, 0x4002) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) socket$inet6_udp(0xa, 0x2, 0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x80, 0x2, 0x0, 0x0, 0xffffeffa) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 29m21.141381212s ago: executing program 39 (id=761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x3, 0x8000003, 0x1, 0x1, 0x8, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0xa, 0xa, 0xeb04}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="80", 0x1, 0x4044840, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 11m38.85849559s ago: executing program 9 (id=5288): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x6, 0x1000006, 0x13, 0xffffffffffffffff, 0x20000000) syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) r7 = mmap$IORING_OFF_SQES(0x0, 0x7fffffff, 0x1000002, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r3, r5, r7, &(0x7f0000000100)=@IORING_OP_URING_CMD=@generic_cmd_sqes={0x2e, 0x20, 0x0, 0x0, {0x5}, {0x0, 0x1}, 0x0, 0x0, 0x1, {0x2, 0x0, 0x5}}) tkill(r0, 0x13) tkill(r0, 0x12) r8 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x6, "fde61e0ee4a6"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r8, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000300)={0x40, 0xf, 0x4, "0df18785"}, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r9, &(0x7f0000000200), 0x0) waitid(0x1, r0, 0x0, 0x8, &(0x7f00000003c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) 11m38.022326s ago: executing program 9 (id=5291): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010101, 0x100, 0xd, 0x400, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x2000, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x4d4, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000001}, {{@in=@empty, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x1, 0x2, 0x48, 0x4, 0xffff, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfdef) 11m36.874385819s ago: executing program 9 (id=5298): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x80000, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x21, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x40, 0x1}) syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0xe, '\x00', {0xe, 0x6, "ea785a", 0x7fff, 0x2f, 0xff, @empty, @mcast2}}}}}}}, 0x0) syz_io_uring_setup(0x4036c, &(0x7f0000000480)={0x0, 0x7c33, 0x4, 0x3, 0x27b, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000500), &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 11m36.677304943s ago: executing program 9 (id=5303): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 11m34.709955557s ago: executing program 8 (id=5309): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x19b60, 0x49a41}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 11m34.610269779s ago: executing program 8 (id=5310): syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 11m34.544568036s ago: executing program 8 (id=5311): timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$dsp(&(0x7f000031f000/0x4000)=nil, 0x4000, 0xc, 0x110, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) get_mempolicy(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000006000/0x2000)=nil, 0x2) ftruncate(0xffffffffffffffff, 0xffff) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) 11m34.402261616s ago: executing program 8 (id=5312): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404c05a00b0000000000010902"], 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 11m33.445795345s ago: executing program 9 (id=5315): socket(0x28, 0x801, 0x0) socket$packet(0x11, 0x3, 0x300) syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) fcntl$dupfd(r0, 0x406, r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r1], 0x18}, 0x2000c8d0) 11m32.945835481s ago: executing program 9 (id=5319): ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001800)=@newqdisc={0x860, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x6, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x3, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ed, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x7, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1fb, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x1, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7fd, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x0, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x3, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x4001, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10002, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0xf, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x0, 0xc, 0x7ff, 0x1}, {0x4, 0x1, 0x0, 0xf, 0x0, 0x73}, 0xebd1, 0x5, 0x1480}}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x48088}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 11m32.655207024s ago: executing program 5 (id=5321): syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 11m32.458141984s ago: executing program 5 (id=5322): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x2}, {}, {0xfff2, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11m32.163852287s ago: executing program 5 (id=5324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x40d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) 11m32.128503423s ago: executing program 8 (id=5325): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="124353012008ba00000037510800", 0x5b, 0x4008005, &(0x7f00000000c0)={0x11, 0xd, r1, 0x1, 0x7, 0x6, @local}, 0x14) 11m32.052085839s ago: executing program 5 (id=5326): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000600)=ANY=[]) 11m31.946673699s ago: executing program 5 (id=5327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffbfffc0c000980080001ca9a000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x4c, 0xd, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '|'}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0xc080) 11m31.94641429s ago: executing program 8 (id=5328): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400c600"/20, @ANYRES32=r2, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c0002800800040088"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20008040) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x69) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) 11m31.694169512s ago: executing program 5 (id=5331): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffff, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x22, 0x0, 0x0, @broadcast}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) 11m31.227776743s ago: executing program 1 (id=5333): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e6040500000101020301090220000101"], 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="440100001000010001000000fddbdf25fe880000000000000000000000000001e0000002000000000000000000000000000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 11m29.498566932s ago: executing program 1 (id=5336): syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x19, 0x16, 0xbd, 0x8, 0x112a, 0x5, 0xdf89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x5, 0x80, 0x3, "", [{{0x9, 0x4, 0x1, 0x2, 0x0, 0x84, 0xc, 0x4, 0x7f}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000003080), 0xce4, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r0, 0x0, 0x100000000000000}, 0x38) 11m28.21672979s ago: executing program 1 (id=5340): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x177}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d", 0xab}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba726e7a41eb30a916df698ab241b5e4991f41d34afd2c2b99f259ca582f09c8027c3381e64070aad6ec7f7c7c973d55a33eca3cc4245bf488a497ac966aa13111ec3033172a3512e97700b3b58b621ccb71309d6ccafb05352718a362d14c38501ec45a522fb86563533d1f46e3fc182181ca5583096ec3849fb5db88ba0bcf565ec4665280402275fe98483a6c6b9da4665196aeff9b18c1e4fe3f19f1ff296702a10a27684a6cf0f9c003fd4b20127b080bf82664e51c36a4c4681dd332c6cb068cd11d13dae5f798032ed4237ad618305d0bffb28dac3b13bd148e2d7e8798ce2deb330ec7cdfdc5cddd477f3ffd22b884e91529740da75f625d46b48a6aa4c40adced23638423cdc401bdd228b0590432be970bd3c9c7b2a6ee3dabba57022a222a4b012ef17e0385b92f034fe82ff530fddd4285581275eecee8a722e309654717a604b740ca6dbc00e7c878d6dd35f55413fc7c8cb1fd3beda73c7db9903f9d44c4faf64095a03292fda7cb99bc539914391c4ca199090cd", 0x4ad) 11m27.988666773s ago: executing program 1 (id=5341): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x901000, 0x25) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0xa0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11m26.446373203s ago: executing program 1 (id=5345): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x9}}, 0x14}}, 0x4004804) 11m26.287959402s ago: executing program 1 (id=5346): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x11}], 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000080)="01", 0x1) 11m25.435917209s ago: executing program 3 (id=5348): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 11m25.303778917s ago: executing program 3 (id=5349): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x8, 0x1, 0x1}) 11m25.279414283s ago: executing program 3 (id=5350): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000600)='4', 0x1}], 0x1, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0x4) 11m24.999960403s ago: executing program 3 (id=5351): pipe2$watch_queue(0x0, 0x80) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000600)=ANY=[]) 11m24.823496145s ago: executing program 3 (id=5352): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000001}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m23.478695778s ago: executing program 3 (id=5353): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x38, r1, 0x1, 0x30bd26, 0x25dfdc03, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x38}}, 0x0) 11m17.60760585s ago: executing program 40 (id=5319): ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001800)=@newqdisc={0x860, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x6, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x3, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ed, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x7, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1fb, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x1, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7fd, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x0, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x3, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x4001, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10002, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0xf, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x0, 0xc, 0x7ff, 0x1}, {0x4, 0x1, 0x0, 0xf, 0x0, 0x73}, 0xebd1, 0x5, 0x1480}}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x48088}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 11m16.56727021s ago: executing program 41 (id=5328): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400c600"/20, @ANYRES32=r2, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c0002800800040088"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20008040) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x69) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) 11m16.388025366s ago: executing program 42 (id=5331): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffff, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x22, 0x0, 0x0, @broadcast}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) 11m11.093042886s ago: executing program 43 (id=5346): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x11}], 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000080)="01", 0x1) 11m8.08953991s ago: executing program 44 (id=5353): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x38, r1, 0x1, 0x30bd26, 0x25dfdc03, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x38}}, 0x0) 11.76460142s ago: executing program 6 (id=6823): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)='$', 0x1}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10.558695891s ago: executing program 6 (id=6835): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) clock_nanosleep(0x2, 0x0, &(0x7f0000000000), 0xfffffffffffffffe) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) epoll_create1(0x80000) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f0000002400)='proc\x00', 0x0, 0x0) unlink(&(0x7f0000000300)='./proc_mnt/net/sctp/assocs/file0\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 9.702530778s ago: executing program 6 (id=6836): r0 = socket$inet6_udp(0xa, 0x2, 0x0) fgetxattr(r0, 0x0, &(0x7f0000000380)=""/254, 0xfe) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 9.224179263s ago: executing program 6 (id=6839): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=r2, @ANYBLOB="000000000000000014000300626174616476300000000000000000007d6c73db27a08975c65cdf3b611077c197f8a9a0a0bf93f74bd696070e4265c41f5fe3a512339be8457660b7e91def081da0ce64817224a9c12d93daedfc46c0a8a2334f180bec5485f103e5e3af17"], 0x34}, 0x1, 0x0, 0x0, 0x2044}, 0x0) 8.710346879s ago: executing program 6 (id=6843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\b\x00'], 0xdc) 7.190030868s ago: executing program 4 (id=6847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000100)=""/127, 0x7f}], 0x1, 0x6, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) write(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x20000090, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 6.439146219s ago: executing program 0 (id=6850): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) read$eventfd(r0, 0x0, 0x0) 6.351651857s ago: executing program 6 (id=6851): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000340)=ANY=[], 0x0) 6.155996324s ago: executing program 4 (id=6853): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x0, 0x0, 0xfffffffd, 0x8}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 6.068315171s ago: executing program 0 (id=6854): socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x9}, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x3fc}, @timestamp, @window={0x3, 0x8, 0x62}, @timestamp, @sack_perm, @sack_perm], 0x9) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x3b000000000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) r2 = memfd_create(&(0x7f0000000840)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842.\x17c`\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10d\x89J\xb3zz\x83\x81\x0f\xbd\xdf\xff9**\xb7\xfa\xa9h;<\xe8\x85\v\x9e\x02\x03\xad\xa4\x11R\x14\xbc\xc8\xb5\x89\xffx\x98%O\xf8n~1G\x89\x96\x1d\xecz\xe8\x04\x86G%\xa0\xd5[\xda\xc9', 0x4) fallocate(r2, 0x0, 0x0, 0x100000000) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendto$inet6(r0, &(0x7f0000000100)='e', 0x1, 0x7ddfdbdfafa51cdd, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x40000800, 0x12) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) ptrace$ARCH_SET_GS(0x1e, 0xffffffffffffffff, &(0x7f0000000080), 0x1001) sendto$inet6(r0, &(0x7f0000000140)="8b911d02a8c5c4ceba1cab", 0xb, 0x800, &(0x7f0000000000)={0xa, 0x0, 0x4, @private1}, 0x1c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 5.934916196s ago: executing program 4 (id=6856): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 5.34285257s ago: executing program 4 (id=6859): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x40204706, &(0x7f0000000200)) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="01000000000000000100000001000000010000000100000000000000200000002000000001000000") 5.126711403s ago: executing program 0 (id=6861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3120900"], 0x0) write$binfmt_script(r1, 0x0, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.869502986s ago: executing program 2 (id=6862): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) 4.757863178s ago: executing program 2 (id=6863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000100)=""/127, 0x7f}], 0x1, 0x6, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) write(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x20000090, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 4.580920974s ago: executing program 0 (id=6864): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa808090508102000"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002040)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000540)='a', 0x1) 3.753778756s ago: executing program 2 (id=6865): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) 3.659583828s ago: executing program 4 (id=6866): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b010001000000000109022000010100803209"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) 3.332948578s ago: executing program 2 (id=6867): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="68c9", 0x2}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1, &(0x7f0000000400)=""/16, 0xfffffffffffffde6}, 0x40) 2.942042195s ago: executing program 7 (id=6868): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)='\x00'/23, 0x17) 2.891639278s ago: executing program 7 (id=6869): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 2.426426985s ago: executing program 2 (id=6870): syz_emit_ethernet(0x32, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x7, 0x24, 0x68, 0x0, 0xc, 0x21, 0x0, @rand_addr=0x64010100, @local}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x200000, 0x0, 0x400, 0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 2.290306232s ago: executing program 7 (id=6871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 1.879295242s ago: executing program 2 (id=6872): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100090000000a00000000000018420000"], 0x24}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xc, @private1, 0x14}, 0xfffffffffffffecb, 0x0, 0x0, 0x0, 0x56}, 0x20000800) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 1.314125167s ago: executing program 0 (id=6873): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) 1.274927263s ago: executing program 7 (id=6874): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) 1.098251649s ago: executing program 0 (id=6875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000100)=""/127, 0x7f}], 0x1, 0x6, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) write(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x20000090, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 514.441717ms ago: executing program 7 (id=6876): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x25, 0x19, 0x8, 0xcd, 0x30, 0x10, 0xaa, 0x6, 0xfd, 0x8, 0x6, 0x40, 0x0, 0x79}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30"], 0x7c}}, 0x4000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff}) 412.012538ms ago: executing program 4 (id=6877): pipe(&(0x7f0000000140)) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket(0x8, 0x5, 0x5f68) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000002c0), 0x4) write(r0, &(0x7f0000000140)='off', 0x3) write(r0, &(0x7f0000000180)='on', 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0x80049363, 0x0) 0s ago: executing program 7 (id=6878): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1234567890\n', 0xb) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='\n', 0x1) kernel console output (not intermixed with test programs): B device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1933.384582][ T5717] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1933.384619][ T5717] usb 3-1: can't read configurations, error -61 [ 1933.385102][ T5717] usb usb3-port1: attempt power cycle [ 1933.728840][ T5717] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1933.751877][ T5717] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1933.772718][ T5717] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1933.772804][ T5717] usb 3-1: can't read configurations, error -61 [ 1933.944031][ T5717] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1933.959647][ T5717] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1933.970142][ T5717] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1933.970225][ T5717] usb 3-1: can't read configurations, error -61 [ 1933.972245][ T5717] usb usb3-port1: unable to enumerate USB device [ 1934.103089][T30533] gretap1: entered promiscuous mode [ 1934.774069][T30551] syzkaller0: entered promiscuous mode [ 1934.774150][T30551] syzkaller0: entered allmulticast mode [ 1936.783476][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1936.783561][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1936.783580][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xee87 instead [ 1936.783601][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb901 instead [ 1936.783618][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1936.783635][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1936.783661][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1936.783695][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1936.783726][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1936.783755][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1936.783772][T30566] jffs2: Further such events for this erase block will not be printed [ 1936.784066][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1936.784082][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1936.784097][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xee87 instead [ 1936.784114][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb901 instead [ 1936.784131][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1936.784147][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1936.784163][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1936.784183][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1936.784212][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1936.793360][T30566] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1936.793387][T30566] jffs2: Further such events for this erase block will not be printed [ 1936.793711][T30566] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1936.793722][T30566] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1937.113986][T30569] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1937.795575][T30584] netlink: 'syz.7.5914': attribute type 10 has an invalid length. [ 1937.964188][T30584] syz_tun: entered promiscuous mode [ 1938.046542][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1938.057249][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1938.057275][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xee87 instead [ 1938.057296][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb901 instead [ 1938.057312][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1938.057328][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1938.057343][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1938.057362][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1938.057389][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1938.057416][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1938.057431][T30595] jffs2: Further such events for this erase block will not be printed [ 1938.057788][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1938.057808][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1938.057827][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xee87 instead [ 1938.057847][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb901 instead [ 1938.057864][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1938.057881][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1938.057898][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1938.057918][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1938.057946][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1938.057974][T30595] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1938.057990][T30595] jffs2: Further such events for this erase block will not be printed [ 1938.088380][T30595] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1938.088400][T30595] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1938.165830][T30597] netlink: 'syz.0.5916': attribute type 1 has an invalid length. [ 1938.391872][T30584] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1938.610984][T30608] CacheFiles: Failed to register: -95 [ 1938.622789][T30597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1938.846327][T30599] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1939.818679][T30599] bond1: (slave bond2): Enslaving as an active interface with a down link [ 1939.865038][T30601] gretap1: entered promiscuous mode [ 1940.326466][T30611] ieee80211 phy94: Failed to add default virtual iface [ 1940.466313][T30627] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1941.038655][T22198] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1941.209180][T22198] usb 5-1: Using ep0 maxpacket: 32 [ 1941.220096][T22198] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1941.232340][T22198] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1941.238070][T22198] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1941.238115][T22198] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1941.238143][T22198] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1941.238169][T22198] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1941.303054][T22198] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1941.303906][T22198] usb 5-1: Product: syz [ 1941.303921][T22198] usb 5-1: Manufacturer: syz [ 1941.303931][T22198] usb 5-1: SerialNumber: syz [ 1941.410609][T22198] usb 5-1: config 0 descriptor?? [ 1941.424448][T22198] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1941.556217][T22198] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1941.654677][T18504] usb 5-1: USB disconnect, device number 23 [ 1941.672347][T18504] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1941.686405][T30665] CacheFiles: Failed to register: -95 [ 1941.900459][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1941.911127][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1941.911151][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xee87 instead [ 1941.911172][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb901 instead [ 1941.911189][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1941.911205][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1941.911222][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1941.911242][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1941.911272][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1941.911301][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1941.911318][T30670] jffs2: Further such events for this erase block will not be printed [ 1941.911612][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1941.911630][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1941.911648][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xee87 instead [ 1941.911667][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb901 instead [ 1941.911706][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1941.911724][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1941.911741][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1941.911761][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1941.911790][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1941.911819][T30670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1941.911836][T30670] jffs2: Further such events for this erase block will not be printed [ 1941.912479][T30670] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1941.912493][T30670] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1942.592841][T30686] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1944.129011][T30724] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1945.725570][T30734] Invalid logical block size (8192) [ 1947.135560][T30757] netlink: 'syz.6.5960': attribute type 10 has an invalid length. [ 1948.158081][T30757] syz_tun: entered promiscuous mode [ 1948.220214][T30757] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1949.485611][T28013] hid-generic 0005:046D:C082.0042: unbalanced collection at end of report description [ 1949.503711][T28013] hid-generic 0005:046D:C082.0042: probe with driver hid-generic failed with error -22 [ 1949.725823][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1949.741232][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1949.741260][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xee87 instead [ 1949.741280][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb901 instead [ 1949.741297][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1949.741314][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1949.741331][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1949.741353][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1949.741384][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1949.741417][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1949.741434][T30784] jffs2: Further such events for this erase block will not be printed [ 1949.741790][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1949.741811][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1949.741830][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xee87 instead [ 1949.741852][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb901 instead [ 1949.741869][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1949.741887][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1949.741905][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1949.741928][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1949.741960][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1949.741993][T30784] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1949.742011][T30784] jffs2: Further such events for this erase block will not be printed [ 1949.742376][T30784] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1949.742389][T30784] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1950.381037][T10442] kworker/1:4 (10442) used greatest stack depth: 14848 bytes left [ 1954.442677][T30859] netlink: 'syz.6.5992': attribute type 10 has an invalid length. [ 1955.440047][ T37] audit: type=1800 audit(1788050131.423:206): pid=30861 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.5991" name="syzkaller0" dev="sda1" ino=2118 res=0 errno=0 [ 1956.268165][T30890] Invalid logical block size (8192) [ 1956.628858][T30909] overlayfs: failed to resolve './file2': -2 [ 1956.908526][T18504] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1957.060386][T18504] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1957.062068][T18504] usb 3-1: config 0 has no interfaces? [ 1957.076003][T18504] usb 3-1: config 0 has no interfaces? [ 1957.083895][T18504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.085883][T18504] usb 3-1: Product: syz [ 1957.085902][T18504] usb 3-1: Manufacturer: syz [ 1957.085917][T18504] usb 3-1: SerialNumber: syz [ 1957.123909][T18504] usb 3-1: config 0 descriptor?? [ 1957.370966][T29038] usb 3-1: USB disconnect, device number 35 [ 1960.518375][ T37] audit: type=1800 audit(1788050136.503:207): pid=30935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.6021" name="syzkaller0" dev="sda1" ino=2118 res=0 errno=0 [ 1961.203800][T29038] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1961.380195][T29038] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1961.392775][T29038] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 1961.392804][T29038] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1961.392824][T29038] usb 1-1: config 4 has no interface number 0 [ 1961.392867][T29038] usb 1-1: config 4 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1961.392888][T29038] usb 1-1: config 4 interface 44 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1961.398086][T29038] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.398114][T29038] usb 1-1: Product: syz [ 1961.398130][T29038] usb 1-1: Manufacturer: syz [ 1961.398144][T29038] usb 1-1: SerialNumber: syz [ 1961.716681][T30961] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1961.897685][T29038] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1961.909652][T29038] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1961.920006][T29038] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1961.920077][T29038] usb 1-1: media controller created [ 1961.923042][T29038] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1961.998218][T29038] DVB: Unable to find symbol dib7000p_attach() [ 1961.998236][T29038] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1962.245956][T29038] rc_core: IR keymap rc-dib0700-rc5 not found [ 1962.246016][T29038] Registered IR keymap rc-empty [ 1962.246302][T29038] dvb-usb: could not initialize remote control. [ 1962.246312][T29038] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1962.360409][T28013] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1962.456449][T30949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1962.457097][T30949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1962.533629][T28013] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1962.541572][T28013] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1962.541630][T28013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.595679][T28013] as10x_usb: device has been detected [ 1962.601031][T29038] usb 1-1: USB disconnect, device number 11 [ 1962.609629][T28013] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1962.650143][T28013] usb 5-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 1962.728251][T28013] as10x_usb: error during firmware upload part1 [ 1962.735353][T28013] Registered device Abilis Systems DVB-Titan [ 1962.887887][T29038] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 1963.390640][T28013] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1963.551899][T28013] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1963.563666][T28013] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.563724][T28013] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1963.636039][T28013] as10x_usb: device has been detected [ 1963.637025][T28013] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1963.674696][T28013] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1963.689948][T28013] as10x_usb: error during firmware upload part1 [ 1963.698175][T28013] Registered device Abilis Systems DVB-Titan [ 1964.821334][ T4918] usb 3-1: USB disconnect, device number 36 [ 1964.900277][ T4918] Unregistered device Abilis Systems DVB-Titan [ 1964.912414][ T4918] as10x_usb: device has been disconnected [ 1965.630175][T31047] batman_adv: batadv0: Adding interface: veth0 [ 1965.630281][T31047] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1965.630315][T31047] batman_adv: batadv0: Interface activated: veth0 [ 1965.637957][T31047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1965.637985][T31047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1965.703559][T31047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1965.704519][T31047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1965.723852][T29038] usb 5-1: USB disconnect, device number 24 [ 1965.794520][T29038] Unregistered device Abilis Systems DVB-Titan [ 1965.799663][T29038] as10x_usb: device has been disconnected [ 1965.851409][T31049] overlayfs: failed to resolve 'work': -2 [ 1965.917090][T31047] batman_adv: batadv0: Interface deactivated: veth0 [ 1965.917178][T31047] batman_adv: batadv0: Removing interface: veth0 [ 1966.235103][T31062] batman_adv: batadv0: Adding interface: veth0 [ 1966.235168][T31062] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1966.235200][T31062] batman_adv: batadv0: Interface activated: veth0 [ 1966.299810][T31062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1966.299887][T31062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1966.341003][T31062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1966.341071][T31062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1966.400246][T31062] batman_adv: batadv0: Interface deactivated: veth0 [ 1966.407016][T31062] batman_adv: batadv0: Removing interface: veth0 [ 1967.574753][T31095] CacheFiles: Failed to register: -95 [ 1967.798457][T29103] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1967.959351][T29103] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1967.964066][T29103] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1967.964087][T29103] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1967.964116][T29103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.031689][T29103] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 1968.056750][T29103] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 1968.168434][T29038] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1968.304872][T31112] No fuse device found [ 1968.321422][T31112] No fuse device found [ 1968.321463][T31112] No fuse device found [ 1968.321498][T31112] No fuse device found [ 1968.321529][T31112] No fuse device found [ 1968.321561][T31112] No fuse device found [ 1968.321603][T31112] No fuse device found [ 1968.321635][T31112] No fuse device found [ 1968.321669][T31112] No fuse device found [ 1968.321715][T31112] No fuse device found [ 1968.366323][T29038] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1968.377337][T29038] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1968.377367][T29038] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1968.377408][T29038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.426807][T29038] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1969.481480][T31126] netlink: 'syz.4.6080': attribute type 1 has an invalid length. [ 1970.100533][T29038] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1970.279237][T29038] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1970.290961][T29038] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1970.291258][T29038] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1970.291399][T29038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.601904][T18505] usb 3-1: USB disconnect, device number 37 [ 1970.635281][T29103] usb 1-1: USB disconnect, device number 12 [ 1970.709639][T29038] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1970.783781][T29103] idmouse 1-1:1.0: disconnected [ 1970.789791][T18505] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1970.797936][T18505] spcp8x5 3-1:1.0: device disconnected [ 1971.148656][T18505] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1971.314540][T18505] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1971.324874][T18505] usb 3-1: not running at top speed; connect to a high speed hub [ 1971.324917][T18505] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1971.326185][T18505] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1971.326221][T18505] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1971.326238][T18505] usb 3-1: config 14 has no interface number 0 [ 1971.326253][T18505] usb 3-1: config 14 has no interface number 1 [ 1971.326320][T18505] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1971.326342][T18505] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 1971.326391][T18505] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1971.326425][T18505] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 1971.326451][T18505] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 1971.326476][T18505] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid maxpacket 1280, setting to 64 [ 1971.326502][T18505] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1971.326527][T18505] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1971.326544][T18505] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1971.458423][T18505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.458453][T18505] usb 3-1: Product: syz [ 1971.458467][T18505] usb 3-1: Manufacturer: syz [ 1971.458481][T18505] usb 3-1: SerialNumber: syz [ 1971.921956][T18505] legousbtower 3-1:14.57: interrupt endpoints not found [ 1972.067203][ T37] audit: type=1800 audit(1788050148.053:208): pid=31158 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.6091" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1972.329573][T18505] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1972.349547][T18505] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1972.546100][T31178] No source specified [ 1972.818175][T31183] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1972.872699][T29038] usb 5-1: USB disconnect, device number 25 [ 1972.895354][T29038] idmouse 5-1:1.0: disconnected [ 1973.701386][ C1] usb 3-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 1973.732820][T28013] usb 3-1: USB disconnect, device number 38 [ 1973.993162][T28013] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 1975.972190][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.650846][T31254] netlink: 'syz.7.6120': attribute type 1 has an invalid length. [ 1976.681336][T31254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1978.162846][T31279] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 1978.620023][T29038] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1978.859435][T29038] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1978.861477][T29038] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1978.861505][T29038] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1978.861545][T29038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1978.982477][T29038] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 1979.291369][T29038] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 1979.461345][T31295] netlink: 'syz.4.6132': attribute type 1 has an invalid length. [ 1979.787383][T31306] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 1980.788624][T31334] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1981.749282][T28013] usb 1-1: USB disconnect, device number 13 [ 1982.076224][T28013] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1982.500080][T28013] spcp8x5 1-1:1.0: device disconnected [ 1982.516169][T31362] netlink: 'syz.0.6147': attribute type 1 has an invalid length. [ 1982.706487][T31362] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1982.946311][T31363] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1982.972516][T31363] bond3: (slave bond4): Enslaving as an active interface with a down link [ 1983.162142][T31381] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1983.536344][T31388] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1985.288449][T29103] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1985.456479][T29103] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1985.457838][T29103] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1985.457894][T29103] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.512080][T29103] as10x_usb: device has been detected [ 1985.518550][T29103] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1985.558122][T29103] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1985.788950][T29103] as10x_usb: error during firmware upload part1 [ 1985.796345][T29103] Registered device Abilis Systems DVB-Titan [ 1985.875372][T31448] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6168'. [ 1986.840934][T31476] netlink: 'syz.0.6174': attribute type 1 has an invalid length. [ 1988.064925][T27670] usb 7-1: USB disconnect, device number 6 [ 1988.176777][T31508] netlink: 'syz.6.6180': attribute type 1 has an invalid length. [ 1988.237655][T27670] Unregistered device Abilis Systems DVB-Titan [ 1988.261867][T27670] as10x_usb: device has been disconnected [ 1988.480118][T31508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1989.128941][ T37] audit: type=1800 audit(1788050165.113:209): pid=31533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.6184" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1989.517719][T31548] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 1989.868445][T29103] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1990.036165][T29103] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1990.046938][T29103] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 1990.046995][T29103] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1990.047050][T29103] usb 1-1: config 4 has no interface number 0 [ 1990.047097][T29103] usb 1-1: config 4 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1990.047119][T29103] usb 1-1: config 4 interface 44 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1990.066134][T29103] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.066163][T29103] usb 1-1: Product: syz [ 1990.066178][T29103] usb 1-1: Manufacturer: syz [ 1990.066193][T29103] usb 1-1: SerialNumber: syz [ 1991.218868][T29103] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1991.260338][T29103] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1991.269507][T29103] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1991.271395][T29103] usb 1-1: media controller created [ 1991.285584][T29103] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1991.318563][T27392] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1991.505725][T27392] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1991.516111][T27392] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1991.516224][T27392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1991.593831][T31573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1991.598213][T31573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1991.645984][T27392] as10x_usb: device has been detected [ 1991.653211][T27392] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1991.752757][T29103] DVB: Unable to find symbol dib7000p_attach() [ 1991.752775][T29103] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1991.816420][T27392] usb 5-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 1991.898208][T27392] as10x_usb: error during firmware upload part1 [ 1991.911602][T27392] Registered device Abilis Systems DVB-Titan [ 1991.975610][T29103] rc_core: IR keymap rc-dib0700-rc5 not found [ 1991.975690][T29103] Registered IR keymap rc-empty [ 1991.975993][T29103] dvb-usb: could not initialize remote control. [ 1991.976004][T29103] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1991.983844][T29103] usb 1-1: USB disconnect, device number 14 [ 1992.049598][T29103] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 1992.812237][T31605] fuse_uring_cmd: 3150 callbacks suppressed [ 1992.822853][T31605] No fuse device found [ 1992.838867][T31605] No fuse device found [ 1992.838908][T31605] No fuse device found [ 1992.838942][T31605] No fuse device found [ 1992.838976][T31605] No fuse device found [ 1992.839010][T31605] No fuse device found [ 1992.839042][T31605] No fuse device found [ 1992.839077][T31605] No fuse device found [ 1992.839108][T31605] No fuse device found [ 1992.839142][T31605] No fuse device found [ 1992.883678][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1992.883705][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1992.883723][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xee87 instead [ 1992.883742][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb901 instead [ 1992.883759][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1992.883776][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1992.883793][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1992.883813][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1992.883850][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1992.883893][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1992.883910][T31608] jffs2: Further such events for this erase block will not be printed [ 1992.886766][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1992.886788][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1992.886806][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xee87 instead [ 1992.886825][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb901 instead [ 1992.886851][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1992.886868][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1992.886885][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1992.886905][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1992.886935][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1992.886964][T31608] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1992.886981][T31608] jffs2: Further such events for this erase block will not be printed [ 1992.887449][T31608] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1992.887461][T31608] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1993.162053][T31613] syzkaller0: entered promiscuous mode [ 1993.167639][T31613] syzkaller0: entered allmulticast mode [ 1993.300017][T27392] usb 5-1: USB disconnect, device number 26 [ 1993.555381][T27392] Unregistered device Abilis Systems DVB-Titan [ 1993.564243][T27392] as10x_usb: device has been disconnected [ 1995.556839][ T37] audit: type=1800 audit(1788050171.543:210): pid=31618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.6209" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1996.227154][T28012] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1996.379463][T28012] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1996.381582][T28012] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 1996.381612][T28012] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1996.381632][T28012] usb 1-1: config 4 has no interface number 0 [ 1996.381706][T28012] usb 1-1: config 4 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1996.381729][T28012] usb 1-1: config 4 interface 44 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1996.384382][T28012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.384405][T28012] usb 1-1: Product: syz [ 1996.384419][T28012] usb 1-1: Manufacturer: syz [ 1996.384434][T28012] usb 1-1: SerialNumber: syz [ 1996.642773][T31636] ftl_cs: FTL header not found. [ 1996.875051][T28012] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1996.904287][T28012] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1996.913575][T28012] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1996.920658][T28012] usb 1-1: media controller created [ 1996.924619][T28012] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1997.150449][T28012] DVB: Unable to find symbol dib7000p_attach() [ 1997.150510][T28012] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1997.288697][T28012] rc_core: IR keymap rc-dib0700-rc5 not found [ 1997.288760][T28012] Registered IR keymap rc-empty [ 1997.289068][T28012] dvb-usb: could not initialize remote control. [ 1997.289079][T28012] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1997.534162][T31663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1997.543223][T31663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1997.607188][T31636] block2mtd: mtd1: [/dev/loop0] erase_size = 0KiB [1] [ 1997.638550][T29038] usb 1-1: USB disconnect, device number 15 [ 1997.776821][T29038] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 1998.128818][ T37] audit: type=1800 audit(1788050174.103:211): pid=31674 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.6224" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1998.630320][T29038] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1998.805009][T29038] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1998.822974][T29038] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1998.823074][T29038] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1998.823112][T29038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.888949][T29038] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 2000.205577][T28013] usb 5-1: USB disconnect, device number 27 [ 2000.222680][T28013] idmouse 5-1:1.0: disconnected [ 2003.728643][T28013] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 2003.879152][T28013] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2003.891959][T28013] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 2003.891995][T28013] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2003.932018][T28013] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.940278][T28013] usb 7-1: Product: syz [ 2003.940302][T28013] usb 7-1: Manufacturer: syz [ 2003.940318][T28013] usb 7-1: SerialNumber: syz [ 2003.946312][T28013] usb 7-1: config 0 descriptor?? [ 2004.118431][T28012] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2004.269268][T28012] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2004.280342][T28012] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.280399][T28012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2004.337559][T28012] as10x_usb: device has been detected [ 2004.344036][T28012] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2004.396011][T28012] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 2004.437510][T28012] as10x_usb: error during firmware upload part1 [ 2004.439693][T28012] Registered device Abilis Systems DVB-Titan [ 2004.516194][T29103] usb 7-1: USB disconnect, device number 7 [ 2004.788744][T27392] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 2004.959936][T27392] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 2004.961923][T27392] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 2004.961952][T27392] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.961973][T27392] usb 5-1: config 4 has no interface number 0 [ 2004.962032][T27392] usb 5-1: config 4 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2004.962054][T27392] usb 5-1: config 4 interface 44 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2004.965525][T27392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.965553][T27392] usb 5-1: Product: syz [ 2004.965567][T27392] usb 5-1: Manufacturer: syz [ 2004.965582][T27392] usb 5-1: SerialNumber: syz [ 2005.144262][T31828] fuse: Bad value for 'fd' [ 2005.392303][T27392] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 2005.400545][T27392] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 2005.403148][T27392] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 2005.403203][T27392] usb 5-1: media controller created [ 2005.411400][T27392] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2005.486002][T27392] DVB: Unable to find symbol dib7000p_attach() [ 2005.486020][T27392] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 2005.608460][T27392] rc_core: IR keymap rc-dib0700-rc5 not found [ 2005.608543][T27392] Registered IR keymap rc-empty [ 2005.608827][T27392] dvb-usb: could not initialize remote control. [ 2005.608836][T27392] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 2005.860192][T31814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2005.860845][T31814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2005.941537][T28013] usb 5-1: USB disconnect, device number 28 [ 2005.997384][T28013] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 2006.908410][T28013] usb 1-1: USB disconnect, device number 16 [ 2007.125823][T28013] Unregistered device Abilis Systems DVB-Titan [ 2007.133312][T28013] as10x_usb: device has been disconnected [ 2007.478442][T27670] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 2007.631427][T27670] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2007.644589][T27670] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 2007.652680][T27670] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2007.688850][T27670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.696985][T27670] usb 5-1: Product: syz [ 2007.697009][T27670] usb 5-1: Manufacturer: syz [ 2007.697025][T27670] usb 5-1: SerialNumber: syz [ 2007.722418][T27670] usb 5-1: config 0 descriptor?? [ 2008.222888][T31877] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 2008.248629][T27670] usb 5-1: USB disconnect, device number 29 [ 2008.410211][T27855] udevd[27855]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2009.740384][T27392] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 2009.899440][T27392] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 2009.901034][T27392] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 2009.901058][T27392] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2009.901079][T27392] usb 3-1: config 4 has no interface number 0 [ 2009.901121][T27392] usb 3-1: config 4 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2009.901142][T27392] usb 3-1: config 4 interface 44 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2009.910802][T27392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.910827][T27392] usb 3-1: Product: syz [ 2009.910842][T27392] usb 3-1: Manufacturer: syz [ 2009.910857][T27392] usb 3-1: SerialNumber: syz [ 2010.225697][T31948] fuse_uring_cmd: 3150 callbacks suppressed [ 2010.233608][T31948] No fuse device found [ 2010.237868][T31948] No fuse device found [ 2010.237911][T31948] No fuse device found [ 2010.237946][T31948] No fuse device found [ 2010.237992][T31948] No fuse device found [ 2010.238028][T31948] No fuse device found [ 2010.238062][T31948] No fuse device found [ 2010.238096][T31948] No fuse device found [ 2010.238138][T31948] No fuse device found [ 2010.238193][T31948] No fuse device found [ 2010.358238][T27392] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 2010.381092][T27392] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 2010.388393][T27392] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 2010.388448][T27392] usb 3-1: media controller created [ 2010.423544][T27392] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2010.468636][T27670] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2010.628489][T27670] usb 7-1: Using ep0 maxpacket: 32 [ 2010.642321][T27670] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2010.643959][T27670] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2010.647925][T27670] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 2010.647951][T27670] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 2010.647970][T27670] usb 7-1: config 14 has no interface number 0 [ 2010.647986][T27670] usb 7-1: config 14 has no interface number 1 [ 2010.648055][T27670] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2010.648078][T27670] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2010.648104][T27670] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 2010.648131][T27670] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 2010.648159][T27670] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2010.648184][T27670] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2010.648209][T27670] usb 7-1: config 14 interface 57 has no altsetting 0 [ 2010.648226][T27670] usb 7-1: config 14 interface 228 has no altsetting 0 [ 2010.751904][T27392] DVB: Unable to find symbol dib7000p_attach() [ 2010.751922][T27392] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 2010.769352][T27670] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.769386][T27670] usb 7-1: Product: syz [ 2010.769402][T27670] usb 7-1: Manufacturer: syz [ 2010.769418][T27670] usb 7-1: SerialNumber: syz [ 2010.796284][T28012] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 2010.796575][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 2010.843879][T27392] rc_core: IR keymap rc-dib0700-rc5 not found [ 2010.843948][T27392] Registered IR keymap rc-empty [ 2010.844211][T27392] dvb-usb: could not initialize remote control. [ 2010.844223][T27392] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 2010.938412][T28012] usb 1-1: device descriptor read/64, error -32 [ 2010.977922][T31957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2010.987373][T31957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2011.058072][T27392] usb 3-1: USB disconnect, device number 39 [ 2011.182511][T28012] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 2011.195547][T27392] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 2011.321451][T27670] legousbtower 7-1:14.57: interrupt endpoints not found [ 2011.339202][T28012] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2011.348098][T28012] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 2011.348197][T28012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2011.376812][T28012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.380101][T28012] usb 1-1: Product: syz [ 2011.380124][T28012] usb 1-1: Manufacturer: syz [ 2011.380139][T28012] usb 1-1: SerialNumber: syz [ 2011.420523][T28012] usb 1-1: config 0 descriptor?? [ 2011.551285][T27670] legousbtower 7-1:14.228: get version request failed: -71 [ 2011.562547][T27670] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 2011.598497][T27670] usb 7-1: USB disconnect, device number 8 [ 2012.022348][T31950] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow! [ 2012.027138][T27392] usb 1-1: USB disconnect, device number 18 [ 2012.927263][T31986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2012.941308][T31986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2012.977467][T31986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2012.977561][T31986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2012.978529][T28012] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 2013.130916][T28012] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2013.140151][T28012] usb 7-1: not running at top speed; connect to a high speed hub [ 2013.142101][T28012] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2013.158924][T28012] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 2013.166227][T28012] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 2013.166255][T28012] usb 7-1: config 14 has no interface number 0 [ 2013.166272][T28012] usb 7-1: config 14 has no interface number 1 [ 2013.166342][T28012] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2013.166366][T28012] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 2013.166393][T28012] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2013.166418][T28012] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 2013.166447][T28012] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 2013.166484][T28012] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid maxpacket 1280, setting to 64 [ 2013.166513][T28012] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2013.166541][T28012] usb 7-1: config 14 interface 57 has no altsetting 0 [ 2013.166561][T28012] usb 7-1: config 14 interface 228 has no altsetting 0 [ 2013.269641][T28012] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.269672][T28012] usb 7-1: Product: syz [ 2013.269688][T28012] usb 7-1: Manufacturer: syz [ 2013.269703][T28012] usb 7-1: SerialNumber: syz [ 2013.768625][T28012] legousbtower 7-1:14.57: interrupt endpoints not found [ 2013.973378][T28012] legousbtower 7-1:14.228: get version request failed: -71 [ 2013.976899][T28012] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 2014.006699][T28012] usb 7-1: USB disconnect, device number 9 [ 2014.151990][T32009] binder: BINDER_SET_CONTEXT_MGR already set [ 2014.152045][T32009] binder: 32008:32009 ioctl 4018620d 200000004a80 returned -16 [ 2014.958561][T18505] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 2015.109413][T18505] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2015.122327][T18505] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 2015.122364][T18505] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2015.127419][T18505] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.127449][T18505] usb 7-1: Product: syz [ 2015.127464][T18505] usb 7-1: Manufacturer: syz [ 2015.127484][T18505] usb 7-1: SerialNumber: syz [ 2015.180742][T18505] usb 7-1: config 0 descriptor?? [ 2015.733333][T18505] usb 7-1: USB disconnect, device number 10 [ 2015.998182][T32032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2016.008221][T32032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2016.041076][T32032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2016.044168][T32032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2016.434921][T28012] hid-generic 0005:046D:C082.0043: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 2016.506559][T32045] fido_id[32045]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2016.943415][T18504] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2016.987708][T32049] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6334'. [ 2017.120038][T18504] usb 7-1: Using ep0 maxpacket: 16 [ 2017.120910][T18504] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2017.122638][T18504] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2017.122668][T18504] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2017.122690][T18504] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2017.122730][T18504] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.146348][T18504] usb 7-1: config 0 descriptor?? [ 2017.216996][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 2017.228148][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 2017.228174][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xee87 instead [ 2017.228193][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb901 instead [ 2017.228211][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 2017.228228][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 2017.228245][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 2017.293714][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 2017.293752][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 2017.293782][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 2017.293799][T32055] jffs2: Further such events for this erase block will not be printed [ 2017.294103][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 2017.294124][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 2017.294141][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xee87 instead [ 2017.294159][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb901 instead [ 2017.294176][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 2017.294190][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 2017.294207][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 2017.294225][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 2017.294253][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 2017.294283][T32055] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 2017.294301][T32055] jffs2: Further such events for this erase block will not be printed [ 2017.295543][T32055] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 2017.295572][T32055] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 2017.793239][T18504] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0044/input/input163 [ 2018.106600][T18504] microsoft 0003:045E:07DA.0044: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 2018.207064][T18504] usb 7-1: USB disconnect, device number 11 [ 2018.553882][T32075] fido_id[32075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 2018.924391][T32084] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2019.177129][T18505] hid-generic 0005:046D:C082.0045: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 2019.403236][T32089] fido_id[32089]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2021.403609][T32121] fuse_uring_cmd: 6310 callbacks suppressed [ 2021.403697][T32121] No fuse device found [ 2021.428213][T32121] No fuse device found [ 2021.428451][T32121] No fuse device found [ 2021.428487][T32121] No fuse device found [ 2021.428520][T32121] No fuse device found [ 2021.428552][T32121] No fuse device found [ 2021.428585][T32121] No fuse device found [ 2021.428617][T32121] No fuse device found [ 2021.428648][T32121] No fuse device found [ 2021.428681][T32121] No fuse device found [ 2022.131948][T32137] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6362'. [ 2023.448469][T28013] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 2023.599344][T28013] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2023.611780][T28013] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 2023.611814][T28013] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2023.616715][T28013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2023.616742][T28013] usb 5-1: Product: syz [ 2023.616756][T28013] usb 5-1: Manufacturer: syz [ 2023.616771][T28013] usb 5-1: SerialNumber: syz [ 2023.669294][T28013] usb 5-1: config 0 descriptor?? [ 2023.738518][T27392] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2023.899370][T27392] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2023.901261][T27392] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2023.901316][T27392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.047219][T27392] as10x_usb: device has been detected [ 2024.053656][T27392] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2024.177636][T27392] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 2024.342293][T27392] as10x_usb: error during firmware upload part1 [ 2024.343095][T27392] Registered device Abilis Systems DVB-Titan [ 2024.430579][T28013] usb 5-1: USB disconnect, device number 30 [ 2024.548863][T30688] udevd[30688]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2024.964895][T32165] bond1 (unregistering): Released all slaves [ 2025.525018][T32178] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6377'. [ 2026.555856][T18505] usb 1-1: USB disconnect, device number 19 [ 2026.657439][T18505] Unregistered device Abilis Systems DVB-Titan [ 2026.679908][T18505] as10x_usb: device has been disconnected [ 2027.048453][T18505] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2027.208437][T27670] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 2027.239529][T18505] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2027.249397][T18505] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2027.249494][T18505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.296873][T18505] as10x_usb: device has been detected [ 2027.300939][T18505] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2027.325302][T18505] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 2027.359385][T27670] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2027.372118][T27670] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 2027.375193][T27670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2027.399258][T27670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.400902][T27670] usb 3-1: Product: syz [ 2027.400920][T27670] usb 3-1: Manufacturer: syz [ 2027.400935][T27670] usb 3-1: SerialNumber: syz [ 2027.431343][T27670] usb 3-1: config 0 descriptor?? [ 2027.508002][T18505] as10x_usb: error during firmware upload part1 [ 2027.510197][T18505] Registered device Abilis Systems DVB-Titan [ 2027.889251][T27670] usb 3-1: USB disconnect, device number 40 [ 2028.718486][T18505] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2028.881014][T18505] usb 3-1: Using ep0 maxpacket: 16 [ 2028.888388][T18505] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2028.892016][T18505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2028.892057][T18505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2028.892081][T18505] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2028.892123][T18505] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.906019][T18505] usb 3-1: config 0 descriptor?? [ 2029.064921][T32207] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6388'. [ 2029.153771][T32108] Set syz1 is full, maxelem 65536 reached [ 2029.366284][T18505] usbhid 3-1:0.0: can't add hid device: -71 [ 2029.366501][T18505] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2029.397060][T18505] usb 3-1: USB disconnect, device number 41 [ 2030.138512][T27392] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2030.290213][T27392] usb 7-1: Using ep0 maxpacket: 32 [ 2030.300611][T27392] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2030.306132][T27392] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 2030.306159][T27392] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2030.306179][T27392] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2030.306199][T27392] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2030.306249][T27392] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.610159][T27392] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 2031.779187][T27392] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2031.780897][T27392] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 2031.780929][T27392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2031.819606][T27392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.819684][T27392] usb 5-1: Product: syz [ 2031.819700][T27392] usb 5-1: Manufacturer: syz [ 2031.819713][T27392] usb 5-1: SerialNumber: syz [ 2031.858454][T27392] usb 5-1: config 0 descriptor?? [ 2032.383146][T27392] usb 5-1: USB disconnect, device number 31 [ 2032.540705][T30688] udevd[30688]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2032.820443][T27392] usb 7-1: USB disconnect, device number 12 [ 2034.070791][T28013] usb 1-1: USB disconnect, device number 20 [ 2034.284124][T32245] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6401'. [ 2034.388123][T28013] Unregistered device Abilis Systems DVB-Titan [ 2034.392933][T28013] as10x_usb: device has been disconnected [ 2034.557368][T32143] Set syz1 is full, maxelem 65536 reached [ 2036.432573][T32294] netlink: 'syz.7.6417': attribute type 1 has an invalid length. [ 2036.597501][T32300] netlink: 84 bytes leftover after parsing attributes in process `syz.7.6417'. [ 2036.877706][T18505] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2036.972321][T32303] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6419'. [ 2037.058444][T18505] usb 1-1: Using ep0 maxpacket: 16 [ 2037.059466][T18505] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2037.062025][T18505] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2037.062055][T18505] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2037.062078][T18505] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2037.062118][T18505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2037.067317][T18505] usb 1-1: config 0 descriptor?? [ 2037.421981][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.500980][T18505] usbhid 1-1:0.0: can't add hid device: -71 [ 2037.501136][T18505] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2037.514202][T18505] usb 1-1: USB disconnect, device number 21 [ 2037.658161][T32313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2037.755849][T32316] fuse_uring_cmd: 3150 callbacks suppressed [ 2037.755936][T32316] No fuse device found [ 2037.756011][T32316] No fuse device found [ 2037.756071][T32316] No fuse device found [ 2037.765170][T32316] No fuse device found [ 2037.765210][T32316] No fuse device found [ 2037.765243][T32316] No fuse device found [ 2037.765276][T32316] No fuse device found [ 2037.765308][T32316] No fuse device found [ 2037.765340][T32316] No fuse device found [ 2037.765372][T32316] No fuse device found [ 2038.045629][T29038] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2038.198472][T29038] usb 7-1: Using ep0 maxpacket: 32 [ 2038.199487][T29038] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 2038.200793][T29038] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2038.200816][T29038] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2038.203526][T29038] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.203552][T29038] usb 7-1: Product: syz [ 2038.203567][T29038] usb 7-1: Manufacturer: syz [ 2038.203581][T29038] usb 7-1: SerialNumber: syz [ 2038.231245][T29038] usb 7-1: config 0 descriptor?? [ 2038.586645][T32338] syzkaller0: entered promiscuous mode [ 2038.593909][T32338] syzkaller0: entered allmulticast mode [ 2039.001287][T32347] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6435'. [ 2039.110896][T32355] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2040.015570][T32383] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2040.018831][T32383] CacheFiles: Empty directory specified [ 2040.019232][T32383] CacheFiles: No cache directory specified [ 2040.205612][T32386] syzkaller0: entered promiscuous mode [ 2040.205692][T32386] syzkaller0: entered allmulticast mode [ 2041.381271][T29038] usb 7-1: USB disconnect, device number 13 [ 2041.588784][T32413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2041.589801][T32413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2041.643045][T32413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2041.643113][T32413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2042.275919][T32421] bond3 (unregistering): Released all slaves [ 2042.512326][T32425] gretap1: entered promiscuous mode [ 2042.977819][T32442] syzkaller0: entered promiscuous mode [ 2042.977905][T32442] syzkaller0: entered allmulticast mode [ 2043.884366][T32461] bond1 (unregistering): Released all slaves [ 2044.038972][T32462] gretap1: entered promiscuous mode [ 2047.448536][T27392] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2047.542894][T32527] bond3 (unregistering): Released all slaves [ 2047.608573][T27392] usb 1-1: Using ep0 maxpacket: 32 [ 2047.615444][T27392] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2047.615502][T27392] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2047.635949][T27392] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 2047.636013][T27392] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 2047.636035][T27392] usb 1-1: config 14 has no interface number 0 [ 2047.636050][T27392] usb 1-1: config 14 has no interface number 1 [ 2047.636132][T27392] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2047.636156][T27392] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2047.636183][T27392] usb 1-1: config 14 interface 57 has no altsetting 0 [ 2047.636201][T27392] usb 1-1: config 14 interface 228 has no altsetting 0 [ 2047.726096][T27392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.726155][T27392] usb 1-1: Product: syz [ 2047.726171][T27392] usb 1-1: Manufacturer: syz [ 2047.726184][T27392] usb 1-1: SerialNumber: syz [ 2048.072900][T27392] legousbtower 1-1:14.57: interrupt endpoints not found [ 2048.082500][T27392] legousbtower 1-1:14.228: interrupt endpoints not found [ 2048.104022][T27392] usb 1-1: USB disconnect, device number 22 [ 2050.808563][T28013] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2050.958401][T28013] usb 5-1: Using ep0 maxpacket: 32 [ 2050.964771][T28013] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2050.966300][T28013] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 2050.966328][T28013] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2050.966350][T28013] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2050.966372][T28013] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2050.966428][T28013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.247070][T28013] usb 5-1: USB disconnect, device number 32 [ 2051.538466][T27670] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2051.690599][T27670] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2051.700636][T27670] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2051.711002][T27670] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.774467][T27670] as10x_usb: device has been detected [ 2051.779257][T27670] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2051.809249][T27670] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 2051.858988][T27670] as10x_usb: error during firmware upload part1 [ 2051.869973][T27670] Registered device Abilis Systems DVB-Titan [ 2055.278750][T32590] syzkaller0: entered promiscuous mode [ 2055.278830][T32590] syzkaller0: entered allmulticast mode [ 2057.550181][ T37] audit: type=1800 audit(1788050233.543:212): pid=32606 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.6517" name="syzkaller0" dev="sda1" ino=2118 res=0 errno=0 [ 2057.618421][T18504] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2057.768992][T18504] usb 5-1: Using ep0 maxpacket: 32 [ 2057.774820][T18504] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2057.777111][T18504] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 2057.777135][T18504] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2057.777153][T18504] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2057.777170][T18504] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2057.777272][T18504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2058.987760][ T37] audit: type=1800 audit(1788050234.943:213): pid=32630 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.6524" name="syzkaller0" dev="sda1" ino=2118 res=0 errno=0 [ 2059.284804][T32639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6526'. [ 2059.464532][T32639] bond6 (unregistering): Released all slaves [ 2059.736892][T18504] usb 5-1: USB disconnect, device number 33 [ 2059.866452][T32644] netlink: 'syz.0.6527': attribute type 1 has an invalid length. [ 2059.870574][T32644] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6527'. [ 2059.872562][T32644] netlink: 'syz.0.6527': attribute type 1 has an invalid length. [ 2060.074594][T18504] usb 7-1: USB disconnect, device number 14 [ 2060.251087][T18504] Unregistered device Abilis Systems DVB-Titan [ 2060.257459][T18504] as10x_usb: device has been disconnected [ 2061.286732][T32663] syzkaller1: entered promiscuous mode [ 2061.286762][T32663] syzkaller1: entered allmulticast mode [ 2065.652302][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 2065.663476][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 2065.663502][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xee87 instead [ 2065.663523][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb901 instead [ 2065.663540][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 2065.663558][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 2065.663576][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 2065.663597][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 2065.663624][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 2065.663650][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 2065.663665][T32698] jffs2: Further such events for this erase block will not be printed [ 2065.664050][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 2065.664070][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 2065.664088][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xee87 instead [ 2065.664109][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb901 instead [ 2065.664126][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 2065.664144][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 2065.664162][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 2065.664193][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 2065.664222][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 2065.664253][T32698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 2065.664270][T32698] jffs2: Further such events for this erase block will not be printed [ 2065.664587][T32698] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 2065.664598][T32698] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 2065.950665][T32582] Set syz1 is full, maxelem 65536 reached [ 2066.301499][T27670] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2066.459302][T27670] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 2066.473780][T27670] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2066.475775][T27670] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2066.475826][T27670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.597609][T32713] WARNING! power/level is deprecated; use power/control instead [ 2066.819015][T29103] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2066.998562][T29103] usb 5-1: Using ep0 maxpacket: 16 [ 2067.005082][T29103] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2067.007914][T29103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2067.032024][T29103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.032050][T29103] usb 5-1: Product: syz [ 2067.032064][T29103] usb 5-1: Manufacturer: syz [ 2067.032080][T29103] usb 5-1: SerialNumber: syz [ 2067.046176][T29103] usb 5-1: config 0 descriptor?? [ 2067.072044][T29103] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2067.073683][T29103] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 2067.118395][T27670] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 2067.272679][T27670] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2067.281470][T27670] usb 7-1: not running at top speed; connect to a high speed hub [ 2067.285149][T27670] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2067.301152][T27670] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 2067.304416][T27670] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 2067.304432][T27670] usb 7-1: config 14 has no interface number 0 [ 2067.304441][T27670] usb 7-1: config 14 has no interface number 1 [ 2067.304500][T27670] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2067.304524][T27670] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 2067.304551][T27670] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2067.304576][T27670] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 2067.304597][T27670] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 2067.304617][T27670] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid maxpacket 1280, setting to 64 [ 2067.304642][T27670] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2067.304668][T27670] usb 7-1: config 14 interface 57 has no altsetting 0 [ 2067.304685][T27670] usb 7-1: config 14 interface 228 has no altsetting 0 [ 2067.427852][T27670] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.427869][T27670] usb 7-1: Product: syz [ 2067.427881][T27670] usb 7-1: Manufacturer: syz [ 2067.427895][T27670] usb 7-1: SerialNumber: syz [ 2067.665804][T29103] em28xx 5-1:0.0: chip ID is em2765 [ 2067.899129][T27670] legousbtower 7-1:14.57: interrupt endpoints not found [ 2067.913029][T27670] legousbtower 7-1:14.228: get version request failed: -71 [ 2067.913227][T27670] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 2067.924111][T27670] usb 7-1: USB disconnect, device number 15 [ 2067.956891][T29103] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2067.965034][T29103] em28xx 5-1:0.0: board has no eeprom [ 2068.038353][T29103] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2068.046508][T29103] em28xx 5-1:0.0: dvb set to bulk mode. [ 2068.046982][T18505] em28xx 5-1:0.0: Binding DVB extension [ 2068.099777][T29103] usb 5-1: USB disconnect, device number 34 [ 2068.121805][T29103] em28xx 5-1:0.0: Disconnecting em28xx [ 2068.396199][T18505] em28xx 5-1:0.0: Registering input extension [ 2068.402858][T29103] em28xx 5-1:0.0: Closing input extension [ 2068.842034][T29103] em28xx: Freeing device [ 2068.965482][T32745] syzkaller0: entered promiscuous mode [ 2068.973889][T32745] syzkaller0: entered allmulticast mode [ 2069.110321][T27670] usb 3-1: USB disconnect, device number 42 [ 2070.157433][ T301] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 2070.288627][T27670] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2070.438461][T27670] usb 7-1: Using ep0 maxpacket: 16 [ 2070.439329][T27670] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2070.453529][T27670] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2070.463770][T27670] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.463839][T27670] usb 7-1: Product: syz [ 2070.463855][T27670] usb 7-1: Manufacturer: syz [ 2070.463868][T27670] usb 7-1: SerialNumber: syz [ 2070.480542][T27670] usb 7-1: config 0 descriptor?? [ 2070.582302][T27670] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2070.583990][T27670] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 2070.828602][T28012] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 2070.958741][T28012] usb 3-1: device descriptor read/64, error -71 [ 2071.172876][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 2071.172903][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 2071.172920][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xee87 instead [ 2071.172939][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb901 instead [ 2071.172955][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 2071.173363][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 2071.173384][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 2071.173403][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 2071.173432][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 2071.173673][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 2071.173692][ T322] jffs2: Further such events for this erase block will not be printed [ 2071.174831][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 2071.174853][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 2071.174871][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xee87 instead [ 2071.174892][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb901 instead [ 2071.175292][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 2071.175311][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 2071.175328][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 2071.175356][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 2071.175386][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 2071.175628][ T322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 2071.175646][ T322] jffs2: Further such events for this erase block will not be printed [ 2071.176967][ T322] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 2071.177199][ T322] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 2071.214809][T27670] em28xx 7-1:0.0: chip ID is em2765 [ 2071.248429][T28012] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 2071.378906][T28012] usb 3-1: device descriptor read/64, error -71 [ 2071.502217][T28012] usb usb3-port1: attempt power cycle [ 2071.605473][T27670] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2071.605569][T27670] em28xx 7-1:0.0: board has no eeprom [ 2071.678589][T27670] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2071.678666][T27670] em28xx 7-1:0.0: dvb set to bulk mode. [ 2071.679279][T28013] em28xx 7-1:0.0: Binding DVB extension [ 2071.728120][T27670] usb 7-1: USB disconnect, device number 16 [ 2071.736156][T27670] em28xx 7-1:0.0: Disconnecting em28xx [ 2071.840844][T28012] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 2071.860341][T28012] usb 3-1: device descriptor read/8, error -71 [ 2071.884502][T28013] em28xx 7-1:0.0: Registering input extension [ 2071.884762][T27670] em28xx 7-1:0.0: Closing input extension [ 2071.966535][T27670] em28xx: Freeing device [ 2071.985834][T30714] udevd[30714]: setting owner of /dev/bus/usb/007/016 to uid=0, gid=0 failed: No such file or directory [ 2071.988415][T29038] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2072.098603][T28012] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 2072.121441][T28012] usb 3-1: device descriptor read/8, error -71 [ 2072.131687][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 2072.133331][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 2072.133355][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xee87 instead [ 2072.133375][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb901 instead [ 2072.133392][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 2072.133409][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 2072.133425][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 2072.133446][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 2072.133475][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 2072.133510][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 2072.133526][ T332] jffs2: Further such events for this erase block will not be printed [ 2072.136072][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 2072.136096][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 2072.136114][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xee87 instead [ 2072.136132][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb901 instead [ 2072.136149][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 2072.136166][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 2072.136183][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 2072.136202][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 2072.136231][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 2072.136259][ T332] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 2072.136275][ T332] jffs2: Further such events for this erase block will not be printed [ 2072.136600][ T332] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 2072.136611][ T332] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 2072.138345][T29038] usb 1-1: Using ep0 maxpacket: 16 [ 2072.139936][T29038] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2072.142191][T29038] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2072.159032][T29038] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2072.159060][T29038] usb 1-1: Product: syz [ 2072.159074][T29038] usb 1-1: Manufacturer: syz [ 2072.159087][T29038] usb 1-1: SerialNumber: syz [ 2072.231229][T28012] usb usb3-port1: unable to enumerate USB device [ 2072.451274][T29038] usb 1-1: config 0 descriptor?? [ 2072.464072][T29038] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2072.478302][T29038] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 2073.098483][T29038] em28xx 1-1:0.0: chip ID is em2765 [ 2073.421458][T29038] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2073.429744][T29038] em28xx 1-1:0.0: board has no eeprom [ 2073.498358][T29038] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2073.506372][T29038] em28xx 1-1:0.0: dvb set to bulk mode. [ 2073.506428][T29103] em28xx 1-1:0.0: Binding DVB extension [ 2073.542047][T29038] usb 1-1: USB disconnect, device number 23 [ 2073.553824][T29038] em28xx 1-1:0.0: Disconnecting em28xx [ 2073.596638][T29103] em28xx 1-1:0.0: Registering input extension [ 2073.596875][T29038] em28xx 1-1:0.0: Closing input extension [ 2073.678474][T29038] em28xx: Freeing device [ 2074.578673][T29103] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2074.708443][T29103] usb 1-1: device descriptor read/64, error -71 [ 2074.968504][T27670] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2074.998429][T29103] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2075.118548][T27670] usb 7-1: Using ep0 maxpacket: 32 [ 2075.125277][T27670] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2075.125335][T27670] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2075.126932][T27670] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 2075.126957][T27670] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 2075.126977][T27670] usb 7-1: config 14 has no interface number 0 [ 2075.126993][T27670] usb 7-1: config 14 has no interface number 1 [ 2075.127177][T27670] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2075.127201][T27670] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2075.127227][T27670] usb 7-1: config 14 interface 57 has no altsetting 0 [ 2075.127245][T27670] usb 7-1: config 14 interface 228 has no altsetting 0 [ 2075.133505][T27670] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.133531][T27670] usb 7-1: Product: syz [ 2075.133546][T27670] usb 7-1: Manufacturer: syz [ 2075.133560][T27670] usb 7-1: SerialNumber: syz [ 2075.232737][T29103] usb 1-1: device descriptor read/64, error -71 [ 2075.348481][T29103] usb usb1-port1: attempt power cycle [ 2075.589028][T27670] legousbtower 7-1:14.57: interrupt endpoints not found [ 2075.728475][T29103] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2075.749270][T29103] usb 1-1: device descriptor read/8, error -71 [ 2075.792312][T27670] legousbtower 7-1:14.228: interrupt endpoints not found [ 2076.011594][T29103] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2076.031675][T29103] usb 1-1: device descriptor read/8, error -71 [ 2076.152610][T29103] usb usb1-port1: unable to enumerate USB device [ 2076.540607][ T316] Set syz1 is full, maxelem 65536 reached [ 2076.552751][ T377] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2076.560543][ T377] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2076.838524][T27670] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 2076.994018][T27670] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2076.994985][T27670] usb 5-1: not running at top speed; connect to a high speed hub [ 2076.995021][T27670] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2077.021281][T27670] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 2077.021397][T27670] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 2077.021419][T27670] usb 5-1: config 14 has no interface number 0 [ 2077.021435][T27670] usb 5-1: config 14 has no interface number 1 [ 2077.021513][T27670] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2077.021536][T27670] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 2077.021562][T27670] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2077.021586][T27670] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 2077.021613][T27670] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 2077.021638][T27670] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2077.021660][T27670] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2077.021686][T27670] usb 5-1: config 14 interface 57 has no altsetting 0 [ 2077.021703][T27670] usb 5-1: config 14 interface 228 has no altsetting 0 [ 2077.171606][T27670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.171692][T27670] usb 5-1: Product: syz [ 2077.171812][T27670] usb 5-1: Manufacturer: syz [ 2077.171830][T27670] usb 5-1: SerialNumber: syz [ 2077.642422][T27670] legousbtower 5-1:14.57: interrupt endpoints not found [ 2077.723144][ T395] X25: received unknown 00 with LCI 000 [ 2077.801139][T18504] usb 7-1: USB disconnect, device number 17 [ 2078.052724][T27670] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 2078.061410][T27670] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 2078.764528][ T414] usb 5-1: Couldn't submit interrupt_out_urb -90 [ 2078.863253][ C1] usb 5-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 2078.918181][T18504] usb 5-1: USB disconnect, device number 35 [ 2078.947469][ T418] syzkaller0: entered promiscuous mode [ 2078.947548][ T418] syzkaller0: entered allmulticast mode [ 2078.977726][T18504] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 2081.512052][ T505] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2082.588398][T29038] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2082.809214][T29038] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2082.834360][T29038] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2082.834477][T29038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2082.932823][T29038] as10x_usb: device has been detected [ 2082.933754][T29038] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2083.014696][T29038] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 2083.069020][T29038] as10x_usb: error during firmware upload part1 [ 2083.069715][T29038] Registered device Abilis Systems DVB-Titan [ 2083.231913][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 2083.232864][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 2083.232888][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xee87 instead [ 2083.232907][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb901 instead [ 2083.232924][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 2083.232941][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 2083.232958][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 2083.232980][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 2083.233007][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 2083.233036][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 2083.233053][ T549] jffs2: Further such events for this erase block will not be printed [ 2083.233329][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 2083.233347][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 2083.233365][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xee87 instead [ 2083.233383][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb901 instead [ 2083.233400][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 2083.233417][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 2083.233434][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 2083.233454][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 2083.233484][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 2083.233521][ T549] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 2083.233538][ T549] jffs2: Further such events for this erase block will not be printed [ 2083.362602][ T549] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 2083.362620][ T549] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 2083.596729][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 2083.615347][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 2083.615376][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xee87 instead [ 2083.615397][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb901 instead [ 2083.615415][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 2083.615432][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 2083.615449][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 2083.615470][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 2083.615499][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 2083.615530][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 2083.615547][ T559] jffs2: Further such events for this erase block will not be printed [ 2083.615859][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 2083.615878][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 2083.615895][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xee87 instead [ 2083.617085][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb901 instead [ 2083.617107][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 2083.617124][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 2083.617141][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 2083.617163][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 2083.617192][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 2083.617221][ T559] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 2083.617238][ T559] jffs2: Further such events for this erase block will not be printed [ 2083.617565][ T559] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 2083.617577][ T559] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 2084.149097][ T568] netlink: 'syz.7.6641': attribute type 1 has an invalid length. [ 2085.419885][ T592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6648'. [ 2085.563746][ T592] bridge0: port 2(bridge_slave_1) entered disabled state [ 2085.581480][ T592] bridge0: port 1(bridge_slave_0) entered disabled state [ 2086.018401][T18504] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2086.178341][T18504] usb 1-1: Using ep0 maxpacket: 8 [ 2086.189732][T18504] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2086.191328][T18504] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2086.191352][T18504] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2086.191393][T18504] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2086.191416][T18504] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2086.191451][T18504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.273481][T18504] hub 1-1:1.0: bad descriptor, ignoring hub [ 2086.279963][T18504] hub 1-1:1.0: probe with driver hub failed with error -5 [ 2086.284657][T18504] cdc_wdm 1-1:1.0: skipping garbage [ 2086.284676][T18504] cdc_wdm 1-1:1.0: skipping garbage [ 2086.320021][T18504] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 2086.326050][T18504] cdc_wdm 1-1:1.0: Unknown control protocol [ 2086.598850][T18504] usb 1-1: USB disconnect, device number 28 [ 2087.227348][ T614] netlink: 'syz.0.6655': attribute type 1 has an invalid length. [ 2089.553707][T18504] usb 3-1: USB disconnect, device number 47 [ 2089.596467][T18504] Unregistered device Abilis Systems DVB-Titan [ 2089.599341][T18504] as10x_usb: device has been disconnected [ 2089.984534][T27670] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2090.138380][T27670] usb 7-1: Using ep0 maxpacket: 32 [ 2090.146550][T27670] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2090.146607][T27670] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2090.147683][T27670] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 2090.147706][T27670] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 2090.147725][T27670] usb 7-1: config 14 has no interface number 0 [ 2090.147739][T27670] usb 7-1: config 14 has no interface number 1 [ 2090.147793][T27670] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2090.147814][T27670] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2090.147927][T27670] usb 7-1: config 14 interface 57 has no altsetting 0 [ 2090.147944][T27670] usb 7-1: config 14 interface 228 has no altsetting 0 [ 2090.244335][T27670] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.252446][T27670] usb 7-1: Product: syz [ 2090.252466][T27670] usb 7-1: Manufacturer: syz [ 2090.252479][T27670] usb 7-1: SerialNumber: syz [ 2090.731918][T27670] legousbtower 7-1:14.57: interrupt endpoints not found [ 2090.945896][T27670] legousbtower 7-1:14.228: interrupt endpoints not found [ 2091.348457][T29038] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 2091.522303][T29038] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2091.530635][T29038] usb 3-1: not running at top speed; connect to a high speed hub [ 2091.531001][T29038] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2091.545342][T29038] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 2091.545371][T29038] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 2091.545391][T29038] usb 3-1: config 14 has no interface number 0 [ 2091.545407][T29038] usb 3-1: config 14 has no interface number 1 [ 2091.545476][T29038] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2091.545498][T29038] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 2091.545523][T29038] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2091.545548][T29038] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 2091.545574][T29038] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 2091.545600][T29038] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2091.545621][T29038] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2091.545646][T29038] usb 3-1: config 14 interface 57 has no altsetting 0 [ 2091.545663][T29038] usb 3-1: config 14 interface 228 has no altsetting 0 [ 2091.640205][T29038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2091.640260][T29038] usb 3-1: Product: syz [ 2091.640275][T29038] usb 3-1: Manufacturer: syz [ 2091.640289][T29038] usb 3-1: SerialNumber: syz [ 2092.085080][T29038] legousbtower 3-1:14.57: interrupt endpoints not found [ 2092.148391][T27670] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2092.230922][ T690] netlink: 'syz.0.6684': attribute type 1 has an invalid length. [ 2092.308501][T27670] usb 5-1: Using ep0 maxpacket: 32 [ 2092.317571][T27670] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2092.317628][T27670] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2092.326015][T27670] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 2092.326044][T27670] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 2092.326064][T27670] usb 5-1: config 14 has no interface number 0 [ 2092.326081][T27670] usb 5-1: config 14 has no interface number 1 [ 2092.326151][T27670] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2092.326176][T27670] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2092.326203][T27670] usb 5-1: config 14 interface 57 has no altsetting 0 [ 2092.326222][T27670] usb 5-1: config 14 interface 228 has no altsetting 0 [ 2092.405884][T27670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.414665][T27670] usb 5-1: Product: syz [ 2092.414689][T27670] usb 5-1: Manufacturer: syz [ 2092.414703][T27670] usb 5-1: SerialNumber: syz [ 2092.543772][T29038] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 2092.546506][T29038] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 2092.754529][T18504] usb 7-1: USB disconnect, device number 18 [ 2092.913103][T27670] legousbtower 5-1:14.57: interrupt endpoints not found [ 2093.074136][T27670] legousbtower 5-1:14.228: interrupt endpoints not found [ 2093.158356][T28012] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2093.309276][T28012] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2093.326826][T28012] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2093.326853][T28012] usb 1-1: config 0 has no interfaces? [ 2093.326880][T28012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.369502][T28012] usb 1-1: config 0 descriptor?? [ 2093.866309][ T674] usb 3-1: LEGO USB Tower reset control request failed [ 2093.879247][T28012] usb 3-1: USB disconnect, device number 48 [ 2093.910176][T28012] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 2094.980029][T18504] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2095.055569][T22198] usb 5-1: USB disconnect, device number 36 [ 2095.142886][T18504] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2095.155851][T18504] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2095.155903][T18504] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2095.155943][T18504] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2095.205829][T18504] usb 7-1: config 0 descriptor?? [ 2095.945036][T29103] usb 1-1: USB disconnect, device number 29 [ 2097.069739][ T768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2097.075549][ T768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2097.132732][T18504] usb 7-1: string descriptor 0 read error: -71 [ 2097.147853][T18504] ath6kl: Failed to submit usb control message: -71 [ 2097.147906][T18504] ath6kl: unable to send the bmi data to the device: -71 [ 2097.147921][T18504] ath6kl: Unable to send get target info: -71 [ 2097.196661][T18504] ath6kl: Failed to init ath6kl core: -71 [ 2097.203067][T18504] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2097.208082][T18504] usb 7-1: USB disconnect, device number 19 [ 2098.214508][ T782] syzkaller0: entered promiscuous mode [ 2098.222483][ T782] syzkaller0: entered allmulticast mode [ 2098.856378][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.098462][T28012] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2099.248434][T28012] usb 1-1: Using ep0 maxpacket: 16 [ 2099.249301][T28012] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2099.250776][T28012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2099.274359][T28012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2099.274433][T28012] usb 1-1: Product: syz [ 2099.274449][T28012] usb 1-1: Manufacturer: syz [ 2099.274463][T28012] usb 1-1: SerialNumber: syz [ 2099.283044][T28012] usb 1-1: config 0 descriptor?? [ 2099.304262][T28012] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2099.304347][T28012] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 2099.562888][ T816] tipc: Started in network mode [ 2099.567904][ T816] tipc: Node identity 2a72125f3dfd, cluster identity 4711 [ 2099.568127][ T816] tipc: Enabled bearer , priority 0 [ 2099.601672][ T816] syzkaller0: MTU too low for tipc bearer [ 2099.607532][ T816] tipc: Disabling bearer [ 2100.169273][T28012] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 2100.624643][T28012] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2100.624734][T28012] em28xx 1-1:0.0: board has no eeprom [ 2100.728502][T28012] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2100.728590][T28012] em28xx 1-1:0.0: dvb set to bulk mode. [ 2100.730218][T27670] em28xx 1-1:0.0: Binding DVB extension [ 2100.751803][T28012] usb 1-1: USB disconnect, device number 30 [ 2100.766902][T28012] em28xx 1-1:0.0: Disconnecting em28xx [ 2101.004000][T27670] em28xx 1-1:0.0: Registering input extension [ 2101.004296][T28012] em28xx 1-1:0.0: Closing input extension [ 2101.195944][T28012] em28xx: Freeing device [ 2103.238735][T29103] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 2103.409486][T29103] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2103.419843][T29103] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2103.420389][T29103] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2103.422877][T29103] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.422902][T29103] usb 7-1: Product: syz [ 2103.422913][T29103] usb 7-1: Manufacturer: syz [ 2103.422921][T29103] usb 7-1: SerialNumber: syz [ 2103.475384][T29103] usb 7-1: config 0 descriptor?? [ 2103.628612][T29103] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2103.795703][T27921] udevd[27921]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2104.122579][ T911] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6757'. [ 2104.122661][ T911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6757'. [ 2104.286458][ T914] syzkaller1: entered promiscuous mode [ 2104.292326][ T914] syzkaller1: entered allmulticast mode [ 2104.710254][ T921] syzkaller1: entered promiscuous mode [ 2104.710345][ T921] syzkaller1: entered allmulticast mode [ 2105.176191][ T926] syzkaller0: entered promiscuous mode [ 2105.176286][ T926] syzkaller0: entered allmulticast mode [ 2106.006992][T29103] usb 7-1: USB disconnect, device number 20 [ 2106.184785][ T971] syzkaller0: entered promiscuous mode [ 2106.190601][ T971] syzkaller0: entered allmulticast mode [ 2106.232533][ T976] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6769'. [ 2106.241784][ T976] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6769'. [ 2106.718503][T29103] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2106.835836][ T985] syzkaller1: entered promiscuous mode [ 2106.841805][ T985] syzkaller1: entered allmulticast mode [ 2106.869339][T29103] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2106.871088][T29103] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2106.871113][T29103] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2106.871149][T29103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2107.499317][ T1002] overlayfs: missing 'lowerdir' [ 2107.648634][T28012] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 2107.688554][T27670] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2107.803700][T28012] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2107.805171][T28012] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2107.805222][T28012] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2107.807707][T28012] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.807731][T28012] usb 7-1: Product: syz [ 2107.807745][T28012] usb 7-1: Manufacturer: syz [ 2107.807760][T28012] usb 7-1: SerialNumber: syz [ 2107.838599][T27670] usb 5-1: Using ep0 maxpacket: 32 [ 2107.842811][T27670] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2107.842873][T27670] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2107.845711][T28012] usb 7-1: config 0 descriptor?? [ 2107.846477][T27670] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 2107.846506][T27670] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 2107.846525][T27670] usb 5-1: config 14 has no interface number 0 [ 2107.846539][T27670] usb 5-1: config 14 has no interface number 1 [ 2107.846580][T27670] usb 5-1: config 14 interface 57 has no altsetting 0 [ 2107.846599][T27670] usb 5-1: config 14 interface 228 has no altsetting 0 [ 2107.858775][T27670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.858802][T27670] usb 5-1: Product: syz [ 2107.858911][T27670] usb 5-1: Manufacturer: syz [ 2107.858927][T27670] usb 5-1: SerialNumber: syz [ 2108.066801][ T1014] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6782'. [ 2108.067609][ T1014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6782'. [ 2108.128167][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 2108.152465][T27670] legousbtower 5-1:14.57: interrupt endpoints not found [ 2108.183765][T28012] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2108.183978][T27670] legousbtower 5-1:14.228: interrupt endpoints not found [ 2108.220143][T27670] usb 5-1: USB disconnect, device number 37 [ 2108.356141][T27921] udevd[27921]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2109.508074][T29103] usb 3-1: USB disconnect, device number 49 [ 2110.007200][ T1053] syzkaller1: entered promiscuous mode [ 2110.012861][ T1053] syzkaller1: entered allmulticast mode [ 2110.404302][T29103] usb 7-1: USB disconnect, device number 21 [ 2110.497005][ T1063] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6793'. [ 2110.497094][ T1063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6793'. [ 2110.999075][T29103] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2111.038427][T28012] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2111.058479][T27670] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2111.148412][T29103] usb 3-1: Using ep0 maxpacket: 16 [ 2111.154532][T29103] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2111.155886][T29103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2111.179538][T29103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2111.187668][T29103] usb 3-1: Product: syz [ 2111.187690][T29103] usb 3-1: Manufacturer: syz [ 2111.187705][T29103] usb 3-1: SerialNumber: syz [ 2111.189665][T28012] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2111.191402][T28012] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2111.191426][T28012] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2111.191462][T28012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2111.208418][T27670] usb 5-1: Using ep0 maxpacket: 16 [ 2111.209333][T27670] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2111.211217][T27670] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2111.214863][T27670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2111.214888][T27670] usb 5-1: Product: syz [ 2111.214902][T27670] usb 5-1: Manufacturer: syz [ 2111.214916][T27670] usb 5-1: SerialNumber: syz [ 2111.346993][T29103] usb 3-1: config 0 descriptor?? [ 2111.349629][T27670] usb 5-1: config 0 descriptor?? [ 2111.375001][T29103] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2111.386275][T29103] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 2111.476469][T27670] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2111.477744][T27670] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 2111.848789][T29103] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2111.915222][T29103] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2111.924276][T29103] em28xx 3-1:0.0: board has no eeprom [ 2111.998493][T29103] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2111.998766][T29103] em28xx 3-1:0.0: dvb set to bulk mode. [ 2112.007401][T22198] em28xx 3-1:0.0: Binding DVB extension [ 2112.028718][T29103] usb 3-1: USB disconnect, device number 50 [ 2112.038031][T29103] em28xx 3-1:0.0: Disconnecting em28xx [ 2112.118564][T22198] em28xx 3-1:0.0: Registering input extension [ 2112.125000][T29103] em28xx 3-1:0.0: Closing input extension [ 2112.183090][T29103] em28xx: Freeing device [ 2112.249724][T27670] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2112.319764][T27670] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2112.320256][T27670] em28xx 5-1:0.0: board has no eeprom [ 2112.399782][T27670] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2112.399812][T27670] em28xx 5-1:0.0: dvb set to bulk mode. [ 2112.400850][T28013] em28xx 5-1:0.0: Binding DVB extension [ 2112.421472][T27670] usb 5-1: USB disconnect, device number 38 [ 2112.427328][T27670] em28xx 5-1:0.0: Disconnecting em28xx [ 2112.811056][T28013] em28xx 5-1:0.0: Registering input extension [ 2112.816674][T27670] em28xx 5-1:0.0: Closing input extension [ 2112.849737][T22198] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2113.028088][T22198] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2113.048701][T22198] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.054558][T22198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.150067][T27670] em28xx: Freeing device [ 2113.184493][ T1130] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6808'. [ 2113.186057][ T1130] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6808'. [ 2113.215044][T22198] as10x_usb: device has been detected [ 2113.225502][T22198] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2113.262648][T22198] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 2113.339213][T22198] as10x_usb: error during firmware upload part1 [ 2113.342902][T22198] Registered device Abilis Systems DVB-Titan [ 2113.825850][T28012] usb 1-1: USB disconnect, device number 31 [ 2114.942520][ T1145] smpboot: CPU 1 is now offline [ 2117.856170][ T1150] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 2119.633997][ T1198] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6826'. [ 2119.840637][T18505] usb 3-1: USB disconnect, device number 51 [ 2119.917043][T18505] Unregistered device Abilis Systems DVB-Titan [ 2119.920533][T18505] as10x_usb: device has been disconnected [ 2120.650103][ T1223] syz_tun: left promiscuous mode [ 2120.702843][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 2121.012877][ T1223] gretap1: left promiscuous mode [ 2121.037266][ T1223] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2121.048142][ T1223] veth0_to_team: entered promiscuous mode [ 2121.255944][ T1219] smpboot: CPU 1 is now offline [ 2121.755346][ T1224] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 2123.788181][ T1260] syzkaller1: entered promiscuous mode [ 2123.795100][ T1260] syzkaller1: entered allmulticast mode [ 2124.846938][ T1288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6852'. [ 2124.981730][ T1288] bond1 (unregistering): Released all slaves [ 2125.008767][T28012] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2125.062261][ T1295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6853'. [ 2125.168424][T28012] usb 7-1: Using ep0 maxpacket: 8 [ 2125.169405][T28012] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2125.171041][T28012] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2125.171108][T28012] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2125.171159][T28012] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2125.171187][T28012] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2125.171227][T28012] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.203409][T28012] hub 7-1:1.0: bad descriptor, ignoring hub [ 2125.203449][T28012] hub 7-1:1.0: probe with driver hub failed with error -5 [ 2125.204650][T28012] cdc_wdm 7-1:1.0: skipping garbage [ 2125.204667][T28012] cdc_wdm 7-1:1.0: skipping garbage [ 2125.207849][T28012] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2125.207868][T28012] cdc_wdm 7-1:1.0: Unknown control protocol [ 2125.970814][T28012] usb 7-1: reset high-speed USB device number 22 using dummy_hcd [ 2126.391781][T28012] usb 7-1: device descriptor read/64, error -71 [ 2127.229913][T28012] usb 7-1: reset high-speed USB device number 22 using dummy_hcd [ 2127.385801][T28012] usb 7-1: device descriptor read/64, error -71 [ 2127.388081][ T1331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6865'. [ 2127.698496][ T4918] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2127.698906][T28012] usb 7-1: reset high-speed USB device number 22 using dummy_hcd [ 2127.879211][ T4918] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2127.891819][ T4918] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2127.891871][ T4918] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2127.891967][ T4918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.152803][ T1338] MTD: Couldn't look up './dev/mtdblock0': -2 [ 2130.613826][ T4918] usb 5-1: USB disconnect, device number 39 [ 2131.204185][ T27] [ 2131.206556][ T27] ====================================================== [ 2131.213586][ T27] WARNING: possible circular locking dependency detected [ 2131.220632][ T27] syzkaller #0 Not tainted [ 2131.225032][ T27] ------------------------------------------------------ [ 2131.232034][ T27] migration/1/27 is trying to acquire lock: [ 2131.237908][ T27] ffff8880b8740998 (_T->lock){....}-{2:2}, at: rt_spin_trylock+0x56/0x2b0 [ 2131.246487][ T27] [ 2131.246487][ T27] but task is already holding lock: [ 2131.253835][ T27] ffff888020ffc980 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 2131.263316][ T27] [ 2131.263316][ T27] which lock already depends on the new lock. [ 2131.263316][ T27] [ 2131.273704][ T27] [ 2131.273704][ T27] the existing dependency chain (in reverse order) is: [ 2131.282727][ T27] [ 2131.282727][ T27] -> #1 (&p->pi_lock){-...}-{2:2}: [ 2131.290073][ T27] _raw_spin_lock+0x2e/0x40 [ 2131.295136][ T27] rtlock_slowlock_locked+0x1ec/0x3c20 [ 2131.301109][ T27] rt_spin_lock+0x165/0x400 [ 2131.306123][ T27] finish_wait+0xbe/0x1e0 [ 2131.310960][ T27] synchronize_rcu_expedited+0x63e/0x770 [ 2131.317104][ T27] try_check_zero+0x2c1/0x4c0 [ 2131.322292][ T27] process_srcu+0x148/0x16f0 [ 2131.327401][ T27] process_scheduled_works+0xc3d/0x1630 [ 2131.333475][ T27] worker_thread+0xa47/0xfb0 [ 2131.338578][ T27] kthread+0x38b/0x470 [ 2131.343168][ T27] ret_from_fork+0x514/0xb70 [ 2131.348272][ T27] ret_from_fork_asm+0x1a/0x30 [ 2131.353552][ T27] [ 2131.353552][ T27] -> #0 (_T->lock){....}-{2:2}: [ 2131.360567][ T27] __lock_acquire+0x15ff/0x2e40 [ 2131.365965][ T27] lock_acquire+0x115/0x350 [ 2131.370972][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 2131.376676][ T27] rt_spin_trylock+0x56/0x2b0 [ 2131.381870][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 2131.387352][ T27] kvfree_call_rcu+0xa4/0x430 [ 2131.392546][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 2131.398439][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 2131.404866][ T27] select_fallback_rq+0x11e/0x200 [ 2131.410402][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 2131.416284][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 2131.421828][ T27] smpboot_thread_fn+0x565/0xa70 [ 2131.427289][ T27] kthread+0x38b/0x470 [ 2131.431893][ T27] ret_from_fork+0x514/0xb70 [ 2131.436994][ T27] ret_from_fork_asm+0x1a/0x30 [ 2131.442270][ T27] [ 2131.442270][ T27] other info that might help us debug this: [ 2131.442270][ T27] [ 2131.452500][ T27] Possible unsafe locking scenario: [ 2131.452500][ T27] [ 2131.459952][ T27] CPU0 CPU1 [ 2131.465303][ T27] ---- ---- [ 2131.470678][ T27] lock(&p->pi_lock); [ 2131.474754][ T27] lock(_T->lock); [ 2131.481063][ T27] lock(&p->pi_lock); [ 2131.487636][ T27] lock(_T->lock); [ 2131.491431][ T27] [ 2131.491431][ T27] *** DEADLOCK *** [ 2131.491431][ T27] [ 2131.499578][ T27] locks held by migration/1/27: 2, last CPU#1: [ 2131.505753][ T27] #0: ffff888020ffc980 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 2131.515686][ T27] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: cpuset_cpus_allowed_fallback+0x22/0x370 [ 2131.526251][ T27] [ 2131.526251][ T27] stack backtrace: [ 2131.532136][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2131.541842][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2131.551896][ T27] Stopper: __balance_push_cpu_stop+0x0/0x410 <- balance_push+0x28d/0x4f0 [ 2131.560309][ T27] Call Trace: [ 2131.563578][ T27] [ 2131.566509][ T27] dump_stack_lvl+0xe8/0x150 [ 2131.571096][ T27] print_circular_bug+0x2e2/0x300 [ 2131.576110][ T27] check_noncircular+0x12f/0x150 [ 2131.581042][ T27] __lock_acquire+0x15ff/0x2e40 [ 2131.585887][ T27] ? __asan_memset+0x22/0x50 [ 2131.590468][ T27] ? __enqueue_entity+0x30a/0xc60 [ 2131.595478][ T27] lock_acquire+0x115/0x350 [ 2131.599969][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 2131.604811][ T27] ? enqueue_task_fair+0x1560/0x1b60 [ 2131.610085][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 2131.615268][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 2131.620105][ T27] rt_spin_trylock+0x56/0x2b0 [ 2131.624790][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 2131.629626][ T27] kvfree_call_rcu+0xa4/0x430 [ 2131.634292][ T27] ? do_raw_spin_unlock+0xf5/0x200 [ 2131.639393][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 2131.644778][ T27] ? __pfx_set_cpus_allowed_force+0x10/0x10 [ 2131.650685][ T27] ? cpuset_cpus_allowed_fallback+0x22/0x370 [ 2131.656666][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 2131.662578][ T27] select_fallback_rq+0x11e/0x200 [ 2131.667587][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 2131.673548][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 2131.678912][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 2131.684097][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 2131.690061][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 2131.695072][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 2131.700080][ T27] smpboot_thread_fn+0x565/0xa70 [ 2131.705005][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 2131.710009][ T27] kthread+0x38b/0x470 [ 2131.714055][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2131.719494][ T27] ? __pfx_kthread+0x10/0x10 [ 2131.724088][ T27] ret_from_fork+0x514/0xb70 [ 2131.728666][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 2131.733777][ T27] ? __switch_to+0xc89/0x1420 [ 2131.738439][ T27] ? __pfx_kthread+0x10/0x10 [ 2131.743028][ T27] ret_from_fork_asm+0x1a/0x30 [ 2131.747785][ T27] [ 2131.861952][ T27] numa_remove_cpu cpu 1 node 0: mask now 0 [ 2131.861977][ T27] numa_remove_cpu cpu 1 node 1: mask now 0 [ 2131.865157][ T1363] smpboot: CPU 1 is now offline [ 2131.881630][ T1364] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 2131.882693][ T0] numa_add_cpu cpu 1 node 0: mask now 0-1 [ 2131.882712][ T0] numa_add_cpu cpu 1 node 1: mask now 0-1 [ 2132.850837][T28012] usb 7-1: device descriptor read/8, error -110 [ 2133.098343][T28012] usb 7-1: reset high-speed USB device number 22 using dummy_hcd [ 2133.118792][T28012] usb 7-1: device descriptor read/8, error -32 [ 2133.238970][ T1284] cdc_wdm 7-1:1.0: Error autopm - -16 [ 2133.243322][T28012] usb 7-1: USB disconnect, device number 22