last executing test programs: 28.121769541s ago: executing program 4 (id=1903): signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x4]}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000800000400002e00000040", @ANYRES32=0x0, @ANYBLOB="000000a3d70000000000008009000100626f6e640000000014c48fad9b00028008000a00002000"], 0x44}, 0x1, 0x0, 0x0, 0x20040010}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "8bc947420083ecb8374776128400"}, 0x4000c, 0x5}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008f"], 0xfc}, 0x1, 0x0, 0x0, 0x4840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 26.46146115s ago: executing program 1 (id=1908): r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000400)='./file1\x00', 0x26000800) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x69) close(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x10000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800014000000000080002"], 0x80}}, 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8894}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x404c001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r4, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x40000002, 0x0) 24.674976374s ago: executing program 1 (id=1911): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 24.111973893s ago: executing program 4 (id=1914): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x2000, 0x32, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x1001}, {0x0, 0x0, 0x1}, {}, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x4}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000a80)=""/188, 0xba) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x56) syz_usb_disconnect(r1) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000005480)=[{{&(0x7f0000000540)={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfbe}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000001900)="85", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1}}], 0x2, 0x85dc) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000003, 0x10, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = openat$vnet(0xffffff9c, 0x0, 0x2, 0x0) preadv(r5, 0x0, 0x0, 0x3, 0x9) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x3a8, 0x304, 0xfeffffff, 0x0, 0x304, 0x460, 0x460, 0xffffffff, 0x460, 0x460, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0x0, 'veth0_to_bridge\x00', 'caif0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x4, @private=0xa010100, @empty, @icmp_id=0x67, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @private=0xa010101, @multicast2, @gre_key=0x134, @gre_key=0x8001}}}}, {{@ip={@local, @rand_addr, 0x0, 0xffffffff, 'lo\x00', 'ip6tnl0\x00', {0xff}}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e21, @port=0x1}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x0, 'veth0_to_team\x00', 'wlan0\x00', {}, {}, 0x5c, 0x0, 0x8}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@dev, @port, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x394) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 20.741439473s ago: executing program 1 (id=1919): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8c00}, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x9) r0 = getpgrp(0x0) prlimit64(r0, 0xe, &(0x7f0000000100)={0x12a, 0x80004100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @loopback, 0x5}, 0x1c) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 18.92526552s ago: executing program 4 (id=1922): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="9bb6070844984ef2b734ee2b740e32647974b7cfb8150605a2c635efcbc832fa56569acc96052ed730ec4473a0af21e1f7881620a9062897d734a7dac3c85d6973f29880e626e5e231b1b4edd98b9363876048487f344b980de2c6f0806915a8bb26e264035f0a378fe6662cfd45296d1cc391c761c06d689dd572f822269ffc2625c6d2a6d4228a91b303f6b9d8b45a6a9f8c7b49ec5bc49acd786101e2308bbaee6d51d8c582fe4bfedd220cae98dc1a86cbe3b3d03636b5c1c2951d9b0f18503ac03e3f52a34b9be308d86ced9df5c42e152849ff5ad87e599f2f", 0xdc}], 0x1}}], 0x2, 0x42054) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x4}]}}}]}, 0x3c}}, 0x4000000) sendto$inet(r0, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) 17.235272634s ago: executing program 5 (id=1923): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x50, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0xffffffff}, 0x10) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xe8902, 0x0) read$midi(r2, 0x0, 0x3b) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0xd8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f0000000380), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1f}, @local, 0xffffffff, 0x71eca90076704270, 'nr0\x00', 'caif0\x00', {0xff}, {0xff}, 0x33, 0x2, 0x18}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x7, 0x670a, 0xd, 'snmp\x00', 'syz0\x00', {0x7}}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0xa}}, @common=@set={{0x40}, {{0x2, [0x3, 0x4], 0x0, 0x5}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x7, 0x0, 0x200, '\x00', 'syz1\x00', {0x3ba}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 17.222941192s ago: executing program 1 (id=1924): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socket$inet6_sctp(0xa, 0x5, 0x84) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) socket(0x10, 0x803, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r1, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x40}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 17.220397015s ago: executing program 2 (id=1925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffff}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) 15.910767238s ago: executing program 4 (id=1926): signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x4]}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000800000400002e00000040", @ANYRES32=0x0, @ANYBLOB="000000a3d70000000000008009000100626f6e640000000014c48fad9b00028008000a00002000"], 0x44}, 0x1, 0x0, 0x0, 0x20040010}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "8bc947420083ecb8374776128400"}, 0x4000c, 0x5}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008f"], 0xfc}, 0x1, 0x0, 0x0, 0x4840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15.7505395s ago: executing program 2 (id=1927): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pipe2$watch_queue(&(0x7f0000001f80), 0x80) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 15.718920407s ago: executing program 5 (id=1928): syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8a800, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 14.949760064s ago: executing program 5 (id=1929): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', 0x0}) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x2d, &(0x7f0000000080)=0x4000004, 0xfffffffffffffe31) pread64(r3, 0x0, 0x0, 0x3f000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000050000000a0000000000001101020000000000000f0000000000000a050000000200000001000006040000000d0000000d000000090000000074004e0000002e00007bb8a4c57b6f2f5ec89447541b42005500a742bf18c2a09f777c189c4413ac10b38717e245aad939b4b65e55338fa2aa0689edc09cb4c6cade98b4263f8d935ab075ceb4a4154fc7121780869ed32d884863118bec1d53e1aac017caa7bbd785f7d5411de800f5e736"], &(0x7f0000000200)=""/29, 0x5d, 0x1d, 0x0, 0x7, 0x10000, @value=r3}, 0x28) r5 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000002c0)=[{0x30, 0xc, 0x6, 0xfffff038}, {0x6, 0x80, 0x0, 0x2}]}, 0x8) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe}, {0xa, 0x4e23, 0xda0b, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0xffffffffffffffff, {[0x280, 0x1, 0x7ff, 0x7fff, 0xe0, 0x8, 0x2, 0xd8]}}, 0x5c) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0xfffe}], 0x1) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$uac2(0x6, 0xac, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x9, 0x50, 0x4, {0x8, 0xb, 0x2, 0x0, 0x1, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x8, 0x1a, 0x8}, [@multiply_unit={0x7, 0x24, 0xc, 0xff, 0x4, 0x0, 0x4}, @extension_unit={0xa, 0x24, 0x9, 0x3, 0x400, 0x8, "00981d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x6e8f, 0x4, "68af0cd4026f"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3f, 0x5, 0x7, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x8, 0x9, {0x8, 0x25, 0x1, 0x82, 0xc, 0x9, 0xf0c9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x5, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xc, 0x9, {0x8, 0x25, 0x1, 0x83, 0xc, 0x9, 0x8bf}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x40, 0x7, 0xa1, 0xff, 0xf5}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1801}}, {0x0, 0x0}]}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, 0x0, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000080)="039456", 0x3}], 0x1) syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) 14.669285793s ago: executing program 2 (id=1931): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 14.33884415s ago: executing program 4 (id=1932): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8c00}, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x12a, 0x80004100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @loopback, 0x5}, 0x1c) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x400001ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x110, 0x140, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv6=@mcast2, @ipv4=@loopback, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x12}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3e0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 13.042100279s ago: executing program 4 (id=1933): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x1041) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = creat(0x0, 0xecf86c37d53049cc) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @empty, 0x72c}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x6ec7, 0x8, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x5f5, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x3, 0xfffffffb, 0x0, 0x3, 0x4, 0xf252, 0x4, 0x3, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x4, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x80000001, 0x1000, 0x2, 0x200, 0x2, 0x400019, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x7, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x22, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x68, 0xfffffffc, 0x4, 0x7, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x5, 0x8001, 0x1, 0x1, 0x297, 0x5, 0x0, 0x981, 0x0, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x7, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x804, 0x200, 0x3], [0x401, 0x7ff, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x3000000, 0x4, 0x8, 0x10, 0x7, 0x9, 0x2e8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0x4, 0x1, 0xfffffff9, 0xe55, 0x10, 0x81, 0x8, 0xa, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x100b, 0x2, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x7, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x5, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x23da, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0xb, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x800107f, 0x5, 0x0, 0x4, 0x8e8, 0x5, 0x9, 0x38eb, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0xbb, 0xb7, 0x5, 0x800, 0x3c7, 0x65f413f9, 0x10001, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x401, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x8, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x132, 0x81]}, 0x45c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) pread64(r0, 0x0, 0x0, 0x72) 10.74921663s ago: executing program 5 (id=1937): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 9.999531996s ago: executing program 3 (id=1938): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5319, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r6, r5, 0x0, 0x7ffffffd) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) r7 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3d00000004000400", "a7c947420000000000000000ff4a70f3"}, 0x0, 0x5}) 9.702519141s ago: executing program 0 (id=1939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffff}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) 8.914924607s ago: executing program 2 (id=1940): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=0x0, @ANYRES64]) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x14018891) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902120008000000000904"], 0x0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x1170, 0x1398, 0x128, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x0, 0xd, 0x5}}, @common=@unspec=@devgroup={{0x38}, {0x1d, 0x0, 0x0, 0x0, 0x3ff}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'veth1_vlan\x00', {}, {}, 0x84}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0xad84, 0x4, 0x2, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) sendmsg$alg(0xffffffffffffffff, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 8.778269537s ago: executing program 3 (id=1941): syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8a800, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 8.539115388s ago: executing program 0 (id=1942): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=0x0, @ANYRES64]) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x14018891) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902120008000000000904"], 0x0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x1170, 0x1398, 0x128, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x0, 0xd, 0x5}}, @common=@unspec=@devgroup={{0x38}, {0x1d, 0x0, 0x0, 0x0, 0x3ff}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'veth1_vlan\x00', {}, {}, 0x84}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0xad84, 0x4, 0x2, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) sendmsg$alg(0xffffffffffffffff, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 8.159954366s ago: executing program 3 (id=1943): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000440)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x6d5, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 7.103849102s ago: executing program 3 (id=1944): signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x4]}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000800000400002e00000040", @ANYRES32=0x0, @ANYBLOB="000000a3d70000000000008009000100626f6e640000000014c48fad9b00028008000a00002000"], 0x44}, 0x1, 0x0, 0x0, 0x20040010}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "8bc947420083ecb8374776128400"}, 0x4000c, 0x5}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008f"], 0xfc}, 0x1, 0x0, 0x0, 0x4840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.571206351s ago: executing program 2 (id=1945): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8c00}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x12a, 0x80004100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @loopback, 0x5}, 0x1c) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x400001ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x110, 0x140, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv6=@mcast2, @ipv4=@loopback, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x12}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3e0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 6.496508615s ago: executing program 0 (id=1946): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x61d02bc4db6195bc, 0x19, &(0x7f0000000340)=@raw=[@exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}, @exit, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], &(0x7f0000000440)='syzkaller\x00', 0xd37, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x1], 0x0, 0x10, 0x1}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newtaction={0x60, 0x30, 0x48b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x3, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008008) 4.777026194s ago: executing program 2 (id=1947): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x24008010) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x7, 0xfffffffffffffffe}, 0x1, 0x0, 0x1}, {{@in6=@local, 0x4d6, 0x33}, 0x0, @in6=@loopback, 0x2, 0x3, 0x3, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x60) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0x1ba0c6153006ddf4, 0x0, &(0x7f00000000c0)) 4.636908341s ago: executing program 1 (id=1948): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="fefee71c200000", @ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rc={0xa, @none}, 0x80, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r2, 0x29, 0x14, &(0x7f0000000040)="ff0202000000ff00000000ffff1f2be82db1af0000000000", 0x18) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x7d, &(0x7f0000000100)={0x0, 0x2, 0x20008, 0xe50}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000000b0680170000000000000000050000000500010007000000050001000700000004000780"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="a501000001"], 0x18) sendmmsg$inet6(r2, 0x0, 0x0, 0x44) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='veno', 0x4) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[], 0x180}, 0x1, 0x0, 0x0, 0x4}, 0x4000090) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000020000042cbd7000fcdbdf250800030001000000"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4044001) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e1f, 0x0, @mcast1, 0x8}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000340)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @broadcast, 0x1d, 0x13}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) 4.581968178s ago: executing program 0 (id=1949): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', 0x0}) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x2d, &(0x7f0000000080)=0x4000004, 0xfffffffffffffe31) pread64(r3, 0x0, 0x0, 0x3f000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000050000000a0000000000001101020000000000000f0000000000000a050000000200000001000006040000000d0000000d000000090000000074004e0000002e00007bb8a4c57b6f2f5ec89447541b42005500a742bf18c2a09f777c189c4413ac10b38717e245aad939b4b65e55338fa2aa0689edc09cb4c6cade98b4263f8d935ab075ceb4a4154fc7121780869ed32d884863118bec1d53e1aac017caa7bbd785f7d5411de800f5e736"], &(0x7f0000000200)=""/29, 0x5d, 0x1d, 0x0, 0x7, 0x10000, @value=r3}, 0x28) r5 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000002c0)=[{0x30, 0xc, 0x6, 0xfffff038}, {0x6, 0x80, 0x0, 0x2}]}, 0x8) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe}, {0xa, 0x4e23, 0xda0b, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0xffffffffffffffff, {[0x280, 0x1, 0x7ff, 0x7fff, 0xe0, 0x8, 0x2, 0xd8]}}, 0x5c) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0xfffe}], 0x1) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$uac2(0x6, 0xac, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x9, 0x50, 0x4, {0x8, 0xb, 0x2, 0x0, 0x1, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x8, 0x1a, 0x8}, [@multiply_unit={0x7, 0x24, 0xc, 0xff, 0x4, 0x0, 0x4}, @extension_unit={0xa, 0x24, 0x9, 0x3, 0x400, 0x8, "00981d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x6e8f, 0x4, "68af0cd4026f"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3f, 0x5, 0x7, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x8, 0x9, {0x8, 0x25, 0x1, 0x82, 0xc, 0x9, 0xf0c9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x5, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xc, 0x9, {0x8, 0x25, 0x1, 0x83, 0xc, 0x9, 0x8bf}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x40, 0x7, 0xa1, 0xff, 0xf5}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1801}}, {0x0, 0x0}]}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, 0x0, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000080)="039456", 0x3}], 0x1) syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) 4.486167552s ago: executing program 3 (id=1950): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000009000000e0497f6a7ab35d36989c0ef947dbd8f5bc4d7953eb2b94ef11a7be0dcda7", @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r1, &(0x7f0000000780)}, 0x20) dup(r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r3 = socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x840) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) bind$bt_hci(r7, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) 4.465837997s ago: executing program 5 (id=1951): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) timer_create(0xfffffffffffffff4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300051fc7cec0000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0c0099000600000076000000"], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x2000c800) r5 = socket$inet(0x2, 0x3, 0xa) setsockopt$inet_int(r5, 0x0, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000066cd0000050000"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r7}, 0xc) r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='/dev/ttyS3\x00', r8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.049840155s ago: executing program 1 (id=1952): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x1041) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = creat(0x0, 0xecf86c37d53049cc) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket(0x10, 0x3, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x6ec7, 0x8, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x5f5, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x3, 0xfffffffb, 0x0, 0x3, 0x4, 0xf252, 0x4, 0x3, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x4, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x80000001, 0x1000, 0x2, 0x200, 0x2, 0x400019, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x7, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x22, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x68, 0xfffffffc, 0x4, 0x7, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x5, 0x8001, 0x1, 0x1, 0x297, 0x5, 0x0, 0x981, 0x0, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x7, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x804, 0x200, 0x3], [0x401, 0x7ff, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x3000000, 0x4, 0x8, 0x10, 0x7, 0x9, 0x2e8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0x4, 0x1, 0xfffffff9, 0xe55, 0x10, 0x81, 0x8, 0xa, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x100b, 0x2, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x7, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x5, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x23da, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0xb, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x800107f, 0x5, 0x0, 0x4, 0x8e8, 0x5, 0x9, 0x38eb, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0xbb, 0xb7, 0x5, 0x800, 0x3c7, 0x65f413f9, 0x10001, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x401, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x8, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x132, 0x81]}, 0x45c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) pread64(r0, 0x0, 0x0, 0x72) 3.253738353s ago: executing program 5 (id=1953): r0 = socket$phonet(0x23, 0x2, 0x1) getsockname(r0, 0x0, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ftruncate(0xffffffffffffffff, 0x51a9497) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xe}, @l2cap_cid_le_signaling={{0xa}, @l2cap_ecred_reconf_req={{0x19, 0xf, 0x6}, {0xfff5, 0x3cd, [0x6]}}}}, 0x13) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x82520, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket(0xa, 0x3, 0x87) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r4, 0x1000006) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000580)=0x1) 753.126902ms ago: executing program 0 (id=1954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffff}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) 497.067334ms ago: executing program 3 (id=1955): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8a800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8c}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18, r1}) 0s ago: executing program 0 (id=1956): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000016c0), 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000265500000102030405060708090a0b0c0d0e0f1011121314151617bc7409659fbbb7bd2f3011323334353637a1e68b200e70d93e76da896138393a3b3c3d3e3f4000"/84], 0x48, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) r5 = userfaultfd(0x801) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000140)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xfffffffb, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200]}}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000b02000/0x1000)=nil, 0x1000, 0x200000e, 0x6c032, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x101) kernel console output (not intermixed with test programs): 5776] pwc: recv_control_msg error -32 req 04 val 1400 [ 723.899549][ T5776] pwc: recv_control_msg error -32 req 02 val 2000 [ 723.923547][ T5776] pwc: recv_control_msg error -32 req 02 val 2100 [ 723.941558][ T24] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 723.969408][ T5776] pwc: recv_control_msg error -32 req 04 val 1500 [ 724.113191][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.149260][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 724.186243][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.200006][ T5776] pwc: recv_control_msg error -71 req 02 val 2400 [ 724.236105][ T5776] pwc: recv_control_msg error -71 req 02 val 2600 [ 724.266513][ T24] usb 4-1: config 0 descriptor?? [ 724.276550][ T5776] pwc: recv_control_msg error -71 req 02 val 2900 [ 724.314623][ T5776] pwc: recv_control_msg error -71 req 02 val 2800 [ 724.332418][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 724.343072][ T5776] pwc: recv_control_msg error -71 req 04 val 1100 [ 724.434385][ T5776] pwc: recv_control_msg error -71 req 04 val 1200 [ 724.751564][ T5776] pwc: Registered as video103. [ 725.116731][ T5776] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input33 [ 725.328223][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 725.362101][ T5776] usb 6-1: USB disconnect, device number 36 [ 725.603214][T11982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1513'. [ 725.620367][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 726.117686][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 726.168309][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 726.217471][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 726.271674][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 726.366093][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 726.436438][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 726.487957][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 726.724795][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 726.740042][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 726.777819][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 726.809374][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 726.838489][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 726.861788][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 726.898308][T11998] random: crng reseeded on system resumption [ 726.916704][ T24] pwc: Registered as video103. [ 726.957510][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 727.054026][ T24] usb 4-1: USB disconnect, device number 53 [ 727.959042][T12012] blktrace: Concurrent blktraces are not allowed on loop4 [ 728.076267][T12013] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1519'. [ 729.049391][T12021] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 729.706263][T12020] orangefs_mount: mount request failed with -4 [ 731.049808][ T5776] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 731.205151][T12040] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1527'. [ 731.233885][T12040] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 731.240404][T12040] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 731.256609][T12040] hsr0: entered promiscuous mode [ 731.342016][ T5776] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.425311][ T5776] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 731.522470][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.111224][ T5776] usb 2-1: config 0 descriptor?? [ 732.134295][T12038] hsr0: left promiscuous mode [ 732.204212][ T5776] pwc: Askey VC010 type 2 USB webcam detected. [ 732.595054][ T5776] pwc: recv_control_msg error -32 req 02 val 2b00 [ 732.609800][ T5776] pwc: recv_control_msg error -32 req 02 val 2700 [ 732.617983][ T5776] pwc: recv_control_msg error -32 req 02 val 2c00 [ 732.640902][ T5776] pwc: recv_control_msg error -32 req 04 val 1000 [ 732.660788][ T5776] pwc: recv_control_msg error -32 req 04 val 1300 [ 732.677041][ T5776] pwc: recv_control_msg error -32 req 04 val 1400 [ 732.685101][ T5776] pwc: recv_control_msg error -32 req 02 val 2000 [ 732.713817][ T5776] pwc: recv_control_msg error -32 req 02 val 2100 [ 732.757566][ T5776] pwc: recv_control_msg error -32 req 04 val 1500 [ 732.798868][ T5776] pwc: recv_control_msg error -32 req 02 val 2500 [ 732.818137][T12036] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1525'. [ 732.828274][ T5776] pwc: recv_control_msg error -32 req 02 val 2400 [ 732.836717][ T5776] pwc: recv_control_msg error -32 req 02 val 2600 [ 733.047093][ T5776] pwc: recv_control_msg error -71 req 02 val 2800 [ 733.064756][ T5776] pwc: recv_control_msg error -71 req 04 val 1100 [ 733.278199][ T5776] pwc: recv_control_msg error -71 req 04 val 1200 [ 733.309389][T12051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1531'. [ 733.959909][T12028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 733.978207][ T30] audit: type=1800 audit(1782934539.037:21): pid=12058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1532" name="file0" dev="overlay" ino=1420 res=0 errno=0 [ 734.000565][ T5776] pwc: Registered as video103. [ 734.011006][ T5776] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 734.110468][T12061] overlayfs: missing 'lowerdir' [ 734.129015][ T5776] usb 2-1: USB disconnect, device number 33 [ 734.292496][T12063] netlink: 'syz.5.1533': attribute type 21 has an invalid length. [ 734.301128][T12063] IPv6: NLM_F_CREATE should be specified when creating new route [ 736.278580][T12073] random: crng reseeded on system resumption [ 736.718439][T12078] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 737.224074][T12077] orangefs_mount: mount request failed with -4 [ 739.851416][T12095] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1539'. [ 740.020691][ T30] audit: type=1800 audit(1782934545.587:22): pid=12098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1544" name="file0" dev="overlay" ino=1312 res=0 errno=0 [ 740.283598][T12110] siw: device registration error -23 [ 740.290095][ T5776] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 740.489845][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.662411][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.836599][ T5776] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 741.041247][ T5776] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 741.112771][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.254374][ T5776] usb 4-1: config 0 descriptor?? [ 741.698262][ T5776] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 741.734255][ T5776] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 741.747047][ T5776] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 741.755366][ T5776] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 741.763186][ T5776] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 741.771686][ T5776] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 742.461077][ T5879] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 742.478311][ T5776] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 742.517100][ T5776] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 742.563933][ T5776] usb 4-1: USB disconnect, device number 54 [ 742.624581][ T5879] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 742.682515][ T5879] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 742.713692][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.739341][ T5879] usb 2-1: Product: syz [ 742.746144][T12122] fido_id[12122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 742.762136][ T5879] usb 2-1: Manufacturer: syz [ 742.766865][ T5879] usb 2-1: SerialNumber: syz [ 742.793908][ T5879] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 742.832547][T12124] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 743.094931][T12104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 743.262544][ T5879] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 743.314683][ T5879] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 743.354981][ T5879] usb 2-1: media controller created [ 743.464208][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 743.899857][ T5355] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 744.159391][ T5355] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 744.206116][ T5355] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 744.287035][ T5355] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 744.348686][ T5355] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 744.466999][ T5355] usb 4-1: config 168 interface 0 has no altsetting 0 [ 744.536996][ T5355] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 744.579409][ T5355] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 744.644063][ T5355] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 744.727495][ T5355] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 744.825015][ T5355] usb 4-1: config 168 interface 0 has no altsetting 0 [ 744.896812][ T5355] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 744.943350][ T5355] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 745.041974][ T5355] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 745.153750][ T5355] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 745.345755][ T5355] usb 4-1: config 168 interface 0 has no altsetting 0 [ 745.843703][ T5355] usb 4-1: string descriptor 0 read error: -22 [ 745.855149][ T5355] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 745.873006][ T5355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.016596][ T5355] adutux 4-1:168.0: interrupt endpoints not found [ 746.046053][T12143] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1558'. [ 746.114781][T12161] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1561'. [ 746.230172][ T5776] usb 4-1: USB disconnect, device number 55 [ 746.344094][ T5879] usb 2-1: USB disconnect, device number 34 [ 746.454849][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.465947][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.208031][T12177] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 747.982187][T12176] orangefs_mount: mount request failed with -4 [ 749.969005][T12182] netlink: 'syz.1.1567': attribute type 1 has an invalid length. [ 749.997945][T12183] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 750.193655][T12190] overlayfs: failed to verify origin (258/file1, ino=1356, err=-116) [ 750.202455][T12182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 750.252815][T12190] overlayfs: failed to verify origin (258/file1, ino=1356, err=-116) [ 750.287397][T12186] bond1: (slave dummy0): Releasing active interface [ 750.350318][T12186] bond2: (slave dummy0): making interface the new active one [ 750.416733][T12186] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 750.645422][ T5778] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 750.699721][ T5635] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 750.885391][ T5635] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 750.924071][ T5635] usb 3-1: config 0 has no interface number 0 [ 750.932563][ T5778] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 750.949310][ T5635] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 750.962429][ T5635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.984101][ T5778] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 750.994903][ T5635] usb 3-1: Product: syz [ 751.003602][ T5778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.013279][ T5635] usb 3-1: Manufacturer: syz [ 751.018973][ T5635] usb 3-1: SerialNumber: syz [ 751.023713][ T5778] usb 5-1: Product: syz [ 751.030251][ T5778] usb 5-1: Manufacturer: syz [ 751.037349][ T5635] usb 3-1: config 0 descriptor?? [ 751.050716][ T5778] usb 5-1: SerialNumber: syz [ 751.081351][ T5635] usb 3-1: selecting invalid altsetting 1 [ 751.117195][ T5635] dvb_ttusb_budget: ttusb_init_controller: error [ 751.126733][ T5778] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 751.142368][ T5635] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 751.156143][T12214] netlink: 'syz.1.1575': attribute type 1 has an invalid length. [ 751.249330][T12217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1575'. [ 751.333505][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1575'. [ 751.482292][ T5635] DVB: Unable to find symbol stv0299_attach() [ 751.865986][T12214] 8021q: adding VLAN 0 to HW filter on device bond3 [ 751.891295][ T5778] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 751.926094][ T5778] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 751.959187][T12217] bond3: entered promiscuous mode [ 751.964493][ T5778] usb 5-1: media controller created [ 751.981268][T12217] bond3: entered allmulticast mode [ 752.029819][ T5778] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 752.046764][ T5635] DVB: Unable to find symbol tda8083_attach() [ 752.077772][ T5635] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 752.095542][T10344] bond2: (slave dummy0): link status definitely down, disabling slave [ 752.168064][T10344] bond2: now running without any active interface! [ 753.103184][T12191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 753.461749][ T5635] usb 3-1: USB disconnect, device number 33 [ 754.034156][T12233] random: crng reseeded on system resumption [ 755.161109][ T5778] usb 5-1: USB disconnect, device number 43 [ 755.182039][T12240] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1579'. [ 755.769682][ T5776] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 756.002285][ T5776] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 756.023139][ T5776] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 756.141530][ T5776] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 756.670589][ T5776] usb 3-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 757.213673][ T5776] usb 3-1: config 168 interface 0 has no altsetting 0 [ 757.635592][ T5776] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 757.666296][ T5776] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 757.689358][T12268] random: crng reseeded on system resumption [ 757.697015][ T5776] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 758.124275][ T5776] usb 3-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 758.149673][ T5776] usb 3-1: config 168 interface 0 has no altsetting 0 [ 758.193815][ T5776] usb 3-1: unable to read config index 2 descriptor/start: -71 [ 758.273122][ T5776] usb 3-1: can't read configurations, error -71 [ 758.306693][T12270] siw: device registration error -23 [ 759.093582][T12279] blktrace: Concurrent blktraces are not allowed on loop8 [ 759.282532][ T5776] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 759.712920][T12286] random: crng reseeded on system resumption [ 759.732042][ T5776] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 759.747869][ T5776] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 759.758638][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.767870][ T5776] usb 3-1: Product: syz [ 759.772317][ T5776] usb 3-1: Manufacturer: syz [ 759.777517][ T5776] usb 3-1: SerialNumber: syz [ 759.960996][ T5776] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 761.494018][ T5776] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 761.551944][ T5776] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 761.590743][ T5776] usb 3-1: media controller created [ 763.240565][ T5776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 763.420513][T12308] input: syz0 as /devices/virtual/input/input36 [ 765.105865][ T5776] usb 3-1: USB disconnect, device number 35 [ 765.153634][T12319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1603'. [ 765.203046][ T5879] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 765.402900][ T5879] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 765.586117][ T5879] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 765.625427][ T5879] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 765.745336][ T5879] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 765.774494][ T5879] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 765.956630][ T5879] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 765.968663][ T5879] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 765.983593][ T5879] usb 2-1: config 168 interface 0 has no altsetting 0 [ 766.004120][T12333] blktrace: Concurrent blktraces are not allowed on loop0 [ 766.014226][ T5879] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 766.206910][ T5879] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 766.233441][ T5879] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 766.266446][ T5879] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 766.339353][ T5879] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 766.366312][ T5879] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 766.393834][ T5879] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 766.426559][ T5879] usb 2-1: config 168 interface 0 has no altsetting 0 [ 766.446313][ T5879] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 766.454452][ T5879] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 766.469045][ T5879] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 766.629829][ T5879] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 767.056052][ T5879] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 767.082755][ T5879] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 767.128175][ T5879] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 767.187750][ T5879] usb 2-1: config 168 interface 0 has no altsetting 0 [ 767.619510][ T5879] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 767.665434][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.746988][ T5879] usb 2-1: can't set config #168, error -71 [ 767.790534][ T5879] usb 2-1: USB disconnect, device number 35 [ 767.819691][ T5635] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 768.473167][ T5635] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 768.557234][ T5635] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 768.597220][ T5635] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.629050][ T5635] usb 5-1: Product: syz [ 768.649779][ T5635] usb 5-1: Manufacturer: syz [ 768.668638][ T5635] usb 5-1: SerialNumber: syz [ 768.722858][ T5635] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 769.172216][ T5635] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 769.185117][T12370] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 769.201221][ T5635] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 769.242432][ T5635] usb 5-1: media controller created [ 769.270111][ T5778] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 769.350890][ T5635] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 769.497995][T12370] 8021q: adding VLAN 0 to HW filter on device bond4 [ 769.513835][ T5778] usb 1-1: Using ep0 maxpacket: 32 [ 769.539345][ T5778] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 769.575083][ T5778] usb 1-1: config 0 interface 0 has no altsetting 0 [ 769.594947][ T5778] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 769.617937][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.658177][ T5778] usb 1-1: config 0 descriptor?? [ 769.715772][T12372] bond4: (slave geneve2): making interface the new active one [ 770.354095][T12372] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 770.360108][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 770.444094][T12367] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1616'. [ 770.946301][ T5635] usb 5-1: USB disconnect, device number 44 [ 771.026597][ T5778] usbhid 1-1:0.0: can't add hid device: -71 [ 771.038764][T12384] overlayfs: failed to resolve './file0': -2 [ 771.098542][ T5778] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 771.137916][ T5778] usb 1-1: USB disconnect, device number 37 [ 771.857711][T12387] blktrace: Concurrent blktraces are not allowed on loop4 [ 773.972585][T12407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1625'. [ 774.983985][T12432] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1627'. [ 776.030110][ T9605] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 776.569272][ T9605] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 776.754768][ T9605] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 776.764040][ T9605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.772147][ T9605] usb 4-1: Product: syz [ 776.776298][ T9605] usb 4-1: Manufacturer: syz [ 776.782001][ T9605] usb 4-1: SerialNumber: syz [ 776.815833][ T9605] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 777.005098][T12453] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 777.694786][T12452] orangefs_mount: mount request failed with -4 [ 778.819731][T12440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 779.086729][ T9605] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 779.127259][ T9605] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 779.177912][ T9605] usb 4-1: media controller created [ 779.257074][ T9605] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 779.381330][T12462] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 779.841136][ T5355] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 780.161252][ T5355] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 780.195517][ T5355] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 780.246259][ T5355] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 780.283260][ T5355] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 780.303906][ T9605] usb 4-1: USB disconnect, device number 56 [ 780.326429][ T5355] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 780.379379][ T5355] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 780.403305][ T5355] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 780.418403][ T5355] usb 1-1: config 168 interface 0 has no altsetting 0 [ 780.431031][ T5355] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 780.438590][ T5355] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 780.489504][ T5355] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 780.541193][ T5355] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 780.589088][ T5355] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 780.617288][ T5355] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 780.650083][ T5355] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 780.672071][ T5355] usb 1-1: config 168 interface 0 has no altsetting 0 [ 780.825132][ T5355] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 780.835367][T12474] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 780.876583][ T5355] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 780.892976][ T9605] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 781.101719][ T5355] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 781.392815][ T5355] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 781.437488][ T5355] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 781.451149][T12473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1641'. [ 781.484190][ T5355] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 781.495623][ T9605] usb 4-1: Using ep0 maxpacket: 8 [ 781.791401][ T9605] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 781.800545][ T5355] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 781.817101][ T9605] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.828852][ T5355] usb 1-1: config 168 interface 0 has no altsetting 0 [ 781.835731][ T9605] usb 4-1: config 0 has no interface number 0 [ 781.845315][ T5355] usb 1-1: string descriptor 0 read error: -22 [ 781.851815][ T5355] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 781.864149][ T5355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.873777][ T9605] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 781.883364][ T9605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.907285][ T5355] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 781.919565][ T9605] usb 4-1: Product: syz [ 781.926216][ T9605] usb 4-1: Manufacturer: syz [ 781.936740][ T9605] usb 4-1: SerialNumber: syz [ 781.954219][ T9605] usb 4-1: config 0 descriptor?? [ 782.018310][T12484] syzkaller0: entered promiscuous mode [ 782.040767][ T9605] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 782.050412][T12484] syzkaller0: entered allmulticast mode [ 782.062373][ T9605] uvcvideo 4-1:0.31: No valid video chain found. [ 782.224199][T12487] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 782.705620][ T9605] usb 1-1: USB disconnect, device number 38 [ 782.712002][T12490] usb 1-1: Couldn't submit interrupt_out_urb -19 [ 783.129441][T12499] Bluetooth: MGMT ver 1.23 [ 784.750013][ T9605] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 784.907528][T12509] overlayfs: failed to resolve './file0': -2 [ 785.014830][ T9605] usb 1-1: unable to get BOS descriptor or descriptor too short [ 785.045756][ T9605] usb 1-1: config 142 has an invalid interface number: 251 but max is 0 [ 785.077612][ T9605] usb 1-1: config 142 has no interface number 0 [ 785.094679][ T9605] usb 1-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 785.126119][ T9605] usb 1-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 785.139662][ T5777] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 785.149925][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 785.156934][ T9605] usb 1-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 785.273488][ T5355] usb 4-1: USB disconnect, device number 57 [ 785.289276][ T9605] usb 1-1: config 142 interface 251 has no altsetting 0 [ 785.327252][ T9605] usb 1-1: string descriptor 0 read error: -22 [ 785.341671][ T9605] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 785.361931][ T9605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.411788][T12506] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 785.456609][T12506] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 785.474525][ T5777] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.489798][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 785.517145][ T5777] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 785.548548][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.562580][ T9] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 785.568729][ T9605] cypress_m8 1-1:142.251: HID->COM RS232 Adapter converter detected [ 785.605421][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.621448][ T5777] usb 5-1: config 0 descriptor?? [ 785.635562][ T9605] usb 1-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 785.652019][ T9] usb 2-1: Product: syz [ 785.681288][ T9] usb 2-1: Manufacturer: syz [ 785.688262][ T5777] pwc: Askey VC010 type 2 USB webcam detected. [ 785.704875][ T9] usb 2-1: SerialNumber: syz [ 785.797961][T12506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.814698][ T9] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 785.843189][T12506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.894575][T12506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.938632][T12506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.989816][T12506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.020870][T12506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.057404][T12506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.085631][T12506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.088767][ T5777] pwc: recv_control_msg error -32 req 02 val 2b00 [ 786.125967][ T5777] pwc: recv_control_msg error -32 req 02 val 2700 [ 786.160688][ T5777] pwc: recv_control_msg error -32 req 02 val 2c00 [ 786.178510][ T5777] pwc: recv_control_msg error -32 req 04 val 1000 [ 786.189825][ T5635] usb 1-1: USB disconnect, device number 39 [ 786.212429][ T5777] pwc: recv_control_msg error -32 req 04 val 1300 [ 786.239546][ T5777] pwc: recv_control_msg error -32 req 04 val 1400 [ 786.267175][ T5777] pwc: recv_control_msg error -32 req 02 val 2000 [ 786.282018][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 786.284231][ T5635] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 786.320288][ T5777] pwc: recv_control_msg error -32 req 02 val 2100 [ 786.352920][ T5635] cypress_m8 1-1:142.251: device disconnected [ 786.366004][ T9] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 786.382044][ T5777] pwc: recv_control_msg error -32 req 04 val 1500 [ 786.397321][ T9] usb 2-1: media controller created [ 786.403479][ T5777] pwc: recv_control_msg error -32 req 02 val 2500 [ 786.417782][ T5777] pwc: recv_control_msg error -32 req 02 val 2400 [ 786.441958][ T5777] pwc: recv_control_msg error -32 req 02 val 2600 [ 786.469354][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 786.666049][ T5777] pwc: recv_control_msg error -71 req 02 val 2800 [ 786.693114][ T5777] pwc: recv_control_msg error -71 req 04 val 1100 [ 786.725796][ T5777] pwc: recv_control_msg error -71 req 04 val 1200 [ 786.778596][ T5777] pwc: Registered as video103. [ 786.844019][ T5777] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input37 [ 786.862768][ T9] usb 2-1: USB disconnect, device number 36 [ 786.929108][ T5777] usb 5-1: USB disconnect, device number 45 [ 788.291774][T12536] overlayfs: failed to resolve './file1': -2 [ 788.421406][T12537] netlink: 'syz.1.1658': attribute type 21 has an invalid length. [ 788.429341][T12537] IPv6: NLM_F_CREATE should be specified when creating new route [ 788.439482][T12537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 788.448250][T12537] IPv6: NLM_F_CREATE should be set when creating new route [ 789.160372][T12540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1659'. [ 790.199980][ T5635] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 790.653479][ T5635] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 790.677262][ T5635] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 790.725151][ T5635] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 790.755558][ T5635] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 790.794793][ T5635] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 790.833613][ T5635] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 791.656975][T12563] overlayfs: failed to resolve './file1': -2 [ 791.935099][T12565] netlink: 'syz.0.1669': attribute type 21 has an invalid length. [ 791.943125][T12565] IPv6: NLM_F_CREATE should be specified when creating new route [ 791.951765][T12565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 791.959030][T12565] IPv6: NLM_F_CREATE should be set when creating new route [ 792.269396][ T5635] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 792.282939][ T5635] usb 2-1: config 168 interface 0 has no altsetting 0 [ 792.291053][ T5635] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 792.309815][ T5635] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 792.321027][ T5635] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 792.331961][ T5635] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 792.343864][ T5635] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 792.355248][ T5635] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 792.366523][ T5635] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 792.380517][ T5635] usb 2-1: config 168 interface 0 has no altsetting 0 [ 792.561993][ T5635] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 792.574001][ T5635] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 792.719664][ T5635] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 792.745195][ T5635] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 792.848626][ T5635] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 792.897509][ T5635] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 792.952463][ T5355] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 792.961915][ T5635] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 793.020998][ T5635] usb 2-1: config 168 interface 0 has no altsetting 0 [ 793.055553][ T5635] usb 2-1: string descriptor 0 read error: -71 [ 793.119789][ T5778] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 793.147116][ T5635] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 793.156217][ T5355] usb 3-1: Using ep0 maxpacket: 8 [ 793.318011][ T5355] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 793.381417][ T5635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.389639][ T5778] usb 6-1: unable to get BOS descriptor or descriptor too short [ 793.404378][ T5355] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.426851][ T5778] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 793.427784][T12574] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 793.441853][T12574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 793.463368][ T5778] usb 6-1: config 142 has no interface number 0 [ 793.613891][ T5355] usb 3-1: config 0 has no interface number 0 [ 793.695275][T12574] vhci_hcd vhci_hcd.0: Device attached [ 793.703040][ T5778] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 793.725458][ T5635] usb 2-1: can't set config #168, error -71 [ 793.739988][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 793.752985][ T5778] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 793.763900][ T5355] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 793.780617][ T5635] usb 2-1: USB disconnect, device number 37 [ 793.791402][ T5355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.805848][ T5778] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 793.826160][ T5355] usb 3-1: Product: syz [ 793.836682][ T5355] usb 3-1: Manufacturer: syz [ 793.847572][ T5778] usb 6-1: config 142 interface 251 has no altsetting 0 [ 793.860591][ T5355] usb 3-1: SerialNumber: syz [ 793.874713][ T5778] usb 6-1: string descriptor 0 read error: -22 [ 793.886634][ T5778] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 793.907244][ T5355] usb 3-1: config 0 descriptor?? [ 793.914595][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.923095][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 793.930524][ T5796] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 793.958886][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 793.972455][ T5355] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 793.988848][T12570] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 793.992720][T12586] blktrace: Concurrent blktraces are not allowed on loop6 [ 794.006636][ T24] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 794.015795][ T5355] uvcvideo 3-1:0.31: No valid video chain found. [ 794.025389][T12570] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 794.041635][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.080741][ T5778] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 794.091688][ T24] usb 1-1: Product: syz [ 794.106536][ T24] usb 1-1: Manufacturer: syz [ 794.135375][ T5778] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 794.154491][ T24] usb 1-1: SerialNumber: syz [ 794.216218][ T24] usb 1-1: config 0 descriptor?? [ 794.287487][ T24] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 794.310878][T12570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.330228][T12570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.344578][ T24] usb 1-1: Detected FT232B [ 794.563302][T12570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.548539][T12570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.623025][T12570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.739245][T12593] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 796.214986][T12570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.266016][ T24] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 796.282040][T12570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.298216][ T24] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 796.307019][T12570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.316332][T12579] usb 33-1: recv xbuf, 0 [ 796.338829][ T8441] vhci_hcd vhci_hcd.0: stop threads [ 796.353572][ T24] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 796.363796][ T8441] vhci_hcd vhci_hcd.0: release socket [ 796.376377][ T8441] vhci_hcd vhci_hcd.0: disconnect device [ 796.391775][ T24] usb 1-1: USB disconnect, device number 40 [ 796.429209][ T24] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 796.458868][ T5778] usb 6-1: USB disconnect, device number 37 [ 796.487808][ T24] ftdi_sio 1-1:0.0: device disconnected [ 796.496238][ T5778] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 796.536916][ T5778] cypress_m8 6-1:142.251: device disconnected [ 796.662893][ T5355] usb 3-1: USB disconnect, device number 36 [ 797.002865][T12600] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 797.747567][T12605] netlink: 'syz.1.1679': attribute type 1 has an invalid length. [ 798.767645][T12616] blktrace: Concurrent blktraces are not allowed on loop0 [ 798.801294][T12602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1677'. [ 798.883037][T12605] 8021q: adding VLAN 0 to HW filter on device bond4 [ 799.444335][T12620] overlayfs: failed to resolve './file1': -2 [ 799.490399][T12611] bond4: (slave geneve2): making interface the new active one [ 799.600502][T12622] netlink: 'syz.4.1682': attribute type 21 has an invalid length. [ 799.608661][T12622] IPv6: NLM_F_CREATE should be specified when creating new route [ 799.619752][T12622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 799.627008][T12622] IPv6: NLM_F_CREATE should be set when creating new route [ 799.984452][T12611] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 800.559649][ T5747] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 801.103673][ T5747] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 801.609740][ T5747] usb 6-1: config 0 has no interface number 0 [ 801.621960][ T5747] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 801.631232][ T5747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.661487][ T5747] usb 6-1: Product: syz [ 801.667274][ T5747] usb 6-1: Manufacturer: syz [ 801.673903][ T5747] usb 6-1: SerialNumber: syz [ 801.724551][ T5747] usb 6-1: config 0 descriptor?? [ 801.763851][ T5747] usb 6-1: selecting invalid altsetting 1 [ 801.773617][ T5747] dvb_ttusb_budget: ttusb_init_controller: error [ 801.805305][ T5747] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 802.594953][ T5747] DVB: Unable to find symbol stv0299_attach() [ 802.907685][T12656] siw: device registration error -23 [ 803.393829][ T5747] DVB: Unable to find symbol tda8083_attach() [ 803.583905][ T5747] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 803.828948][ T5747] usb 6-1: USB disconnect, device number 38 [ 804.394499][T12662] overlayfs: failed to resolve './file1': -2 [ 804.399890][ T5747] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 804.513060][T12663] netlink: 'syz.4.1694': attribute type 21 has an invalid length. [ 804.522553][T12663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 804.968249][ T5747] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 805.000637][ T5747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.025694][ T5747] usb 6-1: Product: syz [ 805.036814][ T5747] usb 6-1: Manufacturer: syz [ 805.049964][ T5747] usb 6-1: SerialNumber: syz [ 805.107103][ T5747] usb 6-1: config 0 descriptor?? [ 805.332913][ T5747] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 805.914815][ T5796] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 806.089734][T12678] blktrace: Concurrent blktraces are not allowed on loop4 [ 806.131743][ T5796] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 806.142184][ T5796] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 806.166121][ T5796] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 806.185991][ T5796] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 806.217530][ T5796] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 806.596344][ T5796] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 806.625789][ T5796] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 806.664426][ T5796] usb 4-1: config 168 interface 0 has no altsetting 0 [ 806.675389][ T5796] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 806.709220][ T5796] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 806.751453][T12682] random: crng reseeded on system resumption [ 806.757595][ T5796] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 806.784028][ T5796] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 806.823792][ T5796] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 806.867875][ T5796] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 806.901783][ T5747] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 806.925181][ T5796] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 806.980964][ T5796] usb 4-1: config 168 interface 0 has no altsetting 0 [ 806.987178][ T5747] usb 6-1: USB disconnect, device number 39 [ 807.018856][ T5796] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 807.042653][ T5796] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 807.084517][ T5796] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 807.100054][ T5796] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 807.124277][ T5796] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 807.156527][ T5796] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 807.168710][ T5796] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 807.319715][ T5778] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 807.332019][ T5796] usb 4-1: config 168 interface 0 has no altsetting 0 [ 807.347879][ T5796] usb 4-1: string descriptor 0 read error: -22 [ 807.359858][ T5796] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 807.377631][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.547708][ T5778] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.591772][ T5796] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 807.602883][ T5778] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 807.612580][ T5747] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 807.762641][ T5778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.799430][ T5778] usb 5-1: config 0 descriptor?? [ 807.803648][ T5747] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 807.893932][T12697] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 807.911723][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.918302][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.070044][ T5778] pwc: Askey VC010 type 2 USB webcam detected. [ 808.402876][ T5796] usb 4-1: USB disconnect, device number 58 [ 808.403715][ T5747] usb 3-1: config 0 has no interface number 0 [ 808.415730][T12698] usb 4-1: Couldn't submit interrupt_out_urb -19 [ 808.470852][ T5747] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 808.544658][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.575769][ T5747] usb 3-1: Product: syz [ 808.662257][ T5778] pwc: recv_control_msg error -32 req 02 val 2b00 [ 808.669412][ T5747] usb 3-1: Manufacturer: syz [ 808.698982][ T5747] usb 3-1: SerialNumber: syz [ 808.824895][ T5747] usb 3-1: config 0 descriptor?? [ 809.014026][ T5747] usb 3-1: selecting invalid altsetting 1 [ 809.075727][ T5747] dvb_ttusb_budget: ttusb_init_controller: error [ 809.165876][ T5747] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 809.626064][ T5778] pwc: recv_control_msg error -32 req 02 val 2700 [ 809.633279][ T5778] pwc: recv_control_msg error -32 req 02 val 2c00 [ 809.640632][ T5778] pwc: recv_control_msg error -32 req 04 val 1000 [ 809.649131][ T5778] pwc: recv_control_msg error -32 req 04 val 1300 [ 809.656263][ T5778] pwc: recv_control_msg error -32 req 04 val 1400 [ 809.667913][ T5778] pwc: recv_control_msg error -32 req 02 val 2000 [ 809.689444][ T5778] pwc: recv_control_msg error -32 req 02 val 2100 [ 809.704968][ T5778] pwc: recv_control_msg error -32 req 04 val 1500 [ 809.786240][T12713] blktrace: Concurrent blktraces are not allowed on loop10 [ 810.479298][ T5778] pwc: recv_control_msg error -71 req 02 val 2400 [ 811.195613][ T5778] pwc: recv_control_msg error -71 req 02 val 2600 [ 811.209709][T12718] overlayfs: missing 'lowerdir' [ 811.304817][T12719] netlink: 'syz.3.1710': attribute type 21 has an invalid length. [ 811.312873][T12719] IPv6: NLM_F_CREATE should be specified when creating new route [ 811.752743][ T5778] pwc: recv_control_msg error -71 req 02 val 2900 [ 811.793930][ T5778] pwc: recv_control_msg error -71 req 02 val 2800 [ 811.832716][ T5778] pwc: recv_control_msg error -71 req 04 val 1100 [ 811.853614][ T5747] DVB: Unable to find symbol stv0299_attach() [ 811.859981][ T5778] pwc: recv_control_msg error -71 req 04 val 1200 [ 811.899278][ T5778] pwc: Registered as video103. [ 811.948681][ T5778] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 811.969447][T12728] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 812.011789][ T5778] usb 5-1: USB disconnect, device number 46 [ 812.011928][ T5747] DVB: Unable to find symbol tda8083_attach() [ 812.023935][ T5776] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 812.239406][ T5747] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 812.377120][ T5776] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.387838][ T5776] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 812.410244][ T5747] usb 3-1: USB disconnect, device number 37 [ 812.444769][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.792350][ T5776] usb 1-1: config 0 descriptor?? [ 812.866528][ T5776] pwc: Askey VC010 type 2 USB webcam detected. [ 813.026624][T12742] blktrace: Concurrent blktraces are not allowed on loop4 [ 813.398437][ T5776] pwc: recv_control_msg error -32 req 02 val 2b00 [ 813.423759][ T5776] pwc: recv_control_msg error -32 req 02 val 2700 [ 813.463107][ T5776] pwc: recv_control_msg error -32 req 02 val 2c00 [ 813.511689][ T5776] pwc: recv_control_msg error -32 req 04 val 1000 [ 813.538323][ T5776] pwc: recv_control_msg error -32 req 04 val 1300 [ 813.567213][ T5776] pwc: recv_control_msg error -32 req 04 val 1400 [ 813.594111][ T5776] pwc: recv_control_msg error -32 req 02 val 2000 [ 813.621174][ T5776] pwc: recv_control_msg error -32 req 02 val 2100 [ 813.645544][ T5776] pwc: recv_control_msg error -32 req 04 val 1500 [ 813.720525][ T5778] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 813.742532][ T5796] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 813.788465][T12751] overlayfs: failed to verify origin (292/file1, ino=1586, err=-116) [ 813.809025][T12751] overlayfs: failed to verify origin (292/file1, ino=1586, err=-116) [ 814.046359][ T5776] pwc: recv_control_msg error -71 req 02 val 2400 [ 814.062988][ T5778] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 814.071959][ T5778] usb 4-1: config 0 has no interface number 0 [ 814.073935][ T5776] pwc: recv_control_msg error -71 req 02 val 2600 [ 814.085767][ T5776] pwc: recv_control_msg error -71 req 02 val 2900 [ 814.087624][ T5778] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 814.913146][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.922299][ T5778] usb 4-1: Product: syz [ 814.923962][ T30] audit: type=1800 audit(1782934619.817:23): pid=12757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1720" name="file0" dev="overlay" ino=1611 res=0 errno=0 [ 814.956560][ T5776] pwc: recv_control_msg error -71 req 02 val 2800 [ 814.963851][ T5776] pwc: recv_control_msg error -71 req 04 val 1100 [ 814.970956][ T5776] pwc: recv_control_msg error -71 req 04 val 1200 [ 814.981900][ T5796] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 814.994694][ T5776] pwc: Registered as video103. [ 815.009938][ T5776] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input39 [ 815.010482][ T5778] usb 4-1: Manufacturer: syz [ 815.048563][ T5796] usb 5-1: config 0 has no interface number 0 [ 815.094343][ T5776] usb 1-1: USB disconnect, device number 41 [ 815.104790][T12756] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 815.122241][ T5778] usb 4-1: SerialNumber: syz [ 815.130890][ T5796] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 815.161804][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.176736][ T5778] usb 4-1: config 0 descriptor?? [ 815.349135][ T5796] usb 5-1: Product: syz [ 815.359245][ T5796] usb 5-1: Manufacturer: syz [ 815.363931][ T5796] usb 5-1: SerialNumber: syz [ 815.383191][ T5778] usb 4-1: selecting invalid altsetting 1 [ 816.024914][T12765] orangefs_mount: mount request failed with -4 [ 817.363612][ T5778] dvb_ttusb_budget: ttusb_init_controller: error [ 817.370075][ T5778] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 817.421336][ T5796] usb 5-1: config 0 descriptor?? [ 817.520672][ T5796] usb 5-1: can't set config #0, error -71 [ 817.540282][ T5778] DVB: Unable to find symbol stv0299_attach() [ 817.556740][ T5796] usb 5-1: USB disconnect, device number 47 [ 817.704621][T12774] blktrace: Concurrent blktraces are not allowed on loop10 [ 818.665863][T12781] orangefs_mount: mount request failed with -4 [ 819.824934][T12778] blktrace: Concurrent blktraces are not allowed on loop4 [ 820.101416][ T5778] DVB: Unable to find symbol tda8083_attach() [ 820.120918][T12792] blktrace: Concurrent blktraces are not allowed on loop10 [ 820.126644][ T5778] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 820.189770][ T5778] usb 4-1: USB disconnect, device number 59 [ 820.204786][T12789] syzkaller0: entered promiscuous mode [ 820.231867][T12789] syzkaller0: entered allmulticast mode [ 822.107101][T12818] orangefs_mount: mount request failed with -4 [ 823.207513][ T5776] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 823.229802][ T5796] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 823.381926][ T5776] usb 5-1: Using ep0 maxpacket: 16 [ 823.449316][ T5776] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 823.491911][ T5796] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 823.524489][ T5776] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 823.545675][ T5796] usb 3-1: config 0 has no interface number 0 [ 823.548780][ T5776] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 823.865327][ T5776] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 823.873715][ T5776] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 823.883019][ T5776] usb 5-1: config 0 has no interface number 0 [ 823.890558][ T5776] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 824.058006][ T5776] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 824.061242][ T5796] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 824.087950][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.088483][ T5776] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 824.107147][ T5796] usb 3-1: Product: syz [ 824.194754][ T5776] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 824.221273][ T5796] usb 3-1: Manufacturer: syz [ 824.250519][ T5796] usb 3-1: SerialNumber: syz [ 824.305392][ T5776] usb 5-1: config 0 interface 125 has no altsetting 0 [ 824.326562][ T5796] usb 3-1: config 0 descriptor?? [ 824.362324][ T5796] usb 3-1: can't set config #0, error -71 [ 824.415235][ T5796] usb 3-1: USB disconnect, device number 38 [ 824.418297][ T5776] usb 5-1: config 0 interface 125 has no altsetting 2 [ 825.262817][ T5776] usb 5-1: string descriptor 0 read error: -71 [ 825.346726][ T5776] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 825.355982][ T5776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.371780][ T5776] usb 5-1: config 0 descriptor?? [ 825.392057][ T5776] usb 5-1: can't set config #0, error -71 [ 825.410015][ T5776] usb 5-1: USB disconnect, device number 48 [ 825.659864][ T5796] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 825.902078][T12840] blktrace: Concurrent blktraces are not allowed on loop6 [ 826.063444][ T5776] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 826.174567][ T5796] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.189118][ T5796] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 826.209513][ T5796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.229706][ T5776] usb 5-1: Using ep0 maxpacket: 32 [ 826.232801][ T5796] usb 3-1: config 0 descriptor?? [ 826.288885][ T5776] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 826.309885][ T5776] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 826.319386][ T5796] pwc: Askey VC010 type 2 USB webcam detected. [ 826.328559][ T5776] usb 5-1: config 0 has no interface number 0 [ 826.358495][ T5776] usb 5-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 826.412722][ T5776] usb 5-1: config 0 interface 89 has no altsetting 0 [ 826.438780][ T5776] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 826.462331][ T5776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.480910][ T5776] usb 5-1: Product: syz [ 826.492557][ T5776] usb 5-1: Manufacturer: syz [ 826.503406][ T5776] usb 5-1: SerialNumber: syz [ 826.522532][ T5776] usb 5-1: config 0 descriptor?? [ 826.669513][ T5796] pwc: recv_control_msg error -32 req 02 val 2b00 [ 826.690880][ T5796] pwc: recv_control_msg error -32 req 02 val 2700 [ 826.714212][ T5796] pwc: recv_control_msg error -32 req 02 val 2c00 [ 826.733024][ T5796] pwc: recv_control_msg error -32 req 04 val 1000 [ 826.752615][ T5796] pwc: recv_control_msg error -32 req 04 val 1300 [ 826.780419][ T5796] pwc: recv_control_msg error -32 req 04 val 1400 [ 826.803045][ T5796] pwc: recv_control_msg error -32 req 02 val 2000 [ 826.835128][ T5796] pwc: recv_control_msg error -32 req 02 val 2100 [ 826.860113][ T5796] pwc: recv_control_msg error -32 req 04 val 1500 [ 827.084118][ T5796] pwc: recv_control_msg error -71 req 02 val 2400 [ 827.104967][ T5796] pwc: recv_control_msg error -71 req 02 val 2600 [ 827.125246][ T5796] pwc: recv_control_msg error -71 req 02 val 2900 [ 827.136840][ T5796] pwc: recv_control_msg error -71 req 02 val 2800 [ 827.155150][ T5796] pwc: recv_control_msg error -71 req 04 val 1100 [ 827.166478][ T5796] pwc: recv_control_msg error -71 req 04 val 1200 [ 827.188145][ T5796] pwc: Registered as video103. [ 827.220497][ T5796] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 827.274868][ T5796] usb 3-1: USB disconnect, device number 39 [ 827.700119][T12864] blktrace: Concurrent blktraces are not allowed on loop2 [ 828.876926][T12880] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 829.630853][T12878] orangefs_mount: mount request failed with -4 [ 831.437216][ T9] usb 5-1: USB disconnect, device number 49 [ 832.059545][ T5762] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 832.168393][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 832.339392][ T5762] usb 2-1: device descriptor read/64, error -32 [ 832.508034][T12894] blktrace: Concurrent blktraces are not allowed on loop8 [ 832.900615][ T5762] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 833.578052][ T5762] usb 2-1: Using ep0 maxpacket: 16 [ 833.640456][ T5762] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 833.665837][ T5762] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 833.706321][ T5762] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 833.745215][ T5762] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 833.808412][ T5762] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 833.884221][ T5762] usb 2-1: config 0 has no interface number 0 [ 833.965083][ T5762] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 834.136490][ T5762] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 834.295321][ T5762] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 834.368754][ T5762] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 834.502292][ T5762] usb 2-1: config 0 interface 125 has no altsetting 0 [ 834.542788][ T5762] usb 2-1: config 0 interface 125 has no altsetting 2 [ 834.602297][ T5762] usb 2-1: string descriptor 0 read error: -71 [ 834.700863][ T5762] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 834.825346][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.939096][ T5762] usb 2-1: config 0 descriptor?? [ 834.984503][ T5762] usb 2-1: can't set config #0, error -71 [ 835.062360][ T5762] usb 2-1: USB disconnect, device number 39 [ 836.304254][ T5762] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 836.512430][T12963] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 837.034139][T12962] orangefs_mount: mount request failed with -4 [ 838.158887][ T5762] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 838.180240][ T5762] usb 2-1: config 0 has no interface number 0 [ 838.188682][ T5762] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 838.235526][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.323123][T12965] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 838.331034][T12965] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 838.340378][T12965] hsr0: entered promiscuous mode [ 838.393058][ T5762] usb 2-1: Product: syz [ 838.409957][T12964] hsr0: left promiscuous mode [ 838.424570][ T5762] usb 2-1: Manufacturer: syz [ 838.440593][ T5762] usb 2-1: SerialNumber: syz [ 838.501551][ T5762] usb 2-1: config 0 descriptor?? [ 838.751107][ T5762] usb 2-1: selecting invalid altsetting 1 [ 839.542160][ T5796] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 839.588432][ T5762] dvb_ttusb_budget: ttusb_init_controller: error [ 839.651090][ T5762] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 839.742288][ T5796] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 839.792111][ T5796] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 839.830890][ T5796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.877261][ T5796] usb 6-1: config 0 descriptor?? [ 839.935999][ T5796] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 839.960639][T12982] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 839.967171][T12982] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 839.981024][ T5762] DVB: Unable to find symbol stv0299_attach() [ 840.010556][T12982] vhci_hcd vhci_hcd.0: Device attached [ 840.059838][ T5777] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 840.128152][ T5762] DVB: Unable to find symbol tda8083_attach() [ 840.143988][ T5762] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 840.145554][ T5778] usb 6-1: USB disconnect, device number 40 [ 840.193676][ T5762] usb 2-1: USB disconnect, device number 40 [ 840.250179][ T5777] usb 4-1: Using ep0 maxpacket: 16 [ 840.259992][ T5796] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 840.261951][ T5777] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 840.308207][ T5777] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 840.345321][ T5777] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 840.375547][ T5777] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 840.398679][ T5777] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 840.408162][ T5777] usb 4-1: config 0 has no interface number 0 [ 840.414655][ T5777] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 840.426064][ T5777] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 840.457619][ T5777] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 840.476897][ T5777] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 840.514244][ T5777] usb 4-1: config 0 interface 125 has no altsetting 0 [ 840.534044][ T5777] usb 4-1: config 0 interface 125 has no altsetting 2 [ 840.553948][ T5777] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 840.572739][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.595161][ T5777] usb 4-1: Product: syz [ 840.608554][ T5777] usb 4-1: Manufacturer: syz [ 840.619663][ T5762] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 840.629797][ T5777] usb 4-1: SerialNumber: syz [ 840.651143][ T5777] usb 4-1: config 0 descriptor?? [ 840.668837][ T5777] usb 4-1: selecting invalid altsetting 2 [ 840.771313][ T5762] usb 2-1: Using ep0 maxpacket: 16 [ 840.781618][ T5762] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 840.796047][ T5762] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 840.822412][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.847011][ T5762] usb 2-1: Product: syz [ 840.858602][ T5762] usb 2-1: Manufacturer: syz [ 840.895450][ T5762] usb 2-1: SerialNumber: syz [ 840.927931][ T5762] usb 2-1: config 0 descriptor?? [ 841.197408][ T5762] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 841.222552][ T5762] usb 2-1: Detected FT232B [ 841.539787][ T5776] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 841.661130][ T5762] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 841.669115][T12983] usb 35-1: recv xbuf, 0 [ 841.677449][ T5762] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 841.692454][ T36] vhci_hcd vhci_hcd.1: stop threads [ 841.714235][ T36] vhci_hcd vhci_hcd.1: release socket [ 841.728352][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 841.748014][ T5777] get_1284_register timeout [ 841.753986][ T5776] usb 3-1: unable to get BOS descriptor or descriptor too short [ 841.762946][ T5762] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 841.783330][ C0] usb 4-1: async_complete: urb error -104 [ 841.789211][ C0] usb 4-1: async_complete: urb error -104 [ 841.796645][ T5776] usb 3-1: config 142 has an invalid interface number: 251 but max is 0 [ 841.805136][ T5776] usb 3-1: config 142 has no interface number 0 [ 841.828231][ T5762] usb 2-1: USB disconnect, device number 41 [ 841.838422][ T5776] usb 3-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 841.882381][ T5762] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 841.897637][ T5776] usb 3-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 841.942736][ T5762] ftdi_sio 2-1:0.0: device disconnected [ 841.953266][ T5776] usb 3-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 841.982729][ T5776] usb 3-1: config 142 interface 251 has no altsetting 0 [ 842.025478][ T5776] usb 3-1: string descriptor 0 read error: -22 [ 842.047786][ T5776] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 842.164322][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.235122][T13000] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 842.260452][T13000] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 842.662195][ T5776] cypress_m8 3-1:142.251: HID->COM RS232 Adapter converter detected [ 842.711610][ T5776] usb 3-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 842.936068][T13000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.978169][T13013] blktrace: Concurrent blktraces are not allowed on loop8 [ 843.143296][T13021] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 843.948861][T13020] orangefs_mount: mount request failed with -4 [ 843.956321][T13000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.369000][ T5776] usb 3-1: USB disconnect, device number 40 [ 845.424133][ T30] audit: type=1326 audit(1782934650.927:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.5.1783" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f756df9de59 code=0x0 [ 845.593312][ T5776] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 846.481231][ T5776] cypress_m8 3-1:142.251: device disconnected [ 846.565495][T13037] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1785'. [ 848.679729][ T5879] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 848.972799][ T5879] usb 3-1: config 0 has no interfaces? [ 848.992924][ T5879] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 849.030644][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.067691][ T5879] usb 3-1: config 0 descriptor?? [ 849.400122][ T5879] usb 3-1: USB disconnect, device number 41 [ 850.112327][ T5778] usb 4-1: USB disconnect, device number 60 [ 851.537580][T13078] orangefs_mount: mount request failed with -4 [ 852.824554][T13082] random: crng reseeded on system resumption [ 854.190867][T13092] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1793'. [ 854.213310][T13092] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 854.219792][T13092] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 854.234340][T13092] hsr0: entered promiscuous mode [ 855.649890][T13089] hsr0: left promiscuous mode [ 855.834725][T13099] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 856.303446][T13098] orangefs_mount: mount request failed with -4 [ 858.077519][ T5796] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 858.304278][T13106] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 858.311668][T13106] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 858.332892][T13104] hsr0: entered promiscuous mode [ 858.442832][ T5796] usb 4-1: unable to get BOS descriptor or descriptor too short [ 858.505503][ T5796] usb 4-1: config 142 has an invalid interface number: 251 but max is 0 [ 858.531637][ T5796] usb 4-1: config 142 has no interface number 0 [ 859.043057][ T5796] usb 4-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 859.100767][ T5796] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 859.122530][ T5796] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 859.143061][ T5796] usb 4-1: config 142 interface 251 has no altsetting 0 [ 859.417238][T13102] hsr0: left promiscuous mode [ 859.432976][ T5796] usb 4-1: string descriptor 0 read error: -22 [ 859.459183][ T5796] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 859.472011][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.526142][T13101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 859.550804][T13101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 859.607299][T13115] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 859.613826][T13115] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 859.647181][ T5796] cypress_m8 4-1:142.251: HID->COM RS232 Adapter converter detected [ 859.705239][T13115] vhci_hcd vhci_hcd.0: Device attached [ 859.734240][ T5796] usb 4-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 859.864510][T13101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.912390][T13101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.951578][T13101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.963386][ T5776] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 859.971306][ T5762] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 860.032501][T13101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.139093][T13101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.139844][T13131] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 860.255727][T13101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.294297][ T5762] usb 1-1: Using ep0 maxpacket: 16 [ 860.591841][ T5762] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 860.685664][T13101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.722020][ T5762] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 860.735863][T13101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.753203][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.764515][T13134] binder_alloc: 13132: binder_alloc_buf, no vma [ 860.776072][ T5762] usb 1-1: Product: syz [ 860.786231][ T5762] usb 1-1: Manufacturer: syz [ 860.794558][ T5762] usb 1-1: SerialNumber: syz [ 860.803202][ T5879] usb 4-1: USB disconnect, device number 61 [ 860.824768][ T5879] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 860.844053][ T5762] usb 1-1: config 0 descriptor?? [ 860.859205][ T5879] cypress_m8 4-1:142.251: device disconnected [ 860.880413][ T5762] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 860.914805][ T5762] usb 1-1: Detected FT232B [ 861.039923][ T5796] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 861.065415][T13140] random: crng reseeded on system resumption [ 861.081387][T13116] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 861.141916][ T8441] vhci_hcd vhci_hcd.0: stop threads [ 861.165257][ T8441] vhci_hcd vhci_hcd.0: release socket [ 861.213059][ T5762] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 861.232802][ T8441] vhci_hcd vhci_hcd.0: disconnect device [ 861.367788][ T5762] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 861.556078][ T5762] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 861.663745][ T5796] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 861.690266][ T5762] usb 1-1: USB disconnect, device number 42 [ 861.934210][ T5796] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 861.945523][ T5796] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 861.952429][ T5762] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 861.956658][ T5796] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 861.977606][ T5796] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 861.989242][ T5796] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 862.000931][ T5796] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 862.015631][ T5796] usb 2-1: config 168 interface 0 has no altsetting 0 [ 862.025327][ T5796] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 862.034899][ T5796] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 862.046396][ T5796] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 862.057607][ T5796] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 862.070092][ T5796] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 862.071459][T13144] blktrace: Concurrent blktraces are not allowed on loop8 [ 862.081743][ T5796] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 862.103985][ T5762] ftdi_sio 1-1:0.0: device disconnected [ 862.191184][ T5796] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 862.243042][ T5796] usb 2-1: config 168 interface 0 has no altsetting 0 [ 862.255100][ T5796] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 862.270658][ T5796] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 862.466405][ T5796] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 862.489677][ T5796] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 862.501988][ T5796] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 862.671207][T13149] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 863.174131][T13148] orangefs_mount: mount request failed with -4 [ 864.320061][ T5796] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 864.333225][ T5796] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 864.346762][ T5796] usb 2-1: config 168 interface 0 has no altsetting 0 [ 864.357411][ T5796] usb 2-1: string descriptor 0 read error: -22 [ 864.364699][ T5796] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 864.400120][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.450536][ T5796] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 865.052019][ T185] usb 2-1: USB disconnect, device number 42 [ 865.169674][ T5776] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 865.235127][T13159] netlink: 'syz.5.1809': attribute type 2 has an invalid length. [ 865.629853][T13161] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 865.636305][T13161] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 865.740075][T13161] hsr0: entered promiscuous mode [ 865.828336][T13156] hsr0: left promiscuous mode [ 865.863168][T13164] binder_alloc: 13163: binder_alloc_buf size 1024 failed, no address space [ 865.899730][T13164] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 866.138063][T13169] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1813'. [ 868.092370][ T185] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 868.198376][T13209] random: crng reseeded on system resumption [ 868.304929][ T185] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.443883][ T185] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 868.635086][ T185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.155119][ T185] usb 3-1: config 0 descriptor?? [ 869.212433][ T185] pwc: Askey VC010 type 2 USB webcam detected. [ 869.331372][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.337838][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.770242][T13217] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 870.211927][T13216] orangefs_mount: mount request failed with -4 [ 870.578003][ T185] pwc: recv_control_msg error -32 req 02 val 2b00 [ 871.263272][ T185] pwc: recv_control_msg error -32 req 02 val 2700 [ 871.604986][ T185] pwc: recv_control_msg error -71 req 02 val 2c00 [ 871.657198][ T185] pwc: recv_control_msg error -71 req 04 val 1000 [ 871.687989][ T185] pwc: recv_control_msg error -71 req 04 val 1300 [ 871.736540][ T185] pwc: recv_control_msg error -71 req 04 val 1400 [ 871.833213][ T185] pwc: recv_control_msg error -71 req 02 val 2000 [ 871.875971][ T185] pwc: recv_control_msg error -71 req 02 val 2100 [ 871.897451][ T185] pwc: recv_control_msg error -71 req 04 val 1500 [ 871.920013][ T5796] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 871.949303][ T185] pwc: recv_control_msg error -71 req 02 val 2500 [ 871.978650][ T185] pwc: recv_control_msg error -71 req 02 val 2400 [ 871.985866][ T5747] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 872.027537][ T185] pwc: recv_control_msg error -71 req 02 val 2600 [ 872.071885][ T185] pwc: recv_control_msg error -71 req 02 val 2900 [ 872.101664][ T5796] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 872.120146][ T185] pwc: recv_control_msg error -71 req 02 val 2800 [ 872.130885][ T5796] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 872.154466][ T5747] usb 2-1: Using ep0 maxpacket: 16 [ 872.167663][ T5796] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 872.198205][ T185] pwc: recv_control_msg error -71 req 04 val 1100 [ 872.219102][ T5796] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 872.254393][ T5747] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 872.267396][ T185] pwc: recv_control_msg error -71 req 04 val 1200 [ 872.280386][ T5747] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 872.294451][ T5796] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 872.310226][ T185] pwc: Registered as video103. [ 872.321719][ T5747] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 872.355496][ T185] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41 [ 872.355973][ T5796] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 872.428272][ T5747] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 872.458725][ T5796] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 872.523741][ T5796] usb 6-1: config 168 interface 0 has no altsetting 0 [ 872.558746][ T5747] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 872.573379][ T5796] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 872.585214][ T185] usb 3-1: USB disconnect, device number 42 [ 872.609967][ T5796] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 872.657858][ T5747] usb 2-1: config 0 has no interface number 0 [ 872.679191][ T5796] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 872.727729][ T5796] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 872.771630][ T5747] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 872.784540][ T5747] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 872.828097][ T5796] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 872.868182][ T5747] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 872.893359][ T5796] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 872.948947][ T5796] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 873.015254][ T5796] usb 6-1: config 168 interface 0 has no altsetting 0 [ 873.055382][ T5747] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 873.057864][ T5796] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 873.150368][ T5796] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 873.198350][ T5796] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 873.221573][ T5747] usb 2-1: config 0 interface 125 has no altsetting 0 [ 873.254161][ T5796] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 873.286007][ T5747] usb 2-1: config 0 interface 125 has no altsetting 2 [ 873.308606][ T5796] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 873.358682][ T5796] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 873.359497][ T5747] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 873.418243][ T5796] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 873.468022][ T5796] usb 6-1: config 168 interface 0 has no altsetting 0 [ 873.494079][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.497281][ T5796] usb 6-1: string descriptor 0 read error: -22 [ 873.545160][ T5747] usb 2-1: Product: syz [ 873.556729][ T5796] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 873.569484][ T5747] usb 2-1: Manufacturer: syz [ 873.593638][ T5796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.602073][ T5635] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 873.645894][ T5747] usb 2-1: SerialNumber: syz [ 873.683958][ T5747] usb 2-1: config 0 descriptor?? [ 873.712521][ T5747] usb 2-1: selecting invalid altsetting 2 [ 873.737317][ T5796] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 873.810793][ T5635] usb 4-1: Using ep0 maxpacket: 8 [ 873.839477][ T5635] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 873.858351][ T5635] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.897167][ T5635] usb 4-1: config 0 has no interface number 0 [ 873.940403][ T5635] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 873.964368][ T5635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.979826][ T5635] usb 4-1: Product: syz [ 873.990594][ T5635] usb 4-1: Manufacturer: syz [ 874.018275][ T5635] usb 4-1: SerialNumber: syz [ 874.038579][ T5355] usb 6-1: USB disconnect, device number 41 [ 874.073840][ T5635] usb 4-1: config 0 descriptor?? [ 874.074752][T13238] binder_alloc: 13237: binder_alloc_buf size 1024 failed, no address space [ 874.135687][T13238] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 874.168692][ T5635] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 874.177710][ T5635] uvcvideo 4-1:0.31: No valid video chain found. [ 874.287023][T13244] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1831'. [ 874.471968][ T30] audit: type=1326 audit(1782934680.037:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13247 comm="syz.2.1832" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbc459de59 code=0x0 [ 875.358151][ T5747] get_1284_register timeout [ 875.396300][ C0] usb 2-1: async_complete: urb error -104 [ 875.402171][ C0] usb 2-1: async_complete: urb error -104 [ 875.750318][ T5355] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 876.144310][ T5355] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.245779][ T5355] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 876.310199][ T5355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.461473][ T5796] usb 4-1: USB disconnect, device number 62 [ 876.483629][T13266] random: crng reseeded on system resumption [ 876.495593][ T5355] usb 1-1: config 0 descriptor?? [ 876.562217][ T5355] pwc: Askey VC010 type 2 USB webcam detected. [ 877.345146][T13269] loop3: detected capacity change from 0 to 512 [ 877.412143][ T5355] pwc: recv_control_msg error -32 req 02 val 2b00 [ 877.446565][T13269] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1837: invalid indirect mapped block 256 (level 2) [ 877.464259][ T5355] pwc: recv_control_msg error -32 req 02 val 2700 [ 877.515103][ T5355] pwc: recv_control_msg error -32 req 02 val 2c00 [ 877.553041][T13269] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 877.559590][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 877.575169][ C1] EXT4-fs (loop3): initial error at time 1782934683: ext4_free_branches:1023: inode 11 [ 877.584916][ C1] EXT4-fs (loop3): last error at time 1782934683: ext4_free_branches:1023: inode 11 [ 877.594992][ T5355] pwc: recv_control_msg error -32 req 04 val 1000 [ 877.606131][T13269] EXT4-fs (loop3): 2 truncates cleaned up [ 877.612180][ T5355] pwc: recv_control_msg error -32 req 04 val 1300 [ 877.628861][ T5355] pwc: recv_control_msg error -32 req 04 val 1400 [ 877.659102][ T5355] pwc: recv_control_msg error -32 req 02 val 2000 [ 877.685890][T13269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 877.798629][ T5355] pwc: recv_control_msg error -32 req 02 val 2100 [ 877.867694][ T5355] pwc: recv_control_msg error -32 req 04 val 1500 [ 877.921975][ T5355] pwc: recv_control_msg error -32 req 02 val 2500 [ 877.951690][ T5355] pwc: recv_control_msg error -32 req 02 val 2400 [ 878.149824][ T5355] pwc: recv_control_msg error -32 req 02 val 2600 [ 878.572517][T13293] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1837: bg 0: block 5: invalid block bitmap [ 878.811246][ T5355] pwc: recv_control_msg error -71 req 02 val 2800 [ 878.821064][T13293] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 878.835061][T13293] EXT4-fs (loop3): This should not happen!! Data will be lost [ 878.835061][T13293] [ 878.844739][T13293] EXT4-fs (loop3): Total free blocks count 0 [ 878.850781][T13293] EXT4-fs (loop3): Free/Dirty block details [ 878.856674][T13293] EXT4-fs (loop3): free_blocks=0 [ 878.861654][T13293] EXT4-fs (loop3): dirty_blocks=540 [ 878.866847][T13293] EXT4-fs (loop3): Block reservation details [ 878.872871][T13293] EXT4-fs (loop3): i_reserved_data_blocks=540 [ 878.987099][ T5355] pwc: recv_control_msg error -71 req 04 val 1100 [ 878.998289][ T5355] pwc: recv_control_msg error -71 req 04 val 1200 [ 879.035323][ T8446] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 536 with error 28 [ 879.156758][ T5355] pwc: Registered as video103. [ 879.180871][ T5625] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 879.241787][ T5355] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input42 [ 879.391653][ T5355] usb 1-1: USB disconnect, device number 43 [ 879.825768][T13314] blktrace: Concurrent blktraces are not allowed on loop6 [ 880.068632][T13319] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 880.075220][T13319] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 880.094544][T13319] hsr0: entered promiscuous mode [ 881.016377][T13316] hsr0: left promiscuous mode [ 881.504847][ T5747] usb 2-1: USB disconnect, device number 43 [ 881.939751][ T185] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 882.091510][ T185] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 882.100002][ T185] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 882.159632][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 882.629091][ T185] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 882.722043][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 882.763942][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 882.800706][ T185] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 882.896540][ T185] usb 1-1: config 168 interface 0 has no altsetting 0 [ 882.953498][ T185] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 882.994950][ T185] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 883.098807][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 883.139015][T13338] random: crng reseeded on system resumption [ 883.294710][ T185] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 883.356235][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 883.413675][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 883.746453][ T185] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 883.861523][ T185] usb 1-1: config 168 interface 0 has no altsetting 0 [ 883.992256][ T185] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 884.030587][ T185] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 884.138534][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 884.236158][ T185] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 884.263655][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 884.443492][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 884.455537][ T185] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 884.484958][ T185] usb 1-1: config 168 interface 0 has no altsetting 0 [ 884.505199][ T185] usb 1-1: string descriptor 0 read error: -22 [ 884.514347][ T185] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 884.731088][ T185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.333754][ T185] usb 1-1: can't set config #168, error -71 [ 885.404147][ T185] usb 1-1: USB disconnect, device number 44 [ 886.441824][ T30] audit: type=1800 audit(1782934691.357:26): pid=13362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1856" name="file0" dev="overlay" ino=1626 res=0 errno=0 [ 886.529398][T13366] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1858'. [ 887.115187][T13372] syzkaller0: entered promiscuous mode [ 887.137758][T13372] syzkaller0: entered allmulticast mode [ 887.310101][T13378] netlink: 'syz.2.1860': attribute type 32 has an invalid length. [ 887.456613][T13372] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 887.715939][T13390] netlink: 'syz.2.1864': attribute type 1 has an invalid length. [ 887.759821][ T5796] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 887.947728][T13390] 8021q: adding VLAN 0 to HW filter on device bond5 [ 887.975927][ T5796] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 888.027949][ T5796] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 888.067812][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.068317][T13393] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 888.138461][ T5796] usb 2-1: Product: syz [ 888.163052][ T5796] usb 2-1: Manufacturer: syz [ 888.198053][ T5796] usb 2-1: SerialNumber: syz [ 888.246281][ T5796] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 888.295277][T13406] random: crng reseeded on system resumption [ 889.760896][ T5796] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 889.776811][ T5796] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 889.838096][ T5796] usb 2-1: media controller created [ 890.102834][ T5796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 891.083066][T13435] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1868'. [ 891.413651][ T9] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 891.429803][T13442] blktrace: Concurrent blktraces are not allowed on loop0 [ 891.527637][ T5796] usb 2-1: USB disconnect, device number 44 [ 891.611644][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 891.642261][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 891.739683][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 891.808291][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 891.902284][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 891.976704][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 892.039393][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 892.115382][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 892.175023][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 892.229945][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 892.352740][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 892.386327][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 892.424930][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 892.516269][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 892.595186][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 892.721537][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 892.754395][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 892.809975][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 892.896952][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 892.955119][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 893.066019][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 893.154116][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 893.235920][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 893.321663][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 893.363724][ T9] usb 5-1: string descriptor 0 read error: -22 [ 893.410009][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 893.487890][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.833970][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 894.539451][ T30] audit: type=1800 audit(1782934699.577:27): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1876" name="file0" dev="overlay" ino=1774 res=0 errno=0 [ 894.621954][ T9] usb 5-1: USB disconnect, device number 50 [ 895.171111][T13464] blktrace: Concurrent blktraces are not allowed on loop0 [ 895.279008][T13465] vivid-002: ================= START STATUS ================= [ 895.376400][T13465] vivid-002: Radio HW Seek Mode: Bounded [ 895.404311][T13465] vivid-002: Radio Programmable HW Seek: false [ 895.419693][T13465] vivid-002: RDS Rx I/O Mode: Block I/O [ 895.461043][T13465] vivid-002: Generate RBDS Instead of RDS: false [ 895.496198][T13465] vivid-002: RDS Reception: true [ 895.515437][T13465] vivid-002: RDS Program Type: 0 inactive [ 895.551935][T13465] vivid-002: RDS PS Name: inactive [ 895.566372][T13465] vivid-002: RDS Radio Text: inactive [ 895.574187][T13472] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 895.582693][T13465] vivid-002: RDS Traffic Announcement: false inactive [ 895.602787][T13465] vivid-002: RDS Traffic Program: false inactive [ 895.627733][T13465] vivid-002: RDS Music: false inactive [ 895.640573][T13465] vivid-002: ================== END STATUS ================== [ 895.721300][T13472] 8021q: adding VLAN 0 to HW filter on device bond4 [ 895.756032][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 895.773148][T13474] bond3: (slave dummy0): Releasing active interface [ 895.833254][T13474] bond4: (slave dummy0): making interface the new active one [ 895.848005][T13476] random: crng reseeded on system resumption [ 895.882544][T13474] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 895.968552][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.181823][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 896.361867][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.489151][ T9] usb 3-1: config 0 descriptor?? [ 897.747129][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 897.985605][T13489] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 898.269785][ T5776] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 898.366393][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 898.504078][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 898.678173][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 898.687807][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 898.699494][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 898.708405][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 898.717566][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 898.808759][ T5776] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 898.824731][T13495] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1885'. [ 899.003552][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 899.024219][ T5776] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 899.035658][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 899.144865][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.162006][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 899.173442][ T5776] usb 4-1: Product: syz [ 899.180874][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 899.188837][ T5776] usb 4-1: Manufacturer: syz [ 899.197835][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 899.208165][ T5776] usb 4-1: SerialNumber: syz [ 899.224532][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 899.245397][ T5776] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 899.260814][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 899.279942][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 899.344158][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 899.382125][ T9] pwc: Registered as video103. [ 899.423705][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input43 [ 899.487813][ T9] usb 3-1: USB disconnect, device number 43 [ 899.764455][ T5776] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 899.782582][ T5776] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 899.795045][ T5776] usb 4-1: media controller created [ 899.967661][ T5776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 901.202533][T13515] orangefs_mount: mount request failed with -4 [ 902.800391][ T185] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 903.019000][ T5776] usb 4-1: USB disconnect, device number 63 [ 903.034243][ T185] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 903.058055][ T185] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 903.222028][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 903.260552][ T185] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 903.305690][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 903.481738][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 903.493496][ T185] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 903.511429][ T185] usb 1-1: config 168 interface 0 has no altsetting 0 [ 904.311762][ T185] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 904.322092][ T185] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 904.322236][ T36] Bluetooth: (null): Invalid header checksum [ 904.334317][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 904.334354][ T185] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 904.334384][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 904.334417][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 904.334448][ T185] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 904.334482][ T185] usb 1-1: config 168 interface 0 has no altsetting 0 [ 904.335632][ T185] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 904.922870][T13522] syz.3.1896 (13522) used greatest stack depth: 18312 bytes left [ 904.995647][ T185] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 905.031202][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 905.096223][ T185] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 905.709463][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 905.742557][ T185] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 905.795772][ T185] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 905.870022][ T185] usb 1-1: config 168 interface 0 has no altsetting 0 [ 905.918435][ T185] usb 1-1: string descriptor 0 read error: -71 [ 905.948994][ T185] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 905.949245][T13547] blktrace: Concurrent blktraces are not allowed on loop6 [ 906.024807][ T185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.428435][ T185] usb 1-1: can't set config #168, error -71 [ 907.475955][ T185] usb 1-1: USB disconnect, device number 45 [ 909.081090][T13575] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1903'. [ 909.290663][ T5776] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 909.462361][ T5776] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 909.663306][ T5776] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 909.674218][ T5776] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.682651][ T5776] usb 6-1: Product: syz [ 909.686880][ T5776] usb 6-1: Manufacturer: syz [ 909.693863][ T5776] usb 6-1: SerialNumber: syz [ 909.713536][ T5776] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 909.916129][ T30] audit: type=1800 audit(1782934715.477:28): pid=13584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1911" name="file0" dev="overlay" ino=1692 res=0 errno=0 [ 910.230053][ T5776] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 910.257295][ T5776] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 910.287375][ T5776] usb 6-1: media controller created [ 910.368580][ T5776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 910.399666][T13150] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 910.603419][T13150] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 910.633139][T13150] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 910.692482][T13150] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 910.808360][T13150] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 911.028304][T13150] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 911.203974][T13150] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 911.351141][T13150] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 911.513012][T13150] usb 5-1: config 168 interface 0 has no altsetting 0 [ 911.736247][T13150] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 911.757576][T13150] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 911.796629][T13150] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 911.839584][T13150] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 912.027628][T13150] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 912.044658][T13150] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 912.056647][T13150] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 912.071559][T13150] usb 5-1: config 168 interface 0 has no altsetting 0 [ 912.082045][ T5776] usb 6-1: USB disconnect, device number 42 [ 912.184779][T13150] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 912.216240][T13150] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 912.286495][T13150] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 912.346155][T13150] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 912.400814][T13150] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 912.475822][T13150] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 912.539505][T13150] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 912.615564][T13150] usb 5-1: config 168 interface 0 has no altsetting 0 [ 914.886634][T13150] usb 5-1: string descriptor 0 read error: -71 [ 914.893022][T13150] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 914.908348][T13150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.958996][T13150] usb 5-1: can't set config #168, error -71 [ 915.022757][T13150] usb 5-1: USB disconnect, device number 51 [ 917.148324][T13641] overlayfs: failed to resolve './file1': -2 [ 917.352540][T13647] netlink: 'syz.5.1923': attribute type 21 has an invalid length. [ 917.360665][T13647] IPv6: NLM_F_CREATE should be specified when creating new route [ 917.369668][T13647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 917.376919][T13647] IPv6: NLM_F_CREATE should be set when creating new route [ 918.791375][T13658] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1926'. [ 919.389631][ T5635] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 920.864351][ T5635] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 920.880259][ T5635] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 920.891190][ T5635] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.910052][ T5635] usb 6-1: Product: syz [ 920.938439][ T5635] usb 6-1: Manufacturer: syz [ 920.943579][ T5635] usb 6-1: SerialNumber: syz [ 921.849243][ T5635] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 922.262603][ T5635] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 922.277203][ T5635] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 922.283672][T13680] overlayfs: failed to resolve './file1': -2 [ 922.309502][ T5635] usb 6-1: media controller created [ 922.390208][T13681] netlink: 'syz.0.1934': attribute type 21 has an invalid length. [ 922.399317][T13681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 922.910406][ T5635] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 924.185576][ T5635] usb 6-1: USB disconnect, device number 43 [ 924.573102][T13694] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 925.281946][T13699] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 925.288480][T13699] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 925.333262][T13699] vhci_hcd vhci_hcd.0: Device attached [ 925.569652][ T5355] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 925.604920][T13707] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 925.611428][T13707] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 925.620060][ T5635] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 925.686555][T13707] vhci_hcd vhci_hcd.0: Device attached [ 925.839679][ T5635] usb 3-1: Using ep0 maxpacket: 16 [ 925.864086][ T5635] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 925.898099][ T5635] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 925.919674][ T9] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 925.928234][ T5635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.092967][ T185] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 926.151719][ T5635] usb 3-1: Product: syz [ 926.168455][ T5635] usb 3-1: Manufacturer: syz [ 926.197868][ T5635] usb 3-1: SerialNumber: syz [ 926.221087][ T5635] usb 3-1: config 0 descriptor?? [ 926.257162][ T5635] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 926.265462][ T185] usb 1-1: Using ep0 maxpacket: 16 [ 926.286240][ T5635] usb 3-1: Detected FT232B [ 926.288504][ T185] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 926.332279][ T185] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 926.369901][ T185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.396827][ T185] usb 1-1: Product: syz [ 926.414659][ T185] usb 1-1: Manufacturer: syz [ 926.427310][ T185] usb 1-1: SerialNumber: syz [ 926.467850][ T185] usb 1-1: config 0 descriptor?? [ 926.485179][ T5635] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 926.498265][ T185] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 926.501456][T13702] usb 37-1: recv xbuf, 0 [ 926.518497][ T5635] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 926.543527][ T8441] vhci_hcd vhci_hcd.2: stop threads [ 926.558539][ T5635] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 926.572086][ T8441] vhci_hcd vhci_hcd.2: release socket [ 926.592920][ T8441] vhci_hcd vhci_hcd.2: disconnect device [ 926.605797][ T185] usb 1-1: Detected FT232B [ 926.621400][ T5635] usb 3-1: USB disconnect, device number 44 [ 926.664002][ T5635] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 926.701565][T13708] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 926.714646][ T185] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 926.815580][ T5635] ftdi_sio 3-1:0.0: device disconnected [ 926.838709][ T6853] vhci_hcd vhci_hcd.0: stop threads [ 926.868182][ T185] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 926.887585][ T6853] vhci_hcd vhci_hcd.0: release socket [ 926.914469][ T6853] vhci_hcd vhci_hcd.0: disconnect device [ 926.924511][ T185] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 926.984663][ T185] usb 1-1: USB disconnect, device number 46 [ 927.048353][ T185] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 927.096064][ T185] ftdi_sio 1-1:0.0: device disconnected [ 927.273275][T13720] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1944'. [ 930.033614][ T5635] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 930.033668][ T5355] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 930.671211][ T5355] usb 4-1: Using ep0 maxpacket: 8 [ 930.680789][ T5355] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 930.688915][ T5355] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.704481][ T5355] usb 4-1: config 0 has no interface number 0 [ 930.712911][ T5355] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 930.722147][ T5355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.732246][ T5355] usb 4-1: Product: syz [ 930.741273][ T5355] usb 4-1: Manufacturer: syz [ 930.757195][ T5355] usb 4-1: SerialNumber: syz [ 930.771427][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.777772][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.807888][ T5355] usb 4-1: config 0 descriptor?? [ 930.827283][ T5635] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 930.852888][ T5355] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 930.868350][ T5635] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 930.881040][ T5355] uvcvideo 4-1:0.31: No valid video chain found. [ 930.901645][ T5635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.930440][T13743] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1953'. [ 930.988318][ T5635] usb 1-1: Product: syz [ 931.033481][ T5635] usb 1-1: Manufacturer: syz [ 931.110752][ T5635] usb 1-1: SerialNumber: syz [ 931.239664][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 931.428126][ T5355] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 932.385714][ T5635] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 932.445392][ T5355] usb 6-1: config 0 has no interfaces? [ 932.553521][ T5796] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 932.585338][ T5355] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 933.005735][ T5355] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.040667][ T5355] usb 6-1: config 0 descriptor?? [ 933.123258][ T5635] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 933.170306][ T5796] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 933.207220][ T5796] usb 2-1: config 0 has no interface number 0 [ 933.220791][ T5635] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 933.229131][ T5635] usb 1-1: media controller created [ 933.267475][ T5796] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 933.296111][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.409267][ T5355] usb 4-1: USB disconnect, device number 64 [ 933.427871][ T5635] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 933.438532][ T5796] usb 2-1: Product: syz [ 933.449376][ T5796] usb 2-1: Manufacturer: syz [ 933.455594][ T5796] usb 2-1: SerialNumber: syz [ 933.522045][ T5796] usb 2-1: config 0 descriptor?? [ 933.565504][ T5796] usb 2-1: selecting invalid altsetting 1 [ 933.595431][ T5796] dvb_ttusb_budget: ttusb_init_controller: error [ 933.631048][ T5796] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 933.983675][T13754] ------------[ cut here ]------------ [ 933.989902][T13754] usb 1-1: BOGUS control dir, pipe 80002f80 doesn't match bRequestType c0 [ 933.998559][T13754] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.1.1952/13754 [ 934.010090][T13754] Modules linked in: [ 934.014678][T13754] CPU: 0 UID: 0 PID: 13754 Comm: syz.1.1952 Tainted: G L syzkaller #0 PREEMPT(full) [ 934.029343][T13754] Tainted: [L]=SOFTLOCKUP [ 934.033856][T13754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 934.044228][T13754] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 934.050395][T13754] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 934.070356][T13754] RSP: 0018:ffffc90004da7718 EFLAGS: 00010246 [ 934.076585][T13754] RAX: 0000000000000000 RBX: ffff8880262eb800 RCX: 0000000080002f80 [ 934.084782][T13754] RDX: ffff888074d5ff00 RSI: ffffffff8c81f2c0 RDI: ffffffff9040b850 [ 934.092963][T13754] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 934.101277][T13754] R10: dffffc0000000000 R11: fffff520009b4f0c R12: 1ffff1100e9abf90 [ 934.109486][T13754] R13: ffff888074d5fc80 R14: ffff888074d5ff00 R15: 0000000080002f80 [ 934.117619][T13754] FS: 00007f6ff0dcc6c0(0000) GS:ffff888125220000(0000) knlGS:0000000000000000 [ 934.131263][T13754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 934.138396][T13754] CR2: 0000001b34415ff8 CR3: 0000000053862000 CR4: 0000000000350ef0 [ 934.146541][T13754] Call Trace: [ 934.149990][T13754] [ 934.153073][T13754] usb_start_wait_urb+0x13f/0x5b0 [ 934.158293][T13754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.164097][T13754] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 934.169898][T13754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.175664][T13754] usb_control_msg+0x234/0x3e0 [ 934.180569][T13754] gl861_ctrl_msg+0x207/0x420 [ 934.185408][T13754] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 934.190909][T13754] ? __pfx_gl861_i2c_master_xfer+0x10/0x10 [ 934.196910][T13754] gl861_i2c_master_xfer+0x439/0x6a0 [ 934.202348][T13754] ? preempt_schedule_thunk+0x16/0x40 [ 934.207880][T13754] __i2c_transfer+0x7be/0x1fe0 [ 934.212818][T13754] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 934.218755][T13754] ? rt_mutex_lock_nested+0x156/0x1c0 [ 934.224317][T13754] ? i2c_transfer+0xc8/0x2d0 [ 934.232742][T13754] i2c_transfer+0x1cc/0x2d0 [ 934.237389][T13754] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 934.243175][T13754] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 934.249464][T13754] ? i2cdev_read+0xe8/0x250 [ 934.255312][T13754] i2cdev_read+0x10d/0x250 [ 934.259888][T13754] ? __pfx_i2cdev_read+0x10/0x10 [ 934.264942][T13754] vfs_read+0x213/0xa80 [ 934.269248][T13754] ? __pfx_vfs_read+0x10/0x10 [ 934.274073][T13754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.279947][T13754] ? __fget_files+0x2a/0x420 [ 934.284678][T13754] ? __fget_files+0x2a/0x420 [ 934.289406][T13754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.295236][T13754] ? __fget_files+0x3a2/0x420 [ 934.300068][T13754] ? __fget_files+0x2a/0x420 [ 934.304838][T13754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.310614][T13754] __x64_sys_pread64+0x196/0x220 [ 934.315685][T13754] ? __pfx___x64_sys_pread64+0x10/0x10 [ 934.321326][T13754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.328338][T13754] do_syscall_64+0x174/0x580 [ 934.333723][T13754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.339801][T13754] RIP: 0033:0x7f6feff9de59 [ 934.344367][T13754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.364267][T13754] RSP: 002b:00007f6ff0dcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 934.372871][T13754] RAX: ffffffffffffffda RBX: 00007f6ff0226090 RCX: 00007f6feff9de59 [ 934.381052][T13754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 934.389166][T13754] RBP: 00007f6ff0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 934.397319][T13754] R10: 0000000000000072 R11: 0000000000000246 R12: 0000000000000000 [ 934.405500][T13754] R13: 00007f6ff0226128 R14: 00007f6ff0226090 R15: 00007ffdd476fa68 [ 934.413726][T13754] [ 934.416850][T13754] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 934.424137][T13754] CPU: 0 UID: 0 PID: 13754 Comm: syz.1.1952 Tainted: G L syzkaller #0 PREEMPT(full) [ 934.435078][T13754] Tainted: [L]=SOFTLOCKUP [ 934.439398][T13754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 934.449448][T13754] Call Trace: [ 934.452744][T13754] [ 934.455664][T13754] vpanic+0x56c/0xa60 [ 934.459647][T13754] ? __pfx__printk+0x10/0x10 [ 934.464243][T13754] ? __pfx_vpanic+0x10/0x10 [ 934.468741][T13754] ? is_bpf_text_address+0x292/0x2b0 [ 934.474022][T13754] ? is_bpf_text_address+0x26/0x2b0 [ 934.479223][T13754] panic+0xc5/0xd0 [ 934.482943][T13754] ? __pfx_panic+0x10/0x10 [ 934.487375][T13754] __warn+0x315/0x4c0 [ 934.491351][T13754] ? usb_submit_urb+0x1057/0x18b0 [ 934.496371][T13754] ? usb_submit_urb+0x1057/0x18b0 [ 934.501391][T13754] __report_bug+0x331/0x530 [ 934.505897][T13754] ? usb_submit_urb+0x1057/0x18b0 [ 934.510917][T13754] ? __pfx___report_bug+0x10/0x10 [ 934.515990][T13754] report_bug_entry+0x19a/0x290 [ 934.520839][T13754] ? usb_submit_urb+0x1100/0x18b0 [ 934.525854][T13754] ? usb_submit_urb+0x1105/0x18b0 [ 934.530877][T13754] handle_bug+0xce/0x200 [ 934.535130][T13754] exc_invalid_op+0x1a/0x50 [ 934.539647][T13754] asm_exc_invalid_op+0x1a/0x20 [ 934.544497][T13754] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 934.550125][T13754] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 934.569724][T13754] RSP: 0018:ffffc90004da7718 EFLAGS: 00010246 [ 934.575785][T13754] RAX: 0000000000000000 RBX: ffff8880262eb800 RCX: 0000000080002f80 [ 934.583753][T13754] RDX: ffff888074d5ff00 RSI: ffffffff8c81f2c0 RDI: ffffffff9040b850 [ 934.591721][T13754] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 934.599684][T13754] R10: dffffc0000000000 R11: fffff520009b4f0c R12: 1ffff1100e9abf90 [ 934.607645][T13754] R13: ffff888074d5fc80 R14: ffff888074d5ff00 R15: 0000000080002f80 [ 934.615628][T13754] ? usb_submit_urb+0x1091/0x18b0 [ 934.620682][T13754] usb_start_wait_urb+0x13f/0x5b0 [ 934.625734][T13754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.631368][T13754] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 934.636927][T13754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.642562][T13754] usb_control_msg+0x234/0x3e0 [ 934.647335][T13754] gl861_ctrl_msg+0x207/0x420 [ 934.652030][T13754] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 934.657232][T13754] ? __pfx_gl861_i2c_master_xfer+0x10/0x10 [ 934.663049][T13754] gl861_i2c_master_xfer+0x439/0x6a0 [ 934.668338][T13754] ? preempt_schedule_thunk+0x16/0x40 [ 934.673718][T13754] __i2c_transfer+0x7be/0x1fe0 [ 934.678483][T13754] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 934.684282][T13754] ? rt_mutex_lock_nested+0x156/0x1c0 [ 934.689656][T13754] ? i2c_transfer+0xc8/0x2d0 [ 934.694248][T13754] i2c_transfer+0x1cc/0x2d0 [ 934.698747][T13754] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 934.704375][T13754] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 934.710534][T13754] ? i2cdev_read+0xe8/0x250 [ 934.715039][T13754] i2cdev_read+0x10d/0x250 [ 934.719449][T13754] ? __pfx_i2cdev_read+0x10/0x10 [ 934.724397][T13754] vfs_read+0x213/0xa80 [ 934.728561][T13754] ? __pfx_vfs_read+0x10/0x10 [ 934.733240][T13754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.738876][T13754] ? __fget_files+0x2a/0x420 [ 934.743463][T13754] ? __fget_files+0x2a/0x420 [ 934.748045][T13754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.753675][T13754] ? __fget_files+0x3a2/0x420 [ 934.758352][T13754] ? __fget_files+0x2a/0x420 [ 934.762964][T13754] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.768596][T13754] __x64_sys_pread64+0x196/0x220 [ 934.773537][T13754] ? __pfx___x64_sys_pread64+0x10/0x10 [ 934.779004][T13754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.785070][T13754] do_syscall_64+0x174/0x580 [ 934.789670][T13754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.795558][T13754] RIP: 0033:0x7f6feff9de59 [ 934.799965][T13754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.819563][T13754] RSP: 002b:00007f6ff0dcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 934.827976][T13754] RAX: ffffffffffffffda RBX: 00007f6ff0226090 RCX: 00007f6feff9de59 [ 934.835939][T13754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 934.843901][T13754] RBP: 00007f6ff0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 934.851865][T13754] R10: 0000000000000072 R11: 0000000000000246 R12: 0000000000000000 [ 934.859827][T13754] R13: 00007f6ff0226128 R14: 00007f6ff0226090 R15: 00007ffdd476fa68 [ 934.867808][T13754] [ 934.871025][T13754] Kernel Offset: disabled [ 934.875332][T13754] Rebooting in 86400 seconds..