last executing test programs: 17.168746465s ago: executing program 4 (id=743): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100)={0x20, 0x15, 0x3, "010037"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000700)={0x60, 0x13, 0x2, "1289"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.836954703s ago: executing program 1 (id=748): fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') pipe2$9p(0x0, 0x4000) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="7515000000000000000000000000000000000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000003000000000000000900"/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x0, 0x40}, 0xfd1d) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8002, 0x20000000016}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000b00), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffeaa, &(0x7f0000000200)=0x400008bc6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "518a3fb9607a79e53b7dd8990e64b6457c8b442e625a6a5959e419e00b95618fb365211f62887874c4841bf3eddccefa1d64ccee93e32ee7bc10e5049a0781871cac26b4d03ba2bb1a15"}}, &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x9, 0x9, 0x1, "11de9933", "91c61031"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe5, 0x0, 0x0, 0x0, 0x2, 0x6}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000680)={0x20, 0xe, 0xb7, "24404366ab1683eec36af6a8faf95bd775bf9228aa72985882a18a8445bd23c6c61a99ce88162776042a48151158d5a611c4071c70b529c641f59f0a5423e729856fa42532a8dd95b96c78ba26a024a9bf9d16aa47b3fac05c5cf79c7bdde18ddfa2247ff4a91a862a1474fb81d81f74dd0f5e50771e6fe8a82f6f407c2392a2990d71001ca7b6094ac8de816d33bb01b7b23072f5880eb61a7b1ae65449e4858e38a926d57d16822b576b04723788f35db15124a1cf72"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xba}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x92}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "04c1"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000940)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f0000000980)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "22f0"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x38}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x7}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0xa0d0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000340)={0x7, 0xc, 0x4, {0x1, @raw_data="de16356387eddc256a189d2d011b044473ca2c257f60a14806fdf60983ab081383ecf98d18e5c6942ea0a0ef969c617274692f60841a2215c4048e4f4a5560718e3013e6a750e0b91f3e948643c28e8056ed069a4d638462a5dfcf5d6b35e1b94263fe728c8371054273c71042a244ff4c12f2ea4c819a7737ac63eba07b07a1b493d31194a08f1c063c696236d4a1543c5dffedb68583e1e30828f0aec11877a302b3a515e8d90da1202b0da7ddea2e3b54c4c7e7312dbf219ec4216212330e4cc38542a39fcea6"}, 0x9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 12.382832214s ago: executing program 1 (id=755): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) getresgid(&(0x7f0000004fc0), &(0x7f0000005000), 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x40000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d00000085"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITHAW(r4, 0xc0045878) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000380)={r8, r9+60000000}) socket$inet6_tcp(0xa, 0x1, 0x0) 11.84141193s ago: executing program 4 (id=757): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4044) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f000024a000/0x1000)=nil) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0x980912}) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x80003, 0x2) mmap(&(0x7f00002e3000/0x2000)=nil, 0x2000, 0x0, 0x11012, 0xffffffffffffffff, 0x10c000) 9.173099084s ago: executing program 1 (id=758): fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') pipe2$9p(0x0, 0x4000) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e00000007000000070000000001000001400200", @ANYBLOB="7515000000000000000000000000000000000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000003000000000000000900"/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x0, 0x40}, 0xfd1d) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8002, 0x20000000016}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000b00), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffeaa, &(0x7f0000000200)=0x400008bc6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "518a3fb9607a79e53b7dd8990e64b6457c8b442e625a6a5959e419e00b95618fb365211f62887874c4841bf3eddccefa1d64ccee93e32ee7bc10e5049a0781871cac26b4d03ba2bb1a15"}}, &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x9, 0x9, 0x1, "11de9933", "91c61031"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe5, 0x0, 0x0, 0x0, 0x2, 0x6}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000680)={0x20, 0xe, 0xb7, "24404366ab1683eec36af6a8faf95bd775bf9228aa72985882a18a8445bd23c6c61a99ce88162776042a48151158d5a611c4071c70b529c641f59f0a5423e729856fa42532a8dd95b96c78ba26a024a9bf9d16aa47b3fac05c5cf79c7bdde18ddfa2247ff4a91a862a1474fb81d81f74dd0f5e50771e6fe8a82f6f407c2392a2990d71001ca7b6094ac8de816d33bb01b7b23072f5880eb61a7b1ae65449e4858e38a926d57d16822b576b04723788f35db15124a1cf72"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xba}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x92}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "04c1"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000940)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f0000000980)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "22f0"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x38}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x7}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0xa0d0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000340)={0x7, 0xc, 0x4, {0x1, @raw_data="de16356387eddc256a189d2d011b044473ca2c257f60a14806fdf60983ab081383ecf98d18e5c6942ea0a0ef969c617274692f60841a2215c4048e4f4a5560718e3013e6a750e0b91f3e948643c28e8056ed069a4d638462a5dfcf5d6b35e1b94263fe728c8371054273c71042a244ff4c12f2ea4c819a7737ac63eba07b07a1b493d31194a08f1c063c696236d4a1543c5dffedb68583e1e30828f0aec11877a302b3a515e8d90da1202b0da7ddea2e3b54c4c7e7312dbf219ec4216212330e4cc38542a39fcea6"}, 0x9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 6.691145425s ago: executing program 3 (id=764): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}}, &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 6.487331514s ago: executing program 4 (id=765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x81, '\x00', 0x0, r2, 0x1, 0x3, 0x3}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000540), 0x3021090, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@posixacl}, {@cache_readahead}, {@access_client}, {@debug={'debug', 0x3d, 0xb9}}], [{@obj_user={'obj_user', 0x3d, 'cache=mmap'}}, {@seclabel}, {@seclabel}, {@dont_appraise}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.386671414s ago: executing program 2 (id=766): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000180)={0x0, 0xe, 0x4, "606b7eef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.259361986s ago: executing program 3 (id=767): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 5.938110053s ago: executing program 4 (id=768): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100)={0x20, 0x15, 0x3, "010037"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000700)={0x60, 0x13, 0x2, "1289"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.777039917s ago: executing program 1 (id=769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001240)=ANY=[], 0xfce) 5.66278374s ago: executing program 0 (id=770): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) getresgid(&(0x7f0000004fc0), &(0x7f0000005000), 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x40000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITHAW(r4, 0xc0045878) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000380)) 5.095308131s ago: executing program 3 (id=771): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x9, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000061d8d837000000002c2c00001811dbf3", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000023000000184900000400000000000000000000001800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183400000100000000000000000000008520000004"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB, @ANYRES32=r2], 0x90}}, 0x0) 4.518978209s ago: executing program 1 (id=772): socket$inet_mptcp(0x2, 0x1, 0x106) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0x9, 0x150}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01030000030000000008000b00", @ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRESOCT, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 4.517668695s ago: executing program 2 (id=773): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a4000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.243019298s ago: executing program 0 (id=774): fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendfile(r1, r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x0, 0x40}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8002, 0x20000000016}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000b00), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffeaa, &(0x7f0000000200)=0x400008bc6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "518a3fb9607a79e53b7dd8990e64b6457c8b442e625a6a5959e419e00b95618fb365211f62887874c4841bf3eddccefa1d64ccee93e32ee7bc10e5049a0781871cac26b4d03ba2bb1a15"}}, &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x9, 0x9, 0x1, "11de9933", "91c61031"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe5, 0x0, 0x0, 0x0, 0x2, 0x6}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000680)={0x20, 0xe, 0xb7, "24404366ab1683eec36af6a8faf95bd775bf9228aa72985882a18a8445bd23c6c61a99ce88162776042a48151158d5a611c4071c70b529c641f59f0a5423e729856fa42532a8dd95b96c78ba26a024a9bf9d16aa47b3fac05c5cf79c7bdde18ddfa2247ff4a91a862a1474fb81d81f74dd0f5e50771e6fe8a82f6f407c2392a2990d71001ca7b6094ac8de816d33bb01b7b23072f5880eb61a7b1ae65449e4858e38a926d57d16822b576b04723788f35db15124a1cf72"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xba}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x92}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "04c1"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000940)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f0000000980)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "22f0"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x38}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x7}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0xa0d0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000340)={0x7, 0xc, 0x4, {0x1, @raw_data="de16356387eddc256a189d2d011b044473ca2c257f60a14806fdf60983ab081383ecf98d18e5c6942ea0a0ef969c617274692f60841a2215c4048e4f4a5560718e3013e6a750e0b91f3e948643c28e8056ed069a4d638462a5dfcf5d6b35e1b94263fe728c8371054273c71042a244ff4c12f2ea4c819a7737ac63eba07b07a1b493d31194a08f1c063c696236d4a1543c5dffedb68583e1e30828f0aec11877a302b3a515e8d90da1202b0da7ddea2e3b54c4c7e7312dbf219ec4216212330e4cc38542a39fcea6"}, 0x9}) 3.736536896s ago: executing program 3 (id=775): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x3c, 0x1, 0x3, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4002}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a4000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.733746173s ago: executing program 2 (id=776): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4044) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f000024a000/0x1000)=nil) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000005f40), 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0x980912}) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x80003, 0x2) mmap(&(0x7f00002e3000/0x2000)=nil, 0x2000, 0x0, 0x11012, 0xffffffffffffffff, 0x10c000) 2.836026587s ago: executing program 2 (id=777): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x2, "abe7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000300)={0x40, 0xb, 0x4, "ecae0aac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="00000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b40)={0x0, 0x38, 0x4, "50db0822"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000580)={0x40, 0x31, 0x6, "67deed2620ca"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.525925755s ago: executing program 3 (id=778): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 2.189913645s ago: executing program 0 (id=779): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000240)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{0x0, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/drivers\x00', 0x41, 0x0) sendmsg$netlink(r0, &(0x7f0000000d40)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)=[{&(0x7f0000000800)={0x1d8, 0x33, 0x300, 0x70bd28, 0x25dfdbfb, "", [@generic, @typed={0xc, 0x57, 0x0, 0x0, @u64=0x100}, @generic="31e60abfb81f2b1cd3239e3765b59afa55bc70c410761d1da84c2f7a1c9cc0db329b7d7a7942be96fe780a325644", @typed={0x4, 0x4f}, @generic="b8a8a121b8f9bfa01b58b7735c43b81c3510c289ed452157b88426a81651a325b49500cda622d354ec797f23974158abc02b91d1e17c751e20602dbe99f6229ff1f33afd670db899e4980473eb17f9569b8e3c7d6fc8002604be5eece2979326b75067ecdfcd8abfbaba9b671bbbcdf425d1958820284d3f0c154988a6f94f640b72cc41193d2b7931ebe478f4d8fb53c80d923c2e553cf757a436844dd8b63dae7b998715f714cc37612ab6109644bdb75900d1eb31753213995a892893fff150d53c9ec0590cd0d5b704a4c4a4b7d376d6a26183fe98f72a40a1af38103e3526e4eed29dbc281ea2998653b22ebd", @generic="b802b46642083068a38a2e7e162c80325e2f2f2a55f0a0c9a4d2b496bf0baedc722eed49d5b3d00dfdf630d7ca4437cbffc7ea3f1b2d3c62fb785a77628bc4b1d56aeca2490ecba33d6081058dbd6cd21bb7345a29288464a1c236c21345dbcac917f6cfa7ca9a306435d2917cdf9c9c2256449862851f9baae1edb5", @nested={0x1c, 0xae, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0xf6}]}]}, 0x1d8}], 0x1, &(0x7f0000000d00), 0x0, 0x10}, 0x20080010) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="9b468da99267a99aed5f6b48ad03b7c825ecb32adffc80ff47af98a3741169ea2fcaa8de0120079173a79cbc6b3e4ef87d968b9bfd711da55a06467ae7196c92aeb550695c643a2eb3d0ce6ec6c56ba80e0fd32e8d2c4151045ca0c0e4ae46503bcef27a4a62957c4b4f633201531d45c0cca9b2f56ca07363743dbc323021a0c2a659b941e96290725f3c874b2081955f0cdf6d99782e5c0d18318b474c51", 0x9f}], 0x1, &(0x7f00000013c0)=[{0x28, 0x13, 0x7, "877e97e30e80b348e3ecaa1ddfb1a3a2b6"}], 0x28}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) accept4(r1, &(0x7f00000002c0)=@isdn, &(0x7f0000000580)=0x80, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.971825681s ago: executing program 0 (id=780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.944218775s ago: executing program 1 (id=781): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a030000000000000000000200000009"], 0x34}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.808771009s ago: executing program 0 (id=782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001240)=ANY=[], 0xfce) 1.391857075s ago: executing program 0 (id=783): truncate(&(0x7f0000000000)='./file2\x00', 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0f011001daa18c4089612d187301010203010902240001000000000904ef0002caea760009050102df0303000009058202ff"], 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a3c000000120a090000000000000000000200000009000200a30000000000000008000440000000000900010073797a300000000008000340000000031400000011000100000000000000400000"], 0x64}}, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000000)=0x10) 1.258235658s ago: executing program 4 (id=784): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) getresgid(&(0x7f0000004fc0), &(0x7f0000005000), 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x40000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITHAW(r4, 0xc0045878) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000380)={r8, r9+60000000}) 695.308725ms ago: executing program 2 (id=785): socket(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x20040c91) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c00150000"], 0x38}, 0x1, 0x300}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x3, 0x8000000000, 0x200000000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7fffffff, 0xdb3}, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) 656.984244ms ago: executing program 3 (id=786): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x9, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000061d8d837000000002c2c00001811dbf3", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000023000000184900000400000000000000000000001800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183400000100000000000000000000008520000004"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB, @ANYRES32=r3], 0x90}}, 0x0) 31.776083ms ago: executing program 2 (id=787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x81, '\x00', 0x0, r2, 0x1, 0x3, 0x3}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 4 (id=788): mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x529ae000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) kernel console output (not intermixed with test programs): . [ 142.280426][ T44] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 142.280527][ T44] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 142.280601][ T44] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 142.295728][ T44] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 142.310327][ T991] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 142.310966][ T991] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 142.619426][ T44] usb 3-1: USB disconnect, device number 4 [ 143.774729][ T991] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 143.774787][ T991] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 143.775581][ T991] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 143.835723][ T991] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 144.187066][ T991] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.334065][ T991] usb 2-1: Using ep0 maxpacket: 32 [ 144.337818][ T991] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.337872][ T991] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.340919][ T991] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 144.340947][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.340968][ T991] usb 2-1: Product: syz [ 144.340982][ T991] usb 2-1: Manufacturer: syz [ 144.340997][ T991] usb 2-1: SerialNumber: syz [ 144.376070][ T991] usb 2-1: config 0 descriptor?? [ 144.398421][ T6172] overlayfs: overlapping lowerdir path [ 144.423505][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.511327][ T6174] binder: 6173:6174 unknown command 0 [ 144.511357][ T6174] binder: 6173:6174 ioctl c0306201 200000000080 returned -22 [ 144.585243][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 144.585274][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.585297][ T31] usb 3-1: Product: syz [ 144.585313][ T31] usb 3-1: Manufacturer: syz [ 144.585328][ T31] usb 3-1: SerialNumber: syz [ 144.628508][ T991] usb 2-1: USB disconnect, device number 6 [ 144.835649][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 144.835707][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 144.835728][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 144.854515][ T6168] netlink: 'syz.2.69': attribute type 1 has an invalid length. [ 144.854537][ T6168] netlink: 244 bytes leftover after parsing attributes in process `syz.2.69'. [ 144.913994][ T5962] usb 5-1: USB disconnect, device number 3 [ 144.926120][ T31] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 144.966734][ T31] usb 3-1: USB disconnect, device number 5 [ 145.043295][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 145.215094][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 145.215125][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.215145][ T10] usb 1-1: Product: syz [ 145.215167][ T10] usb 1-1: Manufacturer: syz [ 145.215181][ T10] usb 1-1: SerialNumber: syz [ 145.478815][ T6183] netlink: 24 bytes leftover after parsing attributes in process `syz.3.76'. [ 145.672284][ T6185] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 146.585905][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 146.585968][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 147.770527][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 147.770586][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 147.771443][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 147.938784][ T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 147.990485][ T10] usb 1-1: USB disconnect, device number 6 [ 148.073245][ T5962] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 148.254013][ T5962] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 148.254045][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.254067][ T5962] usb 5-1: Product: syz [ 148.254083][ T5962] usb 5-1: Manufacturer: syz [ 148.254098][ T5962] usb 5-1: SerialNumber: syz [ 148.399738][ T5120] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 148.468599][ T5962] usb 5-1: config 0 descriptor?? [ 148.599887][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 148.742915][ T5962] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 148.815601][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 148.815634][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.816343][ T10] usb 1-1: Product: syz [ 148.816361][ T10] usb 1-1: Manufacturer: syz [ 148.816376][ T10] usb 1-1: SerialNumber: syz [ 149.952563][ T5962] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 150.025385][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 150.025460][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 151.466650][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 151.466678][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 151.467473][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 151.512792][ T5962] usb 5-1: USB disconnect, device number 4 [ 151.598775][ T6225] netlink: 'syz.3.87': attribute type 4 has an invalid length. [ 151.699852][ T6219] netlink: 'syz.3.87': attribute type 4 has an invalid length. [ 151.706610][ T6226] netlink: 'syz.4.88': attribute type 4 has an invalid length. [ 151.714650][ T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -110 [ 151.800408][ T6228] netlink: 'syz.4.88': attribute type 4 has an invalid length. [ 152.071181][ T6234] kvm: user requested TSC rate below hardware speed [ 152.423956][ T44] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.505655][ T5989] usb 1-1: USB disconnect, device number 7 [ 153.608659][ T44] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 153.608691][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.608712][ T44] usb 3-1: Product: syz [ 153.608727][ T44] usb 3-1: Manufacturer: syz [ 153.608742][ T44] usb 3-1: SerialNumber: syz [ 154.023344][ T5989] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 154.100251][ T44] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 154.100313][ T44] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 154.194011][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 155.034677][ T5120] Bluetooth: hci4: command tx timeout [ 155.307600][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 155.307644][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.307665][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 155.309183][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 155.309209][ T10] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 155.309248][ T10] usb 1-1: Manufacturer: syz [ 155.346186][ T10] usb 1-1: config 0 descriptor?? [ 155.486435][ T5989] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 155.486458][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.486472][ T5989] usb 4-1: Product: syz [ 155.486483][ T5989] usb 4-1: Manufacturer: syz [ 155.486692][ T5989] usb 4-1: SerialNumber: syz [ 155.574835][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 155.659051][ T5989] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 155.720017][ T44] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 155.720070][ T44] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 155.772484][ T44] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 155.788217][ T31] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 156.949247][ T44] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 157.093461][ T9] usb 1-1: USB disconnect, device number 8 [ 157.962983][ T31] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 157.963671][ T31] ath9k_htc: Failed to initialize the device [ 158.000496][ T5989] usb 4-1: USB disconnect, device number 3 [ 158.440823][ T6277] binder: 6276:6277 unknown command 0 [ 158.440845][ T6277] binder: 6276:6277 ioctl c0306201 200000000080 returned -22 [ 158.745621][ T6285] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 158.862757][ T5989] usb 4-1: ath9k_htc: USB layer deinitialized [ 158.864637][ T44] usb 3-1: USB disconnect, device number 6 [ 161.768588][ T5989] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 161.905830][ T5881] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.400473][ T5881] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 162.400503][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.400523][ T5881] usb 5-1: Product: syz [ 162.400538][ T5881] usb 5-1: Manufacturer: syz [ 162.400553][ T5881] usb 5-1: SerialNumber: syz [ 163.436653][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.437498][ T44] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 163.578216][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.631515][ T5989] usb 4-1: device descriptor read/all, error -71 [ 163.761450][ T5881] usb 5-1: can't set config #1, error -71 [ 163.807429][ T5881] usb 5-1: USB disconnect, device number 5 [ 164.376198][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.580814][ T6328] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 164.588644][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.087975][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.796668][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.176372][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.466458][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.901404][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.983029][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.002070][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.012612][ T6389] overlayfs: overlapping lowerdir path [ 168.053286][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 168.163294][ T5889] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 168.213225][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 168.215749][ T9] usb 1-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 168.215778][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.249582][ T9] usb 1-1: config 0 descriptor?? [ 168.329057][ T5889] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 168.329089][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.329111][ T5889] usb 2-1: Product: syz [ 168.329126][ T5889] usb 2-1: Manufacturer: syz [ 168.329141][ T5889] usb 2-1: SerialNumber: syz [ 168.785121][ T5889] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 168.785185][ T5889] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 168.905505][ T6375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.944058][ T6375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.278398][ T9] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 169.533322][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.692314][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 169.692337][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.692351][ T31] usb 3-1: Product: syz [ 169.692360][ T31] usb 3-1: Manufacturer: syz [ 169.692411][ T31] usb 3-1: SerialNumber: syz [ 169.796572][ T5889] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 169.796643][ T5889] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 169.799563][ T5889] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 169.837719][ T5889] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 170.143971][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 170.144016][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 170.241509][ T37] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.244006][ T37] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.244050][ T37] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.244093][ T37] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.097026][ T5962] usb 2-1: USB disconnect, device number 7 [ 172.137425][ T10] usb 1-1: USB disconnect, device number 10 [ 172.915794][ T6415] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 175.070809][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 175.070867][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 175.071824][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 175.318653][ T31] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 175.396662][ T31] usb 3-1: USB disconnect, device number 7 [ 175.713290][ T5889] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 175.813376][ T5962] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 175.863357][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 175.865921][ T5889] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 175.865981][ T5889] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.866004][ T5889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.866028][ T5889] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 175.866070][ T5889] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.866093][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.952381][ T5889] usbtmc 2-1:16.0: bulk endpoints not found [ 176.029219][ T5962] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 176.029267][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.029288][ T5962] usb 4-1: Product: syz [ 176.029303][ T5962] usb 4-1: Manufacturer: syz [ 176.029317][ T5962] usb 4-1: SerialNumber: syz [ 176.385768][ T6429] netlink: 'syz.3.134': attribute type 1 has an invalid length. [ 176.385785][ T6429] netlink: 'syz.3.134': attribute type 3 has an invalid length. [ 176.385794][ T6429] netlink: 224 bytes leftover after parsing attributes in process `syz.3.134'. [ 176.433488][ T5962] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 176.433565][ T5962] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 176.433586][ T5962] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 176.496734][ T5962] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 176.615309][ T5962] usb 4-1: USB disconnect, device number 6 [ 179.198653][ T5889] usb 2-1: USB disconnect, device number 8 [ 179.582683][ T5120] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 180.756396][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 180.903246][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 180.910987][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.911043][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 180.911068][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 180.911093][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 180.911114][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.930961][ T31] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 180.930989][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.931009][ T31] usb 4-1: Product: syz [ 180.931023][ T31] usb 4-1: Manufacturer: syz [ 180.931037][ T31] usb 4-1: SerialNumber: syz [ 181.025422][ T31] usb 4-1: config 0 descriptor?? [ 181.153368][ T44] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 181.208962][ T6471] syz.4.146 uses obsolete (PF_INET,SOCK_PACKET) [ 181.271713][ T9] usb 4-1: USB disconnect, device number 7 [ 181.289637][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'. [ 181.289955][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.146'. [ 181.289973][ T6471] netlink: 26 bytes leftover after parsing attributes in process `syz.4.146'. [ 181.325158][ T44] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 181.325190][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.325210][ T44] usb 2-1: Product: syz [ 181.325225][ T44] usb 2-1: Manufacturer: syz [ 181.325239][ T44] usb 2-1: SerialNumber: syz [ 181.784996][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 181.785039][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 182.800838][ T38] audit: type=1326 audit(1761866672.601:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6485 comm="syz.0.151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae07efc9 code=0x0 [ 183.639655][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 183.639711][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 183.641220][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 183.686407][ T44] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 183.833759][ T6500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.152'. [ 184.003406][ T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 184.433281][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 184.436676][ T44] usb 1-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 184.436696][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.485189][ T44] usb 1-1: config 0 descriptor?? [ 185.683139][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.851280][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.992691][ T6030] usb 2-1: USB disconnect, device number 9 [ 186.288305][ T44] pegasus 1-1:0.0: probe with driver pegasus failed with error -121 [ 186.403268][ T6030] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 186.567343][ T6030] usb 2-1: Using ep0 maxpacket: 32 [ 186.699957][ T6030] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.700126][ T6030] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 186.700185][ T6030] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 186.700255][ T6030] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 186.700277][ T6030] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.904045][ T6030] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 186.904111][ T6030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.904134][ T6030] usb 2-1: Product: syz [ 186.904149][ T6030] usb 2-1: Manufacturer: syz [ 186.904203][ T6030] usb 2-1: SerialNumber: syz [ 187.556580][ T31] usb 1-1: USB disconnect, device number 11 [ 187.721624][ T6030] usb 2-1: config 0 descriptor?? [ 187.893300][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.033896][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.098809][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.201612][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.302795][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.327122][ T5120] Bluetooth: hci2: command tx timeout [ 188.390297][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.441326][ T6030] usb 2-1: USB disconnect, device number 10 [ 188.539404][ T6528] Bluetooth: MGMT ver 1.23 [ 188.539452][ T6528] Bluetooth: hci0: invalid length 1, exp 2 for type 19 [ 188.899839][ T5868] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 189.787585][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.863257][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 189.865778][ T5868] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.865802][ T5868] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.868869][ T5868] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.868894][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.868912][ T5868] usb 3-1: Product: syz [ 189.868926][ T5868] usb 3-1: Manufacturer: syz [ 189.868940][ T5868] usb 3-1: SerialNumber: syz [ 190.090460][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.135279][ T5868] usb 3-1: 0:2 : does not exist [ 190.149219][ T5868] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 190.265346][ T5868] usb 3-1: USB disconnect, device number 8 [ 190.844464][ T6553] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 191.481342][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.553220][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.317729][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.347843][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.650246][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.090103][ T5120] Bluetooth: hci4: command tx timeout [ 195.287539][ T5120] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 198.611794][ T6607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.185'. [ 200.643311][ T6617] Bluetooth: hci0: invalid length 1, exp 2 for type 19 [ 200.823749][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.823824][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.467116][ T5120] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 201.486107][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.412516][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.467248][ T31] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 202.813791][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.157906][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.041932][ T6646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.196'. [ 207.382175][ T31] usb 2-1: unable to read config index 0 descriptor/all [ 207.382233][ T31] usb 2-1: can't read configurations, error -71 [ 207.983267][ T44] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 208.140490][ T44] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 208.140523][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.140544][ T44] usb 3-1: Product: syz [ 208.140559][ T44] usb 3-1: Manufacturer: syz [ 208.140574][ T44] usb 3-1: SerialNumber: syz [ 208.453292][ T44] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 208.453366][ T44] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 208.453389][ T44] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 208.463637][ T6657] netlink: 'syz.2.199': attribute type 1 has an invalid length. [ 208.463660][ T6657] netlink: 244 bytes leftover after parsing attributes in process `syz.2.199'. [ 208.541964][ T44] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 208.566456][ T44] usb 3-1: USB disconnect, device number 9 [ 208.843396][ T5962] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 208.989067][ T6680] netlink: 60 bytes leftover after parsing attributes in process `syz.4.204'. [ 208.998597][ T5962] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.023449][ T5962] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 209.023480][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 209.023500][ T5962] usb 4-1: Product: syz [ 209.023514][ T5962] usb 4-1: Manufacturer: syz [ 209.023529][ T5962] usb 4-1: SerialNumber: syz [ 209.036977][ T5962] usb 4-1: config 0 descriptor?? [ 209.202673][ T5962] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 209.290068][ T5868] usb 4-1: USB disconnect, device number 8 [ 209.317507][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.693284][ T44] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 209.841683][ T44] usb 1-1: device descriptor read/64, error -71 [ 210.266794][ T44] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 210.493371][ T44] usb 1-1: device descriptor read/64, error -71 [ 210.603635][ T44] usb usb1-port1: attempt power cycle [ 210.808559][ T6708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.210'. [ 210.845565][ T5868] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 210.957662][ T44] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 210.975185][ T44] usb 1-1: device descriptor read/8, error -71 [ 210.996121][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.998081][ T5868] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 210.998098][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 210.998111][ T5868] usb 4-1: Product: syz [ 210.998120][ T5868] usb 4-1: Manufacturer: syz [ 210.998130][ T5868] usb 4-1: SerialNumber: syz [ 211.001733][ T5868] usb 4-1: config 0 descriptor?? [ 211.165361][ T5868] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 211.222202][ T44] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 211.266281][ T44] usb 1-1: device descriptor read/8, error -71 [ 211.295606][ T31] usb 4-1: USB disconnect, device number 9 [ 211.373656][ T44] usb usb1-port1: unable to enumerate USB device [ 211.422898][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.833415][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 211.985742][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.004418][ T31] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 212.004439][ T31] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 212.004453][ T31] usb 4-1: Product: syz [ 212.004464][ T31] usb 4-1: Manufacturer: syz [ 212.004474][ T31] usb 4-1: SerialNumber: syz [ 212.008270][ T31] usb 4-1: config 0 descriptor?? [ 212.131091][ T31] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 212.232637][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.262965][ T5962] usb 4-1: USB disconnect, device number 10 [ 213.159602][ T38] audit: type=1326 audit(1761866702.961:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6729 comm="syz.0.215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae07efc9 code=0x0 [ 215.192543][ T6743] netlink: 60 bytes leftover after parsing attributes in process `syz.0.218'. [ 215.202219][ T5187] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 215.475758][ T6753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.221'. [ 216.244968][ T5187] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.245024][ T5187] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.245053][ T5187] usb 3-1: config 0 interface 0 has no altsetting 0 [ 216.284203][ T5187] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 216.284234][ T5187] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 216.284256][ T5187] usb 3-1: Product: syz [ 216.284271][ T5187] usb 3-1: Manufacturer: syz [ 216.284285][ T5187] usb 3-1: SerialNumber: syz [ 216.427317][ T5187] usb 3-1: config 0 descriptor?? [ 216.553804][ T5187] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 216.680804][ T5962] usb 3-1: USB disconnect, device number 10 [ 216.882580][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.242946][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.267944][ T6746] Bluetooth: hci2: command 0x0406 tx timeout [ 217.268220][ T6746] Bluetooth: hci0: command 0x0406 tx timeout [ 217.287229][ T6746] Bluetooth: hci1: command 0x0406 tx timeout [ 217.288639][ T6746] Bluetooth: hci3: command 0x0406 tx timeout [ 217.844257][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.923328][ T5962] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 218.053257][ T5962] usb 4-1: device descriptor read/64, error -71 [ 218.290155][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.524714][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.673272][ T5962] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 218.764172][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.066212][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.088747][ T5962] usb 4-1: device descriptor read/64, error -71 [ 220.197036][ T5962] usb usb4-port1: attempt power cycle [ 220.238415][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.588977][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.683605][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 220.997143][ T6791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.234'. [ 220.999447][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.053492][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 222.058735][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.058801][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.083164][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 222.083196][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.083216][ T31] usb 1-1: Product: syz [ 222.083229][ T31] usb 1-1: Manufacturer: syz [ 222.083243][ T31] usb 1-1: SerialNumber: syz [ 222.096740][ T31] usb 1-1: config 0 descriptor?? [ 222.534323][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.537217][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.075791][ T6030] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 223.180595][ T6788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.207749][ T6788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.231949][ T6030] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 223.231978][ T6030] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.231997][ T6030] usb 3-1: Product: syz [ 223.232011][ T6030] usb 3-1: Manufacturer: syz [ 223.232025][ T6030] usb 3-1: SerialNumber: syz [ 223.277892][ T6030] usb 3-1: config 0 descriptor?? [ 223.443396][ T31] usb 1-1: USB disconnect, device number 16 [ 223.497218][ T6030] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 224.944759][ T6030] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 225.026970][ T6030] usb 3-1: USB disconnect, device number 11 [ 226.180212][ T6831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.246'. [ 228.820710][ T58] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.822374][ T58] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.822470][ T58] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.822511][ T58] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.872438][ T6861] netlink: 60 bytes leftover after parsing attributes in process `syz.3.256'. [ 228.943246][ T6030] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 232.790644][ T6030] usb 3-1: device descriptor read/all, error -71 [ 232.798665][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 232.954361][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 232.956712][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 232.956741][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 232.959907][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 232.959932][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.959951][ T31] usb 1-1: Product: syz [ 232.959971][ T31] usb 1-1: Manufacturer: syz [ 232.959986][ T31] usb 1-1: SerialNumber: syz [ 233.035302][ T31] usb 1-1: config 0 descriptor?? [ 233.041871][ T31] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 233.083300][ T44] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 233.324171][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 233.679412][ T44] usb 2-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 233.679441][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.709090][ T44] usb 2-1: config 0 descriptor?? [ 235.329778][ T31] usb 1-1: USB disconnect, device number 17 [ 235.972938][ T44] pegasus 2-1:0.0: probe with driver pegasus failed with error -121 [ 236.804103][ T38] audit: type=1326 audit(1761866726.381:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6901 comm="syz.0.267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae07efc9 code=0x0 [ 237.992514][ T31] usb 2-1: USB disconnect, device number 13 [ 238.664220][ T6920] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 239.493230][ T31] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 239.657431][ T31] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 239.657462][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.657482][ T31] usb 2-1: Product: syz [ 239.657496][ T31] usb 2-1: Manufacturer: syz [ 239.657510][ T31] usb 2-1: SerialNumber: syz [ 239.715528][ T31] usb 2-1: config 0 descriptor?? [ 239.803226][ T6030] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 240.136468][ T31] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 240.713959][ T6030] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 240.713992][ T6030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.714014][ T6030] usb 1-1: Product: syz [ 240.714030][ T6030] usb 1-1: Manufacturer: syz [ 240.714045][ T6030] usb 1-1: SerialNumber: syz [ 240.737100][ T6030] usb 1-1: config 0 descriptor?? [ 240.968556][ T6030] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 241.005713][ T5187] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 241.163360][ T5187] usb 3-1: Using ep0 maxpacket: 16 [ 241.166535][ T5187] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.166592][ T5187] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.170684][ T5187] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 241.170711][ T5187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.170730][ T5187] usb 3-1: Product: syz [ 241.170743][ T5187] usb 3-1: Manufacturer: syz [ 241.170757][ T5187] usb 3-1: SerialNumber: syz [ 241.188999][ T5187] usb 3-1: config 0 descriptor?? [ 242.058697][ T6030] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 242.113378][ T5187] usb 3-1: USB disconnect, device number 14 [ 242.424575][ T31] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 242.443311][ T5962] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 242.643280][ T5962] usb 4-1: Using ep0 maxpacket: 32 [ 242.942239][ T5962] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 242.942271][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 242.942295][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 242.942316][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 242.942339][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 243.082995][ T5962] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 243.083023][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.083042][ T5962] usb 4-1: Product: syz [ 243.083055][ T5962] usb 4-1: Manufacturer: syz [ 243.083069][ T5962] usb 4-1: SerialNumber: syz [ 243.095447][ T5962] usb 4-1: config 0 descriptor?? [ 243.169570][ T9] usb 1-1: USB disconnect, device number 18 [ 243.267960][ T5868] usb 2-1: USB disconnect, device number 14 [ 243.343320][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 243.348956][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.350418][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.350894][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.352557][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.356808][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.357346][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.357819][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.358281][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.358784][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.359459][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.359950][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.360418][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.360871][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.361384][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.361893][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.362346][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.362808][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.363301][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.369288][ T5962] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 243.369353][ T5962] input input5: Timeout waiting for response from device. [ 243.747454][ T5962] usb 4-1: USB disconnect, device number 14 [ 243.888677][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.4.288'. [ 243.888705][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.4.288'. [ 244.035284][ T31] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 244.035281][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 244.183245][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 244.185995][ T31] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 244.186020][ T31] usb 1-1: config 0 has no interface number 0 [ 244.186066][ T31] usb 1-1: config 0 interface 184 has no altsetting 0 [ 244.188301][ T9] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.188334][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 244.194587][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 244.194620][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.194645][ T31] usb 1-1: Product: syz [ 244.194661][ T31] usb 1-1: Manufacturer: syz [ 244.194678][ T31] usb 1-1: SerialNumber: syz [ 244.272831][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 244.272863][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 244.272884][ T9] usb 3-1: Product: syz [ 244.272899][ T9] usb 3-1: Manufacturer: syz [ 244.272914][ T9] usb 3-1: SerialNumber: syz [ 244.385615][ T9] usb 3-1: config 0 descriptor?? [ 244.443537][ T31] usb 1-1: config 0 descriptor?? [ 244.504109][ T31] smsc75xx v1.0.0 [ 244.554053][ T9] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 244.593364][ T44] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 244.703692][ T5187] usb 3-1: USB disconnect, device number 15 [ 244.773449][ T44] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 244.773483][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.773505][ T44] usb 4-1: Product: syz [ 244.773520][ T44] usb 4-1: Manufacturer: syz [ 244.773535][ T44] usb 4-1: SerialNumber: syz [ 244.839053][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.209354][ T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 245.209405][ T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 245.209478][ T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 245.235889][ T6975] netlink: 'syz.3.289': attribute type 1 has an invalid length. [ 245.235912][ T6975] netlink: 'syz.3.289': attribute type 3 has an invalid length. [ 245.235927][ T6975] netlink: 144 bytes leftover after parsing attributes in process `syz.3.289'. [ 245.281770][ T44] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 245.342608][ T44] usb 4-1: USB disconnect, device number 15 [ 245.565996][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 245.566029][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 246.095875][ T5962] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 247.060518][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 247.060550][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 247.060569][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 247.060588][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 247.060881][ T31] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 247.293240][ T5962] usb 3-1: Using ep0 maxpacket: 16 [ 247.297058][ T5962] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.321704][ T5962] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 247.321994][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.322104][ T5962] usb 3-1: Product: syz [ 247.322120][ T5962] usb 3-1: Manufacturer: syz [ 247.322497][ T5962] usb 3-1: SerialNumber: syz [ 247.396948][ T5962] usb 3-1: config 0 descriptor?? [ 247.523224][ T5868] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 247.673282][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 247.675655][ T5868] usb 2-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 247.675675][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.679956][ T5868] usb 2-1: config 0 descriptor?? [ 247.683267][ T44] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 247.839999][ T44] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 247.840029][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.840048][ T44] usb 4-1: Product: syz [ 247.840062][ T44] usb 4-1: Manufacturer: syz [ 247.840075][ T44] usb 4-1: SerialNumber: syz [ 247.846790][ T44] usb 4-1: config 0 descriptor?? [ 247.883285][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 248.016472][ T5962] usb 3-1: USB disconnect, device number 16 [ 248.043273][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 248.047619][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.047645][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.057701][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.058020][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.058049][ T31] usb 5-1: Product: syz [ 248.058333][ T31] usb 5-1: Manufacturer: syz [ 248.058450][ T31] usb 5-1: SerialNumber: syz [ 248.122590][ T44] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 248.327524][ T5187] usb 1-1: USB disconnect, device number 19 [ 248.372097][ T31] usb 5-1: 0:2 : does not exist [ 248.410045][ T31] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 248.517088][ T5868] pegasus 2-1:0.0: probe with driver pegasus failed with error -121 [ 248.755554][ T31] usb 5-1: USB disconnect, device number 6 [ 248.916189][ T44] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 248.961755][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.003251][ T5187] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 249.163405][ T5881] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 249.170773][ T5187] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 249.170803][ T5187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.170822][ T5187] usb 1-1: Product: syz [ 249.170843][ T5187] usb 1-1: Manufacturer: syz [ 249.170853][ T5187] usb 1-1: SerialNumber: syz [ 249.215148][ T5187] usb 1-1: config 0 descriptor?? [ 249.566153][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 249.761209][ T5881] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 249.761239][ T5881] usb 3-1: config 0 has no interface number 0 [ 249.777674][ T5187] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 249.796351][ T5881] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 249.796456][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.796476][ T5881] usb 3-1: Product: syz [ 249.796490][ T5881] usb 3-1: Manufacturer: syz [ 249.796503][ T5881] usb 3-1: SerialNumber: syz [ 249.841378][ T5881] usb 3-1: config 0 descriptor?? [ 249.855248][ T5881] smsc95xx v2.0.0 [ 249.855263][ T5881] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 249.855913][ T5881] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 250.317913][ T5881] usb 2-1: USB disconnect, device number 15 [ 251.486501][ T5868] usb 3-1: USB disconnect, device number 17 [ 251.502831][ T6030] usb 4-1: USB disconnect, device number 16 [ 251.996406][ T38] audit: type=1326 audit(1761866741.801:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7015 comm="syz.1.302" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ab787efc9 code=0x0 [ 252.485579][ T5187] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 253.546546][ T6030] usb 1-1: USB disconnect, device number 20 [ 253.853730][ T5868] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 253.973253][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 254.003599][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 254.013557][ T5868] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 254.013592][ T5868] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 254.013621][ T5868] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 254.013648][ T5868] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 254.013676][ T5868] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.013725][ T5868] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.013752][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.051991][ T5868] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 254.063228][ T6030] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 254.123248][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 254.127929][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 254.130943][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 254.130973][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.130991][ T9] usb 5-1: Product: syz [ 254.131005][ T9] usb 5-1: Manufacturer: syz [ 254.131019][ T9] usb 5-1: SerialNumber: syz [ 254.138852][ T9] usb 5-1: config 0 descriptor?? [ 254.253393][ T6030] usb 1-1: Using ep0 maxpacket: 32 [ 254.256905][ T6030] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 254.256931][ T6030] usb 1-1: config 0 has no interface number 0 [ 254.256980][ T6030] usb 1-1: config 0 interface 184 has no altsetting 0 [ 254.264693][ T6030] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 254.264721][ T6030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.264741][ T6030] usb 1-1: Product: syz [ 254.264755][ T6030] usb 1-1: Manufacturer: syz [ 254.264769][ T6030] usb 1-1: SerialNumber: syz [ 254.285026][ T6030] usb 1-1: config 0 descriptor?? [ 254.297236][ T6030] smsc75xx v1.0.0 [ 255.935891][ T5187] usb 3-1: USB disconnect, device number 18 [ 256.216161][ T7062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.312'. [ 256.216189][ T7062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.312'. [ 256.470025][ T5187] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 256.820337][ T9] usb 5-1: USB disconnect, device number 7 [ 256.905885][ T5187] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 256.905916][ T5187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.906057][ T5187] usb 3-1: Product: syz [ 256.906075][ T5187] usb 3-1: Manufacturer: syz [ 256.906091][ T5187] usb 3-1: SerialNumber: syz [ 256.910303][ T6030] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 256.910331][ T6030] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 256.911929][ T5187] usb 3-1: config 0 descriptor?? [ 257.186692][ T5187] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 257.313327][ T6030] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 257.313378][ T6030] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 257.313399][ T6030] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 257.313418][ T6030] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 257.313722][ T6030] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 257.463286][ T5881] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 257.733640][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 257.737731][ T5881] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.737758][ T5881] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 257.737781][ T5881] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 257.738226][ T5881] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.738279][ T5881] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 257.738520][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.873054][ T5187] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 258.905990][ T6030] usb 1-1: USB disconnect, device number 21 [ 259.315119][ T38] audit: type=1326 audit(1761866749.111:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.0.320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae07efc9 code=0x0 [ 259.399940][ T5962] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 259.763325][ T5881] usb 5-1: usb_control_msg returned -32 [ 259.763374][ T5881] usbtmc 5-1:16.0: can't read capabilities [ 259.827590][ T10] usb 3-1: USB disconnect, device number 19 [ 259.888326][ T5881] usb 5-1: USB disconnect, device number 8 [ 259.899071][ T5962] usb 4-1: Using ep0 maxpacket: 32 [ 259.901487][ T5962] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 259.901511][ T5962] usb 4-1: config 0 has no interface number 0 [ 259.901557][ T5962] usb 4-1: config 0 interface 184 has no altsetting 0 [ 259.958465][ T5962] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 259.958496][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.958517][ T5962] usb 4-1: Product: syz [ 259.958532][ T5962] usb 4-1: Manufacturer: syz [ 259.958546][ T5962] usb 4-1: SerialNumber: syz [ 259.994900][ T5962] usb 4-1: config 0 descriptor?? [ 259.998418][ T5962] smsc75xx v1.0.0 [ 260.910139][ T5962] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 260.910169][ T5962] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 261.166011][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.166083][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.219187][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.326'. [ 262.323235][ T31] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 262.473281][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 262.476125][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 262.479207][ T31] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 262.479233][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.479252][ T31] usb 3-1: Product: syz [ 262.479266][ T31] usb 3-1: Manufacturer: syz [ 262.479280][ T31] usb 3-1: SerialNumber: syz [ 262.493620][ T31] usb 3-1: config 0 descriptor?? [ 263.281724][ T7128] overlayfs: failed to resolve './file1': -2 [ 268.296190][ T31] usb 3-1: USB disconnect, device number 20 [ 268.338613][ T7134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.331'. [ 268.338640][ T7134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.331'. [ 268.676641][ T5962] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 268.676672][ T5962] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 268.676693][ T5962] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 268.676974][ T5962] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 268.686810][ T5962] usb 4-1: USB disconnect, device number 17 [ 268.905578][ T7144] netlink: 36 bytes leftover after parsing attributes in process `syz.4.334'. [ 271.493224][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 271.780441][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 272.185464][ T9] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 272.185522][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.185564][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 272.185586][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.254447][ T9] usbtmc 1-1:16.0: bulk endpoints not found [ 274.353284][ T5881] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 274.384092][ T6030] usb 1-1: USB disconnect, device number 22 [ 274.503244][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 274.507767][ T5881] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 274.507792][ T5881] usb 5-1: config 0 has no interface number 0 [ 274.507861][ T5881] usb 5-1: config 0 interface 184 has no altsetting 0 [ 274.512540][ T5881] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 274.512570][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.512590][ T5881] usb 5-1: Product: syz [ 274.512605][ T5881] usb 5-1: Manufacturer: syz [ 274.512619][ T5881] usb 5-1: SerialNumber: syz [ 274.536422][ T5881] usb 5-1: config 0 descriptor?? [ 274.561595][ T5881] smsc75xx v1.0.0 [ 274.623324][ T5187] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 274.798023][ T7195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.348'. [ 275.620139][ T7200] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 278.639594][ T7206] veth0_to_team: entered promiscuous mode [ 278.639619][ T7206] veth0_to_team: entered allmulticast mode [ 279.348447][ T44] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 280.531350][ T5187] usb 3-1: device descriptor read/all, error -71 [ 280.540122][ T5881] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 280.540152][ T5881] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 280.540170][ T5881] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 280.540514][ T5881] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 280.543223][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 280.548117][ T44] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 280.548140][ T44] usb 2-1: config 0 has no interface number 0 [ 280.548187][ T44] usb 2-1: config 0 interface 184 has no altsetting 0 [ 280.617258][ T44] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 280.617286][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.617305][ T44] usb 2-1: Product: syz [ 280.617318][ T44] usb 2-1: Manufacturer: syz [ 280.617332][ T44] usb 2-1: SerialNumber: syz [ 280.870987][ T44] usb 2-1: config 0 descriptor?? [ 280.880510][ T5881] usb 5-1: USB disconnect, device number 9 [ 280.903739][ T44] smsc75xx v1.0.0 [ 282.127719][ T44] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 282.127986][ T44] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 282.187617][ T44] usb 2-1: USB disconnect, device number 16 [ 282.233199][ T5187] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 282.253275][ T5881] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 282.385047][ T5187] usb 3-1: Using ep0 maxpacket: 8 [ 282.392829][ T5187] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 282.392858][ T5187] usb 3-1: config 0 has no interface number 0 [ 282.392905][ T5187] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.392929][ T5187] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.392950][ T5187] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 282.392991][ T5187] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 282.393015][ T5187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.443227][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 282.475878][ T5881] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 282.475935][ T5881] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.475980][ T5881] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 282.475996][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.529586][ T5187] usb 3-1: config 0 descriptor?? [ 282.540021][ T5881] usbtmc 5-1:16.0: bulk endpoints not found [ 282.553733][ T5187] ldusb 3-1:0.55: Interrupt in endpoint not found [ 282.816931][ T5962] usb 3-1: USB disconnect, device number 22 [ 283.152512][ T44] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 283.933227][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 283.937646][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.937671][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.939834][ T7242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.363'. [ 283.939858][ T7242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.363'. [ 283.940379][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.940411][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.940429][ T44] usb 2-1: Product: syz [ 283.940442][ T44] usb 2-1: Manufacturer: syz [ 283.940456][ T44] usb 2-1: SerialNumber: syz [ 284.347599][ T44] usb 2-1: 0:2 : does not exist [ 284.371611][ T44] usb 2-1: USB disconnect, device number 17 [ 284.422076][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.493235][ T5187] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 284.543337][ T5962] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 284.653251][ T5187] usb 1-1: Using ep0 maxpacket: 32 [ 284.655256][ T5187] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 284.655282][ T5187] usb 1-1: config 0 has no interface number 0 [ 284.657575][ T5187] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 284.657599][ T5187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.657617][ T5187] usb 1-1: Product: syz [ 284.657630][ T5187] usb 1-1: Manufacturer: syz [ 284.657643][ T5187] usb 1-1: SerialNumber: syz [ 284.662758][ T5187] usb 1-1: config 0 descriptor?? [ 284.716328][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.716366][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.716406][ T5962] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 284.716430][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.761777][ T5187] smsc95xx v2.0.0 [ 284.765849][ T5962] usb 3-1: config 0 descriptor?? [ 284.840071][ T5881] usb 5-1: USB disconnect, device number 10 [ 285.067844][ T7257] netlink: 88 bytes leftover after parsing attributes in process `syz.4.367'. [ 285.120867][ T5187] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 285.120899][ T5187] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 285.215343][ T5962] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 285.215382][ T5962] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 285.215407][ T5962] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 285.215430][ T5962] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 285.215450][ T5962] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 285.215468][ T5962] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 285.215485][ T5962] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 285.247199][ T5962] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 285.522644][ T5187] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 285.524448][ T5187] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 285.559016][ T5962] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 285.603328][ T44] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 286.567923][ T5962] cp2112 0003:10C4:EA90.0001: error requesting SMBus config [ 286.577179][ T5962] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71 [ 286.583303][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 286.602468][ T5962] usb 3-1: USB disconnect, device number 23 [ 286.612160][ T44] usb 2-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 286.612188][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.658031][ T44] usb 2-1: config 0 descriptor?? [ 288.875490][ T44] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 288.898048][ T44] usb 2-1: USB disconnect, device number 18 [ 289.189791][ T6030] usb 1-1: USB disconnect, device number 23 [ 291.591916][ T7271] IPv6: addrconf: prefix option has invalid lifetime [ 291.993222][ T44] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 292.443588][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 292.940123][ T44] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 292.944010][ T44] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.944094][ T44] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.944172][ T44] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 292.944487][ T44] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 292.944557][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.351187][ T7303] netlink: 88 bytes leftover after parsing attributes in process `syz.3.379'. [ 293.384961][ T44] usbtmc 3-1:16.0: bulk endpoints not found [ 293.876718][ T44] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 294.766135][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 294.889133][ T44] usb 1-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 294.889164][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.916687][ T6030] usb 3-1: USB disconnect, device number 24 [ 294.939691][ T44] usb 1-1: config 0 descriptor?? [ 296.647966][ T44] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 297.147111][ T44] usb 1-1: USB disconnect, device number 24 [ 299.139844][ T7349] netlink: 88 bytes leftover after parsing attributes in process `syz.1.393'. [ 303.858427][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 304.406393][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 304.406426][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.409277][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 304.409306][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 304.409327][ T9] usb 3-1: Product: syz [ 304.409342][ T9] usb 3-1: Manufacturer: syz [ 304.409357][ T9] usb 3-1: SerialNumber: syz [ 304.418268][ T9] usb 3-1: config 0 descriptor?? [ 304.512864][ T9] usb 3-1: selecting invalid altsetting 0 [ 304.760362][ T9] usb 3-1: USB disconnect, device number 25 [ 304.791103][ T7392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.406'. [ 304.864484][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.276742][ T7399] netlink: 60 bytes leftover after parsing attributes in process `syz.4.408'. [ 305.303238][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 305.394167][ T7405] netlink: 88 bytes leftover after parsing attributes in process `syz.1.411'. [ 305.444747][ T5187] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 305.629023][ T5187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.629070][ T5187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.629108][ T5187] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 305.629161][ T5187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.596762][ T5187] usb 1-1: config 0 descriptor?? [ 306.806258][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 306.806293][ T9] usb 3-1: can't read configurations, error -71 [ 306.926546][ T7418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.413'. [ 307.050318][ T5187] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 307.050357][ T5187] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 307.050384][ T5187] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 307.050409][ T5187] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 307.050435][ T5187] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 307.050460][ T5187] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 307.050486][ T5187] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 307.110490][ T5187] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 307.451307][ T6030] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 307.471376][ T5187] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 310.763609][ T7428] veth0_to_team: entered promiscuous mode [ 310.763637][ T7428] veth0_to_team: entered allmulticast mode [ 312.344966][ T5187] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 312.769191][ T5187] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -32 [ 312.863460][ T5187] usb 1-1: USB disconnect, device number 25 [ 312.972614][ T7435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.420'. [ 314.422053][ T5808] Bluetooth: hci4: command 0x0406 tx timeout [ 314.633221][ T5962] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 314.683763][ T7453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.426'. [ 314.788894][ T7456] veth0_to_team: left promiscuous mode [ 314.788918][ T7456] veth0_to_team: left allmulticast mode [ 314.863654][ T7460] netlink: 56 bytes leftover after parsing attributes in process `syz.3.429'. [ 314.881472][ T5962] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 314.881505][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.881535][ T5962] usb 2-1: Product: syz [ 314.881550][ T5962] usb 2-1: Manufacturer: syz [ 314.881565][ T5962] usb 2-1: SerialNumber: syz [ 315.469044][ T7445] netlink: 'syz.1.424': attribute type 1 has an invalid length. [ 315.469067][ T7445] netlink: 'syz.1.424': attribute type 3 has an invalid length. [ 315.469081][ T7445] netlink: 144 bytes leftover after parsing attributes in process `syz.1.424'. [ 315.476904][ T5962] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 315.476965][ T5962] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 315.476987][ T5962] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 315.575956][ T5962] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 315.655395][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.433'. [ 315.722487][ T5962] usb 2-1: USB disconnect, device number 19 [ 315.963314][ T5187] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 316.204419][ T7478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.435'. [ 316.246377][ T7479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.436'. [ 316.278300][ T5187] usb 5-1: Using ep0 maxpacket: 32 [ 316.323510][ T5187] usb 5-1: unable to get BOS descriptor or descriptor too short [ 316.333725][ T5187] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 316.353657][ T5187] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 316.353686][ T5187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.353707][ T5187] usb 5-1: Product: syz [ 316.353723][ T5187] usb 5-1: Manufacturer: syz [ 316.353737][ T5187] usb 5-1: SerialNumber: syz [ 316.556542][ T7484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.438'. [ 316.768338][ T5187] usb 5-1: Invalid number of CPorts: 0 [ 316.768382][ T5187] es2_ap_driver 5-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 316.990044][ T5962] usb 5-1: USB disconnect, device number 11 [ 317.066982][ T7499] netlink: 56 bytes leftover after parsing attributes in process `syz.2.443'. [ 318.253239][ T5962] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 319.281666][ T5962] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 319.281698][ T5962] usb 3-1: config 0 interface 0 has no altsetting 0 [ 319.302942][ T5962] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 319.302983][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 319.303004][ T5962] usb 3-1: Product: syz [ 319.303019][ T5962] usb 3-1: Manufacturer: syz [ 319.303034][ T5962] usb 3-1: SerialNumber: syz [ 319.450404][ T5962] usb 3-1: config 0 descriptor?? [ 319.483018][ T5962] usb 3-1: selecting invalid altsetting 0 [ 319.605686][ T7523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.449'. [ 319.683184][ T5868] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 319.708868][ T5962] usb 3-1: USB disconnect, device number 28 [ 319.718869][ T7525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.451'. [ 319.807452][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.452'. [ 319.807477][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.452'. [ 319.848721][ T5868] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 319.848751][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.848779][ T5868] usb 1-1: Product: syz [ 319.848789][ T5868] usb 1-1: Manufacturer: syz [ 319.848798][ T5868] usb 1-1: SerialNumber: syz [ 320.103287][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 320.103342][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 320.103362][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 320.109570][ T7516] netlink: 'syz.0.447': attribute type 1 has an invalid length. [ 320.109585][ T7516] netlink: 'syz.0.447': attribute type 3 has an invalid length. [ 320.109593][ T7516] netlink: 144 bytes leftover after parsing attributes in process `syz.0.447'. [ 320.187106][ T5868] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 320.220824][ T5868] usb 1-1: USB disconnect, device number 26 [ 320.529153][ T7535] netlink: 56 bytes leftover after parsing attributes in process `syz.4.454'. [ 322.297895][ T5962] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 322.624691][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.624797][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.783139][ T5962] usb 1-1: Using ep0 maxpacket: 8 [ 322.785130][ T5962] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 322.785147][ T5962] usb 1-1: config 0 has no interface number 0 [ 322.785178][ T5962] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 322.785193][ T5962] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 322.785209][ T5962] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 322.785225][ T5962] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 322.785239][ T5962] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 322.785265][ T5962] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 322.785280][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.789092][ T5962] usb 1-1: config 0 descriptor?? [ 322.861438][ T5962] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 323.064398][ T5868] usb 1-1: USB disconnect, device number 27 [ 323.091027][ T5868] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 323.165160][ T7561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.463'. [ 323.276455][ T7564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.462'. [ 325.636121][ T5962] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 325.791662][ T5962] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 325.791698][ T5962] usb 3-1: config 0 interface 0 has no altsetting 0 [ 326.134153][ T5962] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 326.134199][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 326.134221][ T5962] usb 3-1: Product: syz [ 326.134235][ T5962] usb 3-1: Manufacturer: syz [ 326.134251][ T5962] usb 3-1: SerialNumber: syz [ 326.186216][ T5962] usb 3-1: config 0 descriptor?? [ 326.203905][ T5962] usb 3-1: selecting invalid altsetting 0 [ 327.587437][ T5962] usb 3-1: USB disconnect, device number 29 [ 327.708187][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.180844][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.478'. [ 331.197062][ T7625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.477'. [ 336.698716][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.490'. [ 337.152726][ T38] audit: type=1326 audit(1761866826.951:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7658 comm="syz.1.487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ab787efc9 code=0x0 [ 338.625981][ T7675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.492'. [ 339.722490][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.497'. [ 340.043205][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 340.178219][ T7687] IPv6: addrconf: prefix option has invalid lifetime [ 340.372864][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 340.375653][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 340.375687][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 340.380161][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 340.380189][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.380211][ T9] usb 3-1: Product: syz [ 340.380225][ T9] usb 3-1: Manufacturer: syz [ 340.380240][ T9] usb 3-1: SerialNumber: syz [ 340.415426][ T9] usb 3-1: config 0 descriptor?? [ 340.538311][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 340.538356][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 340.975905][ T7709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.501'. [ 341.034492][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 341.052895][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 341.268182][ T9] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 341.268219][ T9] em28xx 3-1:0.0: No AC97 audio processor [ 341.428789][ T7719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.506'. [ 341.633360][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 342.555231][ T5962] usb 3-1: USB disconnect, device number 30 [ 342.557402][ T5962] em28xx 3-1:0.0: Disconnecting em28xx [ 342.578905][ T5962] em28xx 3-1:0.0: Freeing device [ 342.613201][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 342.631585][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 342.631609][ T9] usb 4-1: config 0 has no interface number 0 [ 342.631650][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 342.631672][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 342.631694][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 342.631717][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 342.631755][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 342.631775][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.641560][ T9] usb 4-1: config 0 descriptor?? [ 342.684234][ T9] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 343.119906][ T5187] usb 4-1: USB disconnect, device number 19 [ 343.176035][ T5187] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 343.722741][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.511'. [ 344.030649][ T7745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.514'. [ 344.073183][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 344.263267][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 344.265625][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 344.265650][ T9] usb 5-1: config 0 has no interface number 0 [ 344.265697][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 344.268528][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 344.268555][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.268575][ T9] usb 5-1: Product: syz [ 344.268589][ T9] usb 5-1: Manufacturer: syz [ 344.268604][ T9] usb 5-1: SerialNumber: syz [ 344.345226][ T9] usb 5-1: config 0 descriptor?? [ 344.364687][ T9] smsc75xx v1.0.0 [ 344.364705][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 344.364958][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 346.064508][ T5889] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 346.501245][ T5889] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 346.501278][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.501299][ T5889] usb 2-1: Product: syz [ 346.501313][ T5889] usb 2-1: Manufacturer: syz [ 346.501327][ T5889] usb 2-1: SerialNumber: syz [ 346.801276][ T5889] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 346.801313][ T5889] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 346.801326][ T5889] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 346.902788][ T5889] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 346.952171][ T5889] usb 5-1: USB disconnect, device number 12 [ 348.873152][ T5962] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 349.033224][ T5962] usb 1-1: Using ep0 maxpacket: 32 [ 349.035725][ T5962] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 349.035749][ T5962] usb 1-1: config 0 has no interface number 0 [ 349.035796][ T5962] usb 1-1: config 0 interface 184 has no altsetting 0 [ 349.038786][ T5962] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 349.038814][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.038834][ T5962] usb 1-1: Product: syz [ 349.038848][ T5962] usb 1-1: Manufacturer: syz [ 349.038862][ T5962] usb 1-1: SerialNumber: syz [ 349.066718][ T5889] usb 2-1: USB disconnect, device number 20 [ 350.094512][ T5962] usb 1-1: config 0 descriptor?? [ 350.155145][ T5962] smsc75xx v1.0.0 [ 350.155163][ T5962] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 350.155417][ T5962] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 350.533575][ T5889] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 350.943276][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 350.946110][ T5889] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 350.946138][ T5889] usb 2-1: config 0 has no interface number 0 [ 350.949499][ T5889] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 350.949527][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.949548][ T5889] usb 2-1: Product: syz [ 350.949562][ T5889] usb 2-1: Manufacturer: syz [ 350.949577][ T5889] usb 2-1: SerialNumber: syz [ 351.890293][ T5889] usb 2-1: config 0 descriptor?? [ 351.900965][ T5889] smsc95xx v2.0.0 [ 351.953950][ T5962] usb 1-1: USB disconnect, device number 28 [ 352.354283][ T5962] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 352.406976][ T5889] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 352.407005][ T5889] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 352.503170][ T5962] usb 1-1: Using ep0 maxpacket: 16 [ 352.505553][ T5962] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.505577][ T5962] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.509344][ T5962] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.509369][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.509389][ T5962] usb 1-1: Product: syz [ 352.509403][ T5962] usb 1-1: Manufacturer: syz [ 352.509416][ T5962] usb 1-1: SerialNumber: syz [ 352.611899][ T5889] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 352.612191][ T5889] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 353.344694][ T5962] usb 1-1: 0:2 : does not exist [ 353.350480][ T5962] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 353.443963][ T5962] usb 1-1: USB disconnect, device number 29 [ 353.878683][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.634176][ T5889] usb 2-1: USB disconnect, device number 21 [ 355.727253][ T7869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.548'. [ 355.743185][ T5187] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 355.895661][ T5187] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 355.895690][ T5187] usb 3-1: config 0 has no interface number 0 [ 355.895736][ T5187] usb 3-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 355.895764][ T5187] usb 3-1: config 0 interface 239 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 355.898574][ T5187] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 355.898600][ T5187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.898619][ T5187] usb 3-1: Product: syz [ 355.898632][ T5187] usb 3-1: Manufacturer: syz [ 355.898645][ T5187] usb 3-1: SerialNumber: syz [ 355.985389][ T5187] usb 3-1: config 0 descriptor?? [ 356.106182][ T7863] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 356.317662][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 356.893557][ T5187] asix 3-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 356.893817][ T5187] asix 3-1:0.239: probe with driver asix failed with error -71 [ 356.931407][ T5187] usb 3-1: USB disconnect, device number 31 [ 359.257656][ T5889] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 359.415412][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 359.421194][ T5889] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.421222][ T5889] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.475960][ T5889] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.475991][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.476011][ T5889] usb 4-1: Product: syz [ 359.476025][ T5889] usb 4-1: Manufacturer: syz [ 359.476040][ T5889] usb 4-1: SerialNumber: syz [ 359.876929][ T5889] usb 4-1: 0:2 : does not exist [ 359.914099][ T9] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 360.109597][ T5889] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 360.429971][ T5889] usb 4-1: USB disconnect, device number 20 [ 360.450809][ T7920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.558'. [ 360.450832][ T7920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.558'. [ 360.989209][ T6208] udevd[6208]: setting owner of /dev/bus/usb/004/020 to uid=0, gid=0 failed: No such file or directory [ 361.068378][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.070467][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 361.070496][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.070515][ T9] usb 1-1: Product: syz [ 361.070528][ T9] usb 1-1: Manufacturer: syz [ 361.070543][ T9] usb 1-1: SerialNumber: syz [ 361.093221][ T9] usb 1-1: config 0 descriptor?? [ 361.523345][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 362.937059][ T38] audit: type=1326 audit(1761866852.741:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7927 comm="syz.3.562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f922ee1efc9 code=0x0 [ 363.332116][ T7935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.561'. [ 363.528963][ T7941] netlink: 60 bytes leftover after parsing attributes in process `syz.4.565'. [ 363.944872][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 364.025618][ T5187] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 364.264251][ T5187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.264276][ T5187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.264310][ T5187] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 364.264327][ T5187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.320200][ T5187] usb 2-1: config 0 descriptor?? [ 364.547320][ T9] usb 1-1: USB disconnect, device number 30 [ 365.776545][ T5187] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 365.776585][ T5187] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 365.776612][ T5187] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 365.776654][ T5187] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 365.776679][ T5187] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 365.776705][ T5187] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 365.776731][ T5187] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 365.859596][ T5187] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 365.904789][ T7969] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 365.969649][ T5187] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 366.182986][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.219601][ T5187] cp2112 0003:10C4:EA90.0003: error requesting SMBus config [ 366.231995][ T5187] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -32 [ 366.276085][ T7973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.574'. [ 366.339554][ T7975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.576'. [ 366.421518][ T7979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.577'. [ 366.421547][ T7979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.577'. [ 366.884921][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.058603][ T6030] usb 2-1: USB disconnect, device number 22 [ 368.063109][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.574206][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.743590][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.856463][ T8015] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 369.856524][ T8015] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 370.246517][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.038337][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.821161][ T8043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.588'. [ 373.743234][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 375.148587][ T10] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 375.148615][ T10] usb 4-1: config 0 has no interface number 0 [ 375.148663][ T10] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.148690][ T10] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.148711][ T10] usb 4-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 375.148740][ T10] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 375.148755][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.226691][ T10] usb 4-1: config 0 descriptor?? [ 376.554091][ T9] usb 4-1: USB disconnect, device number 21 [ 380.396915][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.603'. [ 381.368879][ T8093] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 381.368984][ T8093] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 381.369004][ T8093] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 382.523327][ T5881] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 383.104949][ T5881] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 383.104987][ T5881] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 383.105015][ T5881] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 383.105061][ T5881] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 383.105086][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.197042][ T8108] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 383.942113][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.942185][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.212819][ T8126] IPv6: addrconf: prefix option has invalid lifetime [ 385.762022][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.809907][ T5881] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 386.011582][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.104949][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.128438][ T5881] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input6 [ 386.543677][ T5881] usb 3-1: USB disconnect, device number 32 [ 386.543771][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 386.602878][ T8154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.617'. [ 387.013228][ T5881] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 387.208283][ T5881] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 387.208308][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.208321][ T5881] usb 3-1: Product: syz [ 387.208336][ T5881] usb 3-1: Manufacturer: syz [ 387.208346][ T5881] usb 3-1: SerialNumber: syz [ 388.277708][ T5881] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 388.277768][ T5881] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 388.281323][ T5881] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 388.281379][ T5881] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 388.338735][ T5881] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 388.371471][ T5881] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 388.701876][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.731381][ T9] usb 3-1: USB disconnect, device number 33 [ 389.971219][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.914121][ T8193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.628'. [ 390.923567][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 391.114682][ T9] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 391.114716][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 391.114741][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 391.114783][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 391.115003][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.263485][ T8185] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 391.325672][ T8197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.629'. [ 392.322108][ T9] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 392.338103][ T9] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input7 [ 393.392949][ T38] audit: type=1326 audit(1761866883.191:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8205 comm="syz.0.632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae07efc9 code=0x0 [ 393.530171][ T38] audit: type=1326 audit(1761866883.331:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.4.630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f577b99efc9 code=0x0 [ 393.586775][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.587655][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.705166][ T5187] usb 4-1: USB disconnect, device number 22 [ 394.705335][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 394.852215][ T8194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.917553][ T8194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.096876][ T171] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.113758][ T171] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.113810][ T171] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.113850][ T171] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.389029][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 396.389082][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 396.389096][ T8239] nbd: socks must be embedded in a SOCK_ITEM attr [ 397.933821][ T8253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.643'. [ 397.933849][ T8253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.643'. [ 397.935111][ T8255] 9pnet_virtio: no channels available for device [ 398.485153][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 398.658478][ T8274] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 398.863227][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.179528][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.674951][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.857460][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.254877][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.531076][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 401.531130][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'. [ 403.123075][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.183191][ T10] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 403.368739][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 403.368760][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.368773][ T10] usb 2-1: Product: syz [ 403.368782][ T10] usb 2-1: Manufacturer: syz [ 403.368792][ T10] usb 2-1: SerialNumber: syz [ 403.590660][ T8306] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 404.306915][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.356584][ T10] usb 2-1: config 0 descriptor?? [ 404.664850][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.667323][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 405.467945][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.045777][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.046647][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.167315][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 406.566846][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.584965][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.991065][ T10] usb 2-1: USB disconnect, device number 23 [ 407.769999][ T8322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.664'. [ 407.801460][ T3630] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.832956][ T3630] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.857574][ T3630] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.857634][ T3630] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.998906][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'. [ 407.998961][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'. [ 408.723211][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 409.219870][ T10] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 409.219897][ T10] usb 5-1: config 0 has no interface number 0 [ 409.219943][ T10] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.219995][ T10] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.220774][ T10] usb 5-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 409.221034][ T10] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 409.221058][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.382592][ T10] usb 5-1: config 0 descriptor?? [ 410.163273][ T5962] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 410.235137][ T10] usbhid 5-1:0.4: can't add hid device: -71 [ 410.235263][ T10] usbhid 5-1:0.4: probe with driver usbhid failed with error -71 [ 410.260343][ T10] usb 5-1: USB disconnect, device number 13 [ 410.316854][ T5962] usb 3-1: Using ep0 maxpacket: 8 [ 410.319152][ T5962] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.319180][ T5962] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 410.319205][ T5962] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.319230][ T5962] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.319274][ T5962] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.319298][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.487851][ T8383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.681'. [ 411.510677][ T5962] usb 3-1: GET_CAPABILITIES returned 0 [ 411.510721][ T5962] usbtmc 3-1:16.0: can't read capabilities [ 411.646059][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.736208][ T44] usb 3-1: USB disconnect, device number 34 [ 411.997850][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.368649][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.928082][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.963298][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 414.966516][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'. [ 415.058771][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.462412][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.669432][ T8410] veth0_to_team: entered promiscuous mode [ 415.669457][ T8410] veth0_to_team: entered allmulticast mode [ 415.691423][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.232146][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.874125][ T5962] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 416.903317][ T5881] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 416.973815][ T44] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 418.085685][ T5962] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 418.085714][ T5962] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.085734][ T5962] usb 3-1: config 0 has no interface number 0 [ 418.085782][ T5962] usb 3-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.085811][ T5962] usb 3-1: config 0 interface 41 has no altsetting 0 [ 418.089484][ T5962] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 418.089513][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.089532][ T5962] usb 3-1: Product: syz [ 418.089545][ T5962] usb 3-1: Manufacturer: syz [ 418.089559][ T5962] usb 3-1: SerialNumber: syz [ 418.097626][ T5962] usb 3-1: config 0 descriptor?? [ 418.108726][ T5962] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 418.183174][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 418.342731][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 418.692231][ T44] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.692259][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 418.713213][ T5881] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.713244][ T5881] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.713269][ T5881] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.713292][ T5881] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.713335][ T5881] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 418.713358][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.720017][ T8427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.694'. [ 418.760059][ T44] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 418.760079][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.760092][ T44] usb 1-1: Product: syz [ 418.760100][ T44] usb 1-1: Manufacturer: syz [ 418.760109][ T44] usb 1-1: SerialNumber: syz [ 419.010481][ T5881] usb 4-1: GET_CAPABILITIES returned 0 [ 419.010625][ T5881] usbtmc 4-1:16.0: can't read capabilities [ 419.215278][ T5881] usb 4-1: USB disconnect, device number 23 [ 419.314235][ T44] usb 1-1: 0:2 : does not exist [ 419.331702][ T44] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 419.450067][ T8434] veth0_to_team: entered promiscuous mode [ 419.450092][ T8434] veth0_to_team: entered allmulticast mode [ 419.483495][ T5962] usb 3-1: USB disconnect, device number 35 [ 420.038751][ T44] usb 1-1: USB disconnect, device number 31 [ 420.160976][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.150625][ T8460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.704'. [ 422.150654][ T8460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.704'. [ 423.933184][ T44] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 424.426493][ T44] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 424.426524][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.426544][ T44] usb 3-1: Product: syz [ 424.426558][ T44] usb 3-1: Manufacturer: syz [ 424.426571][ T44] usb 3-1: SerialNumber: syz [ 424.943145][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 424.963515][ T44] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 424.963587][ T44] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 425.093293][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 425.102797][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 425.102826][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 425.102849][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 425.102871][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.102914][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 425.102936][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.504040][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 425.504090][ T10] usbtmc 5-1:16.0: can't read capabilities [ 425.940911][ T44] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 425.940967][ T44] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 425.942811][ T44] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 425.976675][ T10] usb 5-1: USB disconnect, device number 14 [ 426.037376][ T44] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 426.627701][ T10] usb 3-1: USB disconnect, device number 36 [ 427.043535][ T8493] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 427.096173][ T8499] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 429.145125][ T8515] netlink: 76 bytes leftover after parsing attributes in process `syz.4.719'. [ 429.178656][ T8517] fuse: Bad value for 'rootmode' [ 431.416164][ T8531] fuse: Bad value for 'rootmode' [ 431.733196][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 432.054300][ T44] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 433.105905][ T44] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 433.106133][ T44] usb 5-1: config 0 has no interface number 0 [ 433.108629][ T44] usb 5-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 433.109152][ T44] usb 5-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 433.145032][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 433.294930][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 433.295060][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 433.295103][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 433.295290][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.295639][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 433.295770][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.459773][ T44] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 433.460165][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.460789][ T44] usb 5-1: Product: syz [ 433.461446][ T44] usb 5-1: Manufacturer: syz [ 433.462132][ T44] usb 5-1: SerialNumber: syz [ 433.823412][ T44] usb 5-1: config 0 descriptor?? [ 433.893198][ T5881] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 433.968480][ T10] usb 3-1: usb_control_msg returned -71 [ 433.968528][ T10] usbtmc 3-1:16.0: can't read capabilities [ 434.036036][ T10] usb 3-1: USB disconnect, device number 37 [ 434.082065][ T5881] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 434.082150][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.082171][ T5881] usb 2-1: Product: syz [ 434.082185][ T5881] usb 2-1: Manufacturer: syz [ 434.082199][ T5881] usb 2-1: SerialNumber: syz [ 434.141111][ T44] asix 5-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 434.141368][ T44] asix 5-1:0.239: probe with driver asix failed with error -71 [ 434.206263][ T44] usb 5-1: USB disconnect, device number 15 [ 434.644404][ T5881] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 434.644464][ T5881] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 434.648234][ T5881] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 434.648331][ T5881] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 434.648896][ T5881] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 434.794832][ T5881] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 435.100015][ T8564] fuse: Bad value for 'rootmode' [ 435.223318][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 435.324998][ T8567] netlink: 76 bytes leftover after parsing attributes in process `syz.2.736'. [ 436.107261][ T5881] usb 2-1: USB disconnect, device number 24 [ 436.373519][ T8572] netlink: 24 bytes leftover after parsing attributes in process `syz.2.738'. [ 436.467263][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.467296][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.467334][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 436.467356][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.495303][ T10] usb 4-1: config 0 descriptor?? [ 436.654900][ T8578] fuse: Bad value for 'rootmode' [ 436.669356][ T8576] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 438.147287][ T10] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 438.147331][ T10] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 438.147360][ T10] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 438.147388][ T10] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 438.147416][ T10] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 438.147444][ T10] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 438.147472][ T10] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 438.222625][ T10] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 438.274906][ T10] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 438.753581][ T10] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71 [ 438.783694][ T10] usb 4-1: USB disconnect, device number 24 [ 438.837897][ T8588] fido_id[8588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 439.143352][ T5881] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 439.305144][ T5881] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 439.305179][ T5881] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 439.305207][ T5881] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 439.305252][ T5881] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 439.305276][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.373332][ T8595] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 440.775617][ T8613] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 442.218143][ T5881] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 442.220927][ T5881] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input8 [ 443.012663][ T5881] usb 5-1: USB disconnect, device number 16 [ 443.012758][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 443.119236][ T8628] netlink: 76 bytes leftover after parsing attributes in process `syz.2.749'. [ 443.133353][ T8629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.750'. [ 443.901383][ T8642] fuse: Bad value for 'rootmode' [ 446.793146][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.793230][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.419778][ T8681] netlink: 'syz.3.764': attribute type 4 has an invalid length. [ 450.043170][ T5962] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 450.203881][ T5962] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 450.203915][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.203937][ T5962] usb 3-1: Product: syz [ 450.203953][ T5962] usb 3-1: Manufacturer: syz [ 450.203969][ T5962] usb 3-1: SerialNumber: syz [ 450.353184][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 450.456224][ T8704] fuse: Bad value for 'rootmode' [ 451.662568][ T5962] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 451.662628][ T5962] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 451.665685][ T5962] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 451.665738][ T5962] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 451.666686][ T5962] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 451.681602][ T10] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.681633][ T10] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 451.681660][ T10] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 451.681701][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 451.681724][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.700874][ T8697] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 451.875344][ T5962] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 452.204941][ T5962] usb 3-1: USB disconnect, device number 38 [ 453.503179][ T5962] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 453.653137][ T5962] usb 3-1: Using ep0 maxpacket: 32 [ 453.655886][ T5962] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 453.655913][ T5962] usb 3-1: config 0 has no interface number 0 [ 453.655965][ T5962] usb 3-1: config 0 interface 184 has no altsetting 0 [ 453.658993][ T5962] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 453.659021][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.659041][ T5962] usb 3-1: Product: syz [ 453.659056][ T5962] usb 3-1: Manufacturer: syz [ 453.659070][ T5962] usb 3-1: SerialNumber: syz [ 453.718672][ T5962] usb 3-1: config 0 descriptor?? [ 453.723211][ T5942] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 453.742282][ T5962] smsc75xx v1.0.0 [ 453.855269][ T10] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 453.865032][ T10] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input9 [ 453.873204][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 453.886790][ T5942] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.886956][ T5942] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.918848][ T5942] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 453.919010][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.919031][ T5942] usb 4-1: Product: syz [ 453.919046][ T5942] usb 4-1: Manufacturer: syz [ 453.919060][ T5942] usb 4-1: SerialNumber: syz [ 454.126019][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 454.126090][ T10] usb 5-1: USB disconnect, device number 17 [ 454.185329][ T5962] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 454.185361][ T5962] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 454.185381][ T5962] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 454.186023][ T5962] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 454.297288][ T5942] usb 4-1: 0:2 : does not exist [ 454.307692][ T5942] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 454.427108][ T5942] usb 4-1: USB disconnect, device number 25 [ 454.528030][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.752154][ T8759] fuse: Bad value for 'rootmode' [ 454.984458][ T5889] usb 3-1: USB disconnect, device number 39 [ 455.793968][ T8764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.785'. [ 455.851349][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 455.851405][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 455.851419][ T8766] nbd: socks must be embedded in a SOCK_ITEM attr [ 456.010468][ T5942] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 456.035902][ C0] ------------[ cut here ]------------ [ 456.035917][ C0] refcount_t: addition on 0; use-after-free. [ 456.036549][ C0] WARNING: CPU: 0 PID: 16 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 456.036596][ C0] Modules linked in: [ 456.036634][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 456.036661][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 456.036679][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 456.036704][ C0] Code: 00 00 e8 09 5e 45 fd 5b 41 5e c3 cc cc cc cc cc e8 fb 5d 45 fd c6 05 e3 06 47 0a 01 90 48 c7 c7 c0 2c 3d 8b e8 17 a5 09 fd 90 <0f> 0b 90 90 eb d7 e8 db 5d 45 fd c6 05 c4 06 47 0a 01 90 48 c7 c7 [ 456.036724][ C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246 [ 456.036743][ C0] RAX: d68b1189e63a3400 RBX: 0000000000000002 RCX: ffff88801b2f5a00 [ 456.036760][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 456.036773][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 456.036787][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18 [ 456.036804][ C0] R13: ffff888037b99360 R14: ffff888037b98f80 R15: dffffc0000000000 [ 456.036821][ C0] FS: 0000000000000000(0000) GS:ffff888126dfc000(0000) knlGS:0000000000000000 [ 456.036839][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.036855][ C0] CR2: 0000000000000000 CR3: 0000000031638000 CR4: 00000000003526f0 [ 456.036874][ C0] Call Trace: [ 456.036887][ C0] [ 456.036899][ C0] mptcp_schedule_work+0x164/0x1a0 [ 456.036926][ C0] mptcp_tout_timer+0x21/0xa0 [ 456.036957][ C0] call_timer_fn+0x17e/0x5f0 [ 456.036989][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 456.037017][ C0] ? call_timer_fn+0xbe/0x5f0 [ 456.037047][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 456.037097][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 456.037126][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.037151][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 456.037179][ C0] __run_timer_base+0x648/0x970 [ 456.037223][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 456.037267][ C0] run_timer_softirq+0xb7/0x180 [ 456.037295][ C0] handle_softirqs+0x22f/0x710 [ 456.037332][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 456.037370][ C0] run_ktimerd+0xcf/0x190 [ 456.037399][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 456.037426][ C0] ? schedule+0x91/0x360 [ 456.037459][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 456.037486][ C0] smpboot_thread_fn+0x542/0xa60 [ 456.037523][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 456.037559][ C0] kthread+0x711/0x8a0 [ 456.037595][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 456.037622][ C0] ? __pfx_kthread+0x10/0x10 [ 456.037650][ C0] ? rt_spin_unlock+0x150/0x200 [ 456.037676][ C0] ? rt_spin_unlock+0x161/0x200 [ 456.037696][ C0] ? __pfx_kthread+0x10/0x10 [ 456.037728][ C0] ret_from_fork+0x4bc/0x870 [ 456.037757][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 456.037809][ C0] ? __switch_to_asm+0x39/0x70 [ 456.037832][ C0] ? __switch_to_asm+0x33/0x70 [ 456.037853][ C0] ? __pfx_kthread+0x10/0x10 [ 456.037887][ C0] ret_from_fork_asm+0x1a/0x30 [ 456.037931][ C0] [ 456.037952][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 456.037969][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 456.037996][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 456.038010][ C0] Call Trace: [ 456.038019][ C0] [ 456.038028][ C0] dump_stack_lvl+0x99/0x250 [ 456.038063][ C0] ? __asan_memcpy+0x40/0x70 [ 456.038091][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.038126][ C0] ? __pfx__printk+0x10/0x10 [ 456.038169][ C0] vpanic+0x237/0x6d0 [ 456.038192][ C0] ? __pfx_vpanic+0x10/0x10 [ 456.038225][ C0] panic+0xb9/0xc0 [ 456.038246][ C0] ? __pfx_panic+0x10/0x10 [ 456.038286][ C0] __warn+0x31b/0x4b0 [ 456.038305][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 456.038333][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 456.038357][ C0] report_bug+0x2be/0x4f0 [ 456.038384][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 456.038409][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 456.038434][ C0] ? refcount_warn_saturate+0xfc/0x1d0 [ 456.038458][ C0] handle_bug+0x84/0x160 [ 456.038500][ C0] exc_invalid_op+0x1a/0x50 [ 456.038532][ C0] asm_exc_invalid_op+0x1a/0x20 [ 456.038554][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 456.038580][ C0] Code: 00 00 e8 09 5e 45 fd 5b 41 5e c3 cc cc cc cc cc e8 fb 5d 45 fd c6 05 e3 06 47 0a 01 90 48 c7 c7 c0 2c 3d 8b e8 17 a5 09 fd 90 <0f> 0b 90 90 eb d7 e8 db 5d 45 fd c6 05 c4 06 47 0a 01 90 48 c7 c7 [ 456.038599][ C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246 [ 456.038620][ C0] RAX: d68b1189e63a3400 RBX: 0000000000000002 RCX: ffff88801b2f5a00 [ 456.038636][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 456.038651][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 456.038665][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18 [ 456.038682][ C0] R13: ffff888037b99360 R14: ffff888037b98f80 R15: dffffc0000000000 [ 456.038722][ C0] mptcp_schedule_work+0x164/0x1a0 [ 456.038748][ C0] mptcp_tout_timer+0x21/0xa0 [ 456.038778][ C0] call_timer_fn+0x17e/0x5f0 [ 456.038809][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 456.038836][ C0] ? call_timer_fn+0xbe/0x5f0 [ 456.038867][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 456.038908][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 456.038938][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.038964][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 456.038995][ C0] __run_timer_base+0x648/0x970 [ 456.039041][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 456.039088][ C0] run_timer_softirq+0xb7/0x180 [ 456.039118][ C0] handle_softirqs+0x22f/0x710 [ 456.039156][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 456.039195][ C0] run_ktimerd+0xcf/0x190 [ 456.039225][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 456.039253][ C0] ? schedule+0x91/0x360 [ 456.039287][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 456.039314][ C0] smpboot_thread_fn+0x542/0xa60 [ 456.039345][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 456.039382][ C0] kthread+0x711/0x8a0 [ 456.039428][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 456.039455][ C0] ? __pfx_kthread+0x10/0x10 [ 456.039485][ C0] ? rt_spin_unlock+0x150/0x200 [ 456.039520][ C0] ? rt_spin_unlock+0x161/0x200 [ 456.039540][ C0] ? __pfx_kthread+0x10/0x10 [ 456.039576][ C0] ret_from_fork+0x4bc/0x870 [ 456.039606][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 456.039642][ C0] ? __switch_to_asm+0x39/0x70 [ 456.039664][ C0] ? __switch_to_asm+0x33/0x70 [ 456.039685][ C0] ? __pfx_kthread+0x10/0x10 [ 456.039719][ C0] ret_from_fork_asm+0x1a/0x30 [ 456.039763][ C0] [ 456.039913][ C0] Kernel Offset: disabled