last executing test programs: 25m45.313176249s ago: executing program 1 (id=534): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x3c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r4 = epoll_create1(0x0) epoll_wait(r4, &(0x7f000000affb)=[{}], 0x1, 0x7fff) r5 = syz_open_dev$video(&(0x7f0000000380), 0xbdff, 0x0) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) 25m40.359713595s ago: executing program 1 (id=541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$vim2m(0x0, 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x7b, 0x0, 0x0, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000001080)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_emit_ethernet(0x72, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) mq_open(&(0x7f000084dff0)='!senin\xd58\xd9\x03+\t\xe1\xabx\x00', 0x6e93ebbbcc0884f2, 0x88, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200]}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) close_range(r5, 0xffffffffffffffff, 0x0) 25m37.284533328s ago: executing program 1 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$vim2m(0x0, 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x7b, 0x0, 0x0, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000001080)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_emit_ethernet(0x72, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) io_uring_setup(0x8a8, 0x0) mq_open(&(0x7f000084dff0)='!senin\xd58\xd9\x03+\t\xe1\xabx\x00', 0x6e93ebbbcc0884f2, 0x88, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) close_range(r5, 0xffffffffffffffff, 0x0) 25m36.314088562s ago: executing program 1 (id=548): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x3c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r4 = epoll_create1(0x0) epoll_wait(r4, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)={0x20000007}) r5 = syz_open_dev$video(&(0x7f0000000380), 0xbdff, 0x0) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) 25m34.080059224s ago: executing program 1 (id=550): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x67) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000140)) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfdef) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 25m30.772428917s ago: executing program 1 (id=561): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x5, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x1086}}], 0x400000000000172, 0x48004) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x6, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) write$dsp(r4, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x11}) 25m15.300986548s ago: executing program 32 (id=561): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x5, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x1086}}], 0x400000000000172, 0x48004) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x6, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) write$dsp(r4, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x11}) 11m22.982877057s ago: executing program 2 (id=2273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x8000) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000140)={0x1, 0x0, 0x1, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x7ff7ffff, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x125f, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @empty}, @in={0x2, 0x4f24, @remote={0xac, 0xc}}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), r7, 0x2}}, 0x18) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) 11m21.859596446s ago: executing program 2 (id=2279): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) sendfile(r0, r0, 0x0, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x27, 0x71, 0xbf, 0x34, @empty, @empty, 0x40, 0x10, 0xc, 0xffff}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x20, 0x20, 0xfff, 0x5, {{0x32, 0x4, 0x1, 0x4, 0xc8, 0x67, 0x0, 0x1, 0x2f, 0x0, @multicast2, @multicast2, {[@end, @timestamp_prespec={0x44, 0x55, 0x7, 0x3, 0x9}, @cipso={0x86, 0x2e, 0x3, [{0x0, 0x6, "9e0b2860"}, {0x2, 0x8, "a84865ae052f"}, {0x1, 0xc, "256e74ddf2b8fa69df54"}, {0x6, 0xe, "c203603258ba5584db7a1d99"}]}, @lsrr={0x83, 0x3, 0xa}, @cipso={0x86, 0x13, 0x2, [{0x6, 0xd, "282318d9424be7fc0a75ac"}]}, @noop, @lsrr={0x83, 0x7, 0x66, [@multicast2]}, @cipso={0x86, 0x37, 0x3, [{0x5, 0x10, "f67974b79b27d0da730dfc898065"}, {0x6, 0xb, "30882fedea4a99cb3e"}, {0x2, 0x9, "bad264c0a8da3f"}, {0x7, 0xd, "31c03ba01ffb636c741d4f"}]}, @timestamp_addr={0x44, 0x2c, 0xf, 0x1, 0xa, [{@private=0xa010102}, {@multicast1, 0x1000}, {@multicast2, 0x3ff}, {@local, 0x7}, {@empty, 0x9}]}]}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=ANY=[@ANYBLOB="dc020000", @ANYRES16=r3, @ANYBLOB="05002abd7000fddbdf2501000000c00208803000008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c0800030007000000d401008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffac01098040000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200ffffffffffffff800000000000000001050003000000000028000080060001000a00000014000200000000000000000000000000000000010500030002000000b80000800600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200000000000500030006000000060001000a00000014000200fc01000000000000000000000000000205000300010000000600010002000000080002000a0101010500030000000000060001000200000008000200ac1e01010500030002000000e5000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff020000000000000000000000000001050003000200000038000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222800008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c580000803000098028000080060001000a000000140002002001000000000000000000000000000205000300010000000400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b08000100", @ANYRES32=r4], 0x2dc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 11m20.524616862s ago: executing program 2 (id=2284): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xe0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000280)="f283d6f8660f10b200980fc75c000f38c972813ef20f0666b9320900000f32640f79615a0f20c06635000000200f22c04f8301c251c25151", 0x38}], 0x1, 0x55, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc", 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x8961, 0x0, 0x5], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r6, 0x21, 0x80, &(0x7f0000000140)="7452ebc740866e421e84f99a489a2a79c1a81f7456711147af6c5b452e95a618a7b847736bdc753cff57dd236914f9f8b8eef013086e710b68a90e907c5124cb71e2748dc05cac495bb9c1429685c3d828b9c8054f65f4f29a4d164730919fa80eadb5655ee6b993ef2be9edc4fccb4dffcd91fd", 0x74) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r6, @ANYRES32=r5, @ANYRESOCT=r5], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11m19.560124884s ago: executing program 2 (id=2288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x5f, ""/95}, &(0x7f00000000c0)=0x7f, 0x1) 11m19.315861308s ago: executing program 2 (id=2290): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0x0, @loopback, 0x4}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000)='\x00\"', 0x2) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000000000/0x400000)=nil, 0x800000}) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000200)=0xd1, 0x4) sendto$inet6(r1, &(0x7f0000000240)="c4", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 11m16.963046144s ago: executing program 2 (id=2297): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0806000108000604000200000000002000000000aaaa0900000000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, 0x0, 0x0, 0x10, &(0x7f0000000700), 0x0, 0x0, 0x69, 0x8, 0x0, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup(0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x5000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000008c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000002c0)=0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',']) recvmsg$unix(r1, 0x0, 0x20) r5 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r5, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 11m1.577359508s ago: executing program 33 (id=2297): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0806000108000604000200000000002000000000aaaa0900000000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, 0x0, 0x0, 0x10, &(0x7f0000000700), 0x0, 0x0, 0x69, 0x8, 0x0, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup(0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x5000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000008c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000002c0)=0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',']) recvmsg$unix(r1, 0x0, 0x20) r5 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r5, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 13.328871056s ago: executing program 0 (id=5447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00B\x00', "006e34e400"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 12.39660894s ago: executing program 0 (id=5455): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) fanotify_init(0x240, 0x0) 11.992409594s ago: executing program 0 (id=5457): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000300)={0x40, 0x17, 0x3, "94c161"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0xd, 0x4, "c7a1e822"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001a80)={0x44, &(0x7f0000000540)={0x40, 0x18, 0x4, "87a79de9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) 8.242263089s ago: executing program 0 (id=5486): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) 6.78872499s ago: executing program 3 (id=5496): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x0) 6.731473279s ago: executing program 3 (id=5497): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000440)={0xfffa, [0x0, 0xffffffff], 0x1000}, 0x10) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000240)='./file0\x00', r4, 0xffffffffffffffff) 6.420058875s ago: executing program 0 (id=5502): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0xa) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 5.203162575s ago: executing program 3 (id=5513): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) 4.788114529s ago: executing program 6 (id=5515): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x14, 0x2}, @flat=@weak_binder, @flat=@handle={0x73682a85, 0x10a, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000c80)={0x44, 0x0, &(0x7f0000000ac0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0xfdfdffff, &(0x7f0000000bc0)="494302"}) 4.718741844s ago: executing program 0 (id=5517): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x0, 0x7, 0x7f}) r1 = io_uring_setup(0x7975, &(0x7f00000002c0)={0x0, 0x659, 0x40, 0x1, 0x328}) syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000019792e20b4070a0102010102030109022b0001000000440904bd00023467c3000905000000000000000705a37e1b82e609050b020000000000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='io_uring_register\x00'}, 0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x10, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)) timer_settime(0x0, 0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000400)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r2, 0x10001, 0x7, 0x8}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) mprotect(&(0x7f00000bc000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) write$usbip_server(0xffffffffffffffff, 0x0, 0x1809) 4.657660051s ago: executing program 5 (id=5518): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x256e8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000700)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x1, 0x6}}, './file0\x00'}) shutdown(r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000"], 0x68}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}, 0x1, 0x0, 0x0, 0x90}, 0x0) 4.579735525s ago: executing program 6 (id=5520): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1000, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x80, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x20) 3.659316535s ago: executing program 6 (id=5522): r0 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) socket(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES64=r2], 0x20}}, 0x0) 3.25320913s ago: executing program 5 (id=5523): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000440)={0xfffa, [0x0, 0xffffffff], 0x1000}, 0x10) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000240)='./file0\x00', r2, 0xffffffffffffffff) 3.006092327s ago: executing program 6 (id=5524): mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000004) socket(0x18, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="b4000300fffffeffffffffffffffffff"], 0x10) r3 = dup2(r2, r2) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000600)={0x14000000}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) unshare(0x44040011) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r4, &(0x7f0000000080)) 2.804534976s ago: executing program 5 (id=5526): io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1}) r0 = socket$inet6(0xa, 0x40000080806, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) mkdir(0x0, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000a400)={0x2020}, 0x2028) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) 2.00832039s ago: executing program 4 (id=5528): close(0xffffffffffffffff) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r0 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 1.983497993s ago: executing program 3 (id=5529): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000700)=0x6) 1.867003486s ago: executing program 4 (id=5530): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="640200001000030400000000fcffffff00000400", @ANYRES32=0x0, @ANYBLOB="610401000000000008001300", @ANYRES32, @ANYBLOB="f8001680f400018040000c801400010000000000100c00000000000081000000140001000902000054030000040000008100000014000100070000001e0d0000c6030000810000000c00050001f8ffff0400000014000a00ff0000000000000007000000000000001000060003000000090000000700000068000c801400010008000000e80a00000400000088a800001400010000000000500c000080ffffff8100000014000100018000009b080000020000008100000014000100ff7f0000bd0100000c00000088a8000014000100ff010000240c00000080000088a800000c0003"], 0x264}, 0x1, 0x0, 0x0, 0x10}, 0x44004) 1.820843722s ago: executing program 3 (id=5531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000500)={@val={0x300, 0x800}, @val={0x2, 0x4, 0x6, 0x3, 0x80, 0x6}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x8, 0x3e, 0x0, 0x0, 0x9, 0x11, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x14}}, {0x0, 0x4e23, 0x2a, 0x0, @opaque="46e3a0ee14bf49a3ab6afa2df7461c915f0a4948a7f36228e590e08b1c61d84a611d"}}}}, 0x4c) 1.794726559s ago: executing program 5 (id=5532): mkdir(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f00000000c0)='./file0\x00', 0x20000002) 1.727723641s ago: executing program 4 (id=5533): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in6=@remote, @in6=@mcast1, 0x4e20, 0x8000, 0x4e1d, 0x3, 0x2, 0x20, 0x20, 0x1}, {0x80000000, 0x6, 0x8, 0x3, 0xc, 0x81, 0xff, 0x8}, {0x7, 0x4, 0x3, 0x4}, 0x81, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@local, 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x3, 0x0, 0x9, 0x4, 0x1000000}}, 0xe8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x4}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 969.105602ms ago: executing program 4 (id=5534): r0 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) socket(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES64=r2], 0x20}}, 0x0) 804.851188ms ago: executing program 5 (id=5535): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c00000000010104000052593bdb000002000000240001801400018008000100e000008108000200e0"], 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300"], 0x68}}, 0x0) 768.273926ms ago: executing program 4 (id=5536): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), r1, 0x0, 0x1, 0x4}}, 0x20) 731.793209ms ago: executing program 4 (id=5537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x8, 0x0) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) mkdir(0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64656275673d3078163030303030303030303030303030372c0001da5280833471f915c7"]) read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 645.532595ms ago: executing program 6 (id=5538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)={0x20, r1, 0x1, 0x70bd22, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 644.826043ms ago: executing program 5 (id=5539): syz_emit_ethernet(0x2e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x20, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x19, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xffffffff, 0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) syz_io_uring_setup(0x1ca2, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000019340), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x51}}, 0x0, 0x0, 0x401, 0x3, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e1e, 0xfffff1eb, @dev={0xfe, 0x80, '\x00', 0x34}, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0xfffffffd, 0x2}, 0x9c) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r6}) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) connect$unix(r0, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x4e25, @private=0xa010100}, 0x10) 644.380392ms ago: executing program 3 (id=5540): close(0xffffffffffffffff) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r0 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 0s ago: executing program 6 (id=5541): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write(r1, &(0x7f0000000100)='\b&', 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) kernel console output (not intermixed with test programs): ialNumber=0 [ 1676.273306][ T5882] usb 7-1: config 0 descriptor?? [ 1676.463598][T24774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1676.479018][ T6150] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1676.628972][ T6150] usb 1-1: Using ep0 maxpacket: 16 [ 1676.635523][ T6150] usb 1-1: config 0 has no interfaces? [ 1676.643133][ T6150] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1676.665726][ T6150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.705780][ T6150] usb 1-1: Product: syz [ 1676.710313][ T6150] usb 1-1: Manufacturer: syz [ 1676.714910][ T6150] usb 1-1: SerialNumber: syz [ 1676.728613][ T6150] usb 1-1: config 0 descriptor?? [ 1676.799401][ T5882] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 1676.828133][ T6150] usb 4-1: USB disconnect, device number 6 [ 1676.958054][ T5882] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1676.966731][ T5882] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -121 [ 1677.160679][ T8791] usb 7-1: USB disconnect, device number 50 [ 1677.378999][ T6150] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1677.544256][ T6150] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1677.610198][ T6150] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1677.622128][ T6150] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1677.635301][ T6150] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1677.644447][ T6150] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1677.653671][ T6150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.663199][ T6150] usb 4-1: config 0 descriptor?? [ 1677.762764][T24790] netlink: 'syz.4.4714': attribute type 4 has an invalid length. [ 1678.110878][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 1678.122197][ T6150] usbhid 4-1:0.0: can't add hid device: -71 [ 1678.128252][ T6150] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1678.144108][ T6150] usb 4-1: USB disconnect, device number 7 [ 1679.348616][ T6150] usb 1-1: USB disconnect, device number 18 [ 1679.709103][ T5840] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1679.868275][T24849] netlink: 'syz.6.4730': attribute type 4 has an invalid length. [ 1679.878666][ T5882] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1679.893601][ T5840] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1679.905998][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.917638][ T5840] usb 4-1: config 0 descriptor?? [ 1680.079063][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 1680.091055][ T5882] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1680.099637][ T5882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.110215][ T5882] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1680.121561][ T5882] usb 1-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 1680.138616][ T5882] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1680.147095][ T5882] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1680.156239][ T5882] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1680.166336][ T5882] usb 1-1: Product: syz [ 1680.172027][ T5882] usb 1-1: Manufacturer: syz [ 1680.176698][ T5882] usb 1-1: SerialNumber: syz [ 1680.186666][ T5882] usb 1-1: config 0 descriptor?? [ 1680.193845][ T5882] ldusb 1-1:0.0: Interrupt in endpoint not found [ 1680.345953][ T5840] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1680.406782][ T8] usb 1-1: USB disconnect, device number 19 [ 1680.546427][ T5840] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1680.556863][ T5840] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 1680.599179][ T5882] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 1680.758369][ T8] usb 4-1: USB disconnect, device number 8 [ 1680.820574][ T5882] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1680.828578][ T5882] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1680.837778][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.845847][ T5882] usb 6-1: Product: syz [ 1680.850063][ T5882] usb 6-1: Manufacturer: syz [ 1680.854654][ T5882] usb 6-1: SerialNumber: syz [ 1680.942033][ T5840] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1681.109017][ T5840] usb 7-1: Using ep0 maxpacket: 32 [ 1681.118994][ T5840] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1681.138512][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.147102][ T5840] usb 7-1: Product: syz [ 1681.151650][ T5840] usb 7-1: Manufacturer: syz [ 1681.156285][ T5840] usb 7-1: SerialNumber: syz [ 1681.167530][ T5840] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1681.397211][T24866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1682.762690][T24881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4740'. [ 1682.794733][T24880] input: syz0 as /devices/virtual/input/input37 [ 1683.430012][ T5882] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 105 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1683.483876][ T5882] usb 6-1: USB disconnect, device number 105 [ 1683.509599][ T5882] usblp0: removed [ 1684.030715][T24893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4743'. [ 1684.377855][ T5840] gspca_stk1135: reg_w 0x352 err -71 [ 1684.384361][ T5840] gspca_stk1135: serial bus timeout: status=0x00 [ 1684.390959][ T5840] gspca_stk1135: Sensor write failed [ 1684.396420][ T5840] gspca_stk1135: serial bus timeout: status=0x00 [ 1684.402974][ T5840] gspca_stk1135: Sensor write failed [ 1684.409026][ T5840] gspca_stk1135: serial bus timeout: status=0x00 [ 1684.415536][ T5840] gspca_stk1135: Sensor read failed [ 1684.421158][ T5840] gspca_stk1135: serial bus timeout: status=0x00 [ 1684.427545][ T5840] gspca_stk1135: Sensor read failed [ 1684.438998][ T5840] gspca_stk1135: Detected sensor type unknown (0x0) [ 1684.447253][ T5840] gspca_stk1135: serial bus timeout: status=0x00 [ 1684.453662][ T5840] gspca_stk1135: Sensor read failed [ 1684.459001][ T5840] gspca_stk1135: serial bus timeout: status=0x00 [ 1684.465330][ T5840] gspca_stk1135: Sensor read failed [ 1684.470623][ T5840] gspca_stk1135: serial bus timeout: status=0x00 [ 1684.477967][ T5840] gspca_stk1135: Sensor write failed [ 1684.483417][ T5840] gspca_stk1135: serial bus timeout: status=0x00 [ 1684.489819][ T5840] gspca_stk1135: Sensor write failed [ 1684.495135][ T5840] stk1135 7-1:64.0: probe with driver stk1135 failed with error -71 [ 1684.516262][ T5840] usb 7-1: USB disconnect, device number 51 [ 1684.783496][T24905] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4745'. [ 1685.110274][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1685.179056][ T6150] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1685.269608][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1685.279945][ T8] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1685.302504][ T8] usb 4-1: config 0 has no interface number 0 [ 1685.330952][ T8] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1685.419508][ T6150] usb 6-1: Using ep0 maxpacket: 32 [ 1685.425033][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.616123][ T8] usb 4-1: Product: syz [ 1685.629006][ T8] usb 4-1: Manufacturer: syz [ 1685.638505][ T8] usb 4-1: SerialNumber: syz [ 1685.684735][ T8] usb 4-1: config 0 descriptor?? [ 1685.689951][ T6150] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1685.699981][ T6150] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1685.716644][ T6150] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1685.728168][ T8] smsc95xx v2.0.0 [ 1685.751269][ T6150] usb 6-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 1685.793393][ T6150] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1685.863819][ T6150] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1685.874751][ T6150] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1685.888314][ T6150] usb 6-1: Product: syz [ 1685.917163][ T6150] usb 6-1: Manufacturer: syz [ 1685.945626][ T6150] usb 6-1: SerialNumber: syz [ 1685.986619][ T6150] usb 6-1: config 0 descriptor?? [ 1685.998091][ T6150] ldusb 6-1:0.0: Interrupt in endpoint not found [ 1686.134316][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1686.148745][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1686.254485][ T5882] usb 6-1: USB disconnect, device number 106 [ 1686.370775][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1686.399833][ T8] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 1686.548334][T24955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4755'. [ 1687.642817][ T8] usb 4-1: USB disconnect, device number 9 [ 1688.910604][T25004] netlink: 'syz.5.4764': attribute type 4 has an invalid length. [ 1688.973296][T25004] netlink: 'syz.5.4764': attribute type 4 has an invalid length. [ 1688.986824][T25009] ptrace attach of "./syz-executor exec"[18705] was attempted by "./syz-executor exec"[25009] [ 1689.369197][ T5881] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1689.573082][ T5881] usb 6-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1689.582350][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.583955][T25018] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4770'. [ 1689.592016][ T5881] usb 6-1: config 0 descriptor?? [ 1689.929029][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1690.089756][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1690.096669][ T8] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1690.105258][ T8] usb 4-1: config 0 has no interface number 0 [ 1690.121378][ T8] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1690.134822][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.153058][ T8] usb 4-1: Product: syz [ 1690.157834][ T8] usb 4-1: Manufacturer: syz [ 1690.167561][ T8] usb 4-1: SerialNumber: syz [ 1690.197124][ T5881] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1690.203753][ T8] usb 4-1: config 0 descriptor?? [ 1690.219044][ T6150] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1690.235070][ T8] smsc95xx v2.0.0 [ 1690.358508][ T5881] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1690.366721][ T5881] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 1690.379118][ T6150] usb 1-1: Using ep0 maxpacket: 32 [ 1690.409067][ T6150] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1690.417238][ T6150] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1690.451191][ T6150] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1690.469556][ T6150] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1690.493164][ T6150] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1690.518099][ T6150] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1690.540736][ T6150] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1690.557638][ T6150] usb 1-1: Product: syz [ 1690.567327][ T6150] usb 1-1: Manufacturer: syz [ 1690.576169][ T6150] usb 1-1: SerialNumber: syz [ 1690.586861][ T6150] usb 1-1: config 0 descriptor?? [ 1690.598334][ T966] usb 6-1: USB disconnect, device number 107 [ 1690.619908][ T6150] ldusb 1-1:0.0: Interrupt in endpoint not found [ 1690.661858][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1690.675014][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1690.841771][ T5881] usb 1-1: USB disconnect, device number 20 [ 1690.909026][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1690.929022][ T8] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 1692.479272][ T6150] usb 4-1: USB disconnect, device number 10 [ 1692.558996][ T8] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1692.708980][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1692.715684][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1692.723284][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1692.734693][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1692.745914][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1692.756837][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1692.764406][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1692.775856][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1692.787068][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1692.797914][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1692.807246][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1692.818858][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1692.830161][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1692.841598][ T8] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1692.850790][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.858859][ T8] usb 5-1: Product: syz [ 1692.863092][ T8] usb 5-1: Manufacturer: syz [ 1692.867784][ T8] usb 5-1: SerialNumber: syz [ 1693.092671][ T8] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1693.121870][T25072] ptrace attach of "./syz-executor exec"[20986] was attempted by "./syz-executor exec"[25072] [ 1693.170356][ T8] usb 5-1: USB disconnect, device number 110 [ 1693.558351][T25077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4784'. [ 1694.239024][ T6150] usb 6-1: new full-speed USB device number 108 using dummy_hcd [ 1694.249030][ T8] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1694.414045][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 1694.421323][ T6150] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1694.442911][ T8] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1694.453850][ T6150] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1694.467474][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1694.657342][ T6150] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1694.680902][ T8] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1694.783108][ T6150] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1694.792882][ T8] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1694.813185][ T6150] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1694.839071][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1694.848647][ T6150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.867177][ T8] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1694.877245][ T8] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1694.886132][ T8] usb 5-1: Product: syz [ 1694.890983][ T6150] usb 6-1: config 0 descriptor?? [ 1694.896925][ T8] usb 5-1: Manufacturer: syz [ 1694.903469][ T8] usb 5-1: SerialNumber: syz [ 1694.920974][ T8] usb 5-1: config 0 descriptor?? [ 1694.928158][ T8] ldusb 5-1:0.0: Interrupt in endpoint not found [ 1695.181692][ T5881] usb 5-1: USB disconnect, device number 111 [ 1695.475776][T25101] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4792'. [ 1695.519214][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1695.527379][ T6150] usbhid 6-1:0.0: can't add hid device: -71 [ 1695.539493][ T6150] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1695.554227][ T6150] usb 6-1: USB disconnect, device number 108 [ 1695.689605][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1695.706729][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.731165][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1695.745323][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.758995][ T8] usb 1-1: Product: syz [ 1695.763196][ T8] usb 1-1: Manufacturer: syz [ 1695.768842][ T8] usb 1-1: SerialNumber: syz [ 1695.786993][ T8] usb 1-1: config 0 descriptor?? [ 1695.808296][T25093] dccp_close: ABORT with 32 bytes unread [ 1696.380910][ T5881] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 1696.487219][T25132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4797'. [ 1696.555175][ T5881] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1696.668446][ T5881] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1696.803919][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.844785][ T5881] usb 6-1: Product: syz [ 1696.856703][ T5881] usb 6-1: Manufacturer: syz [ 1696.867421][ T5881] usb 6-1: SerialNumber: syz [ 1697.321716][T25153] ptrace attach of "./syz-executor exec"[16375] was attempted by "./syz-executor exec"[25153] [ 1698.239030][T25177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4800'. [ 1698.669307][ T8] usb 1-1: USB disconnect, device number 21 [ 1699.129003][ T8] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 1699.160637][ T5881] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 109 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1699.215451][ T5881] usb 6-1: USB disconnect, device number 109 [ 1699.242691][ T5881] usblp0: removed [ 1699.317876][ T8] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1699.327377][ T8] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1699.343277][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.359004][ T8] usb 7-1: Product: syz [ 1699.366536][ T8] usb 7-1: Manufacturer: syz [ 1699.375643][ T8] usb 7-1: SerialNumber: syz [ 1699.969118][ T8791] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1700.120377][ T8791] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1700.128451][ T8791] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1700.138174][ T8791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.146244][ T8791] usb 4-1: Product: syz [ 1700.150649][ T8791] usb 4-1: Manufacturer: syz [ 1700.155274][ T8791] usb 4-1: SerialNumber: syz [ 1700.676663][T25220] netlink: 'syz.5.4812': attribute type 4 has an invalid length. [ 1700.691929][T25220] netlink: 'syz.5.4812': attribute type 4 has an invalid length. [ 1700.776960][ T8791] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1701.048996][ T5881] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1701.079222][ T8791] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1701.219095][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 1701.225549][ T5881] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1701.229106][ T8791] usb 1-1: Using ep0 maxpacket: 16 [ 1701.241515][ T5881] usb 6-1: config 0 has no interface number 0 [ 1701.250849][ T8791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.253275][ T5881] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1701.270564][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.276238][ T8791] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1701.278543][ T5881] usb 6-1: Product: syz [ 1701.278561][ T5881] usb 6-1: Manufacturer: syz [ 1701.278578][ T5881] usb 6-1: SerialNumber: syz [ 1701.292731][ T8791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.300293][ T5881] usb 6-1: config 0 descriptor?? [ 1701.302006][ T8791] usb 1-1: Product: syz [ 1701.312800][ T5881] smsc95xx v2.0.0 [ 1701.319129][ T966] usb 4-1: USB disconnect, device number 11 [ 1701.331809][ T8791] usb 1-1: Manufacturer: syz [ 1701.336490][ T8791] usb 1-1: SerialNumber: syz [ 1701.343557][ T966] usblp0: removed [ 1701.354657][ T8791] usb 1-1: config 0 descriptor?? [ 1701.599008][ T5840] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 1701.716277][ T5881] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1701.727202][ T5881] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1701.762846][ T5840] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1701.772798][ T5840] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1701.781982][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.790358][ T5840] usb 5-1: Product: syz [ 1701.794595][ T5840] usb 5-1: Manufacturer: syz [ 1701.799269][ T5840] usb 5-1: SerialNumber: syz [ 1701.908661][ T8] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1701.929299][ T8] usb 7-1: USB disconnect, device number 52 [ 1701.949548][ T5881] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1701.954352][ T8] usblp0: removed [ 1701.961374][ T5881] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 1702.217502][T25237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4817'. [ 1702.985290][T25246] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4818'. [ 1703.846770][ T966] usb 6-1: USB disconnect, device number 110 [ 1703.917878][ T5882] usb 1-1: USB disconnect, device number 22 [ 1704.382270][ T5840] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 112 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1704.394950][ T5840] usb 5-1: USB disconnect, device number 112 [ 1704.402313][ T5840] usblp0: removed [ 1704.461061][T25276] netlink: 'syz.4.4824': attribute type 4 has an invalid length. [ 1704.474686][T25276] netlink: 'syz.4.4824': attribute type 4 has an invalid length. [ 1705.349270][ T8] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1705.359078][ T966] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1705.500870][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 1705.516754][ T8] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1705.530046][ T966] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1705.539860][ T966] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1705.550433][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1705.571428][ T966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.588839][ T966] usb 1-1: Product: syz [ 1705.595170][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1705.618234][ T966] usb 1-1: Manufacturer: syz [ 1705.625766][ T966] usb 1-1: SerialNumber: syz [ 1705.634874][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1705.677968][ T8] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1705.702541][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1705.723230][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1705.801350][T25320] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4831'. [ 1706.346928][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1706.360257][ T8] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1706.368866][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1706.412403][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1706.480887][ T8] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1706.710788][ T5840] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1706.726270][ T966] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1706.738818][ T8] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1706.756633][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.765453][ T8] usb 6-1: Product: syz [ 1706.769784][ T8] usb 6-1: Manufacturer: syz [ 1706.774383][ T8] usb 6-1: SerialNumber: syz [ 1706.789925][ T5881] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1706.869498][ T5840] usb 5-1: Using ep0 maxpacket: 32 [ 1706.875848][ T5840] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1706.899131][ T5840] usb 5-1: config 0 has no interface number 0 [ 1706.915288][ T5840] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1706.937539][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.945715][ T5840] usb 5-1: Product: syz [ 1706.951672][ T5881] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1706.960893][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.974375][ T5840] usb 5-1: Manufacturer: syz [ 1706.990710][ T5840] usb 5-1: SerialNumber: syz [ 1706.992271][ T8] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1707.008353][ T5881] usb 4-1: config 0 descriptor?? [ 1707.017959][ T5840] usb 5-1: config 0 descriptor?? [ 1707.034391][ T5840] smsc95xx v2.0.0 [ 1707.036427][ T8] usb 6-1: USB disconnect, device number 111 [ 1707.444356][ T5881] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1707.453661][ T5840] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1707.468515][ T5840] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1707.684944][ T5840] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1707.700800][ T5840] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 1707.803628][T25369] netlink: 'syz.5.4836': attribute type 4 has an invalid length. [ 1707.832890][T25369] netlink: 'syz.5.4836': attribute type 4 has an invalid length. [ 1707.857726][ T5881] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1707.867939][ T5881] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1707.878526][ T5881] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 1707.899477][ T5881] usb 4-1: USB disconnect, device number 12 [ 1708.185626][ T5881] usb 1-1: USB disconnect, device number 23 [ 1708.193432][ T5881] usblp0: removed [ 1708.259327][ T5840] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1708.408966][ T5840] usb 6-1: device descriptor read/64, error -71 [ 1708.569071][ T5881] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1708.658996][ T5840] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1708.741351][ T5881] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1708.759792][ T5881] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1708.780026][ T5881] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1708.793239][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1708.800098][ T5840] usb 6-1: device descriptor read/64, error -71 [ 1708.812198][ T5881] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1708.827303][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.848666][ T5881] usb 1-1: config 0 descriptor?? [ 1708.923096][ T5840] usb usb6-port1: attempt power cycle [ 1709.279161][ T5840] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1709.310738][ T5840] usb 6-1: device descriptor read/8, error -71 [ 1709.415511][T25407] ptrace attach of "./syz-executor exec"[19125] was attempted by "./syz-executor exec"[25407] [ 1709.462590][ T5881] usbhid 1-1:0.0: can't add hid device: -71 [ 1709.470604][ T5881] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1709.486225][ T5881] usb 1-1: USB disconnect, device number 24 [ 1709.504382][ T966] usb 5-1: USB disconnect, device number 113 [ 1709.569015][ T5840] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1709.619592][ T5840] usb 6-1: device descriptor read/8, error -71 [ 1709.741770][ T5840] usb usb6-port1: unable to enumerate USB device [ 1710.161713][T25420] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4844'. [ 1710.299070][ T5840] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 1710.515332][ T5840] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1710.557579][ T5840] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1710.616309][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.669262][ T5840] usb 7-1: Product: syz [ 1710.694982][ T5840] usb 7-1: Manufacturer: syz [ 1710.713208][ T5840] usb 7-1: SerialNumber: syz [ 1711.286105][T25441] netlink: 'syz.5.4848': attribute type 4 has an invalid length. [ 1711.298789][T25441] netlink: 'syz.5.4848': attribute type 4 has an invalid length. [ 1712.263847][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1712.428995][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1712.445654][ T8] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1712.465244][ T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1712.476452][ T8] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1712.490208][ T8] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1712.500311][ T8] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1712.514609][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1712.522996][ T8] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1712.539435][ T8] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1712.549695][ T5881] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1712.552525][ T8] usb 4-1: Product: syz [ 1712.562654][ T8] usb 4-1: Manufacturer: syz [ 1712.567614][ T8] usb 4-1: SerialNumber: syz [ 1712.582749][ T8] usb 4-1: config 0 descriptor?? [ 1712.608572][ T8] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1712.635474][ T8] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1712.718999][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 1712.726241][ T5881] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1712.735000][ T5881] usb 5-1: config 0 has no interface number 0 [ 1712.743923][ T5881] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1712.753674][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.762147][ T5881] usb 5-1: Product: syz [ 1712.766598][ T5881] usb 5-1: Manufacturer: syz [ 1712.771714][ T5881] usb 5-1: SerialNumber: syz [ 1712.781546][ T5881] usb 5-1: config 0 descriptor?? [ 1712.791489][ T5881] smsc95xx v2.0.0 [ 1712.802732][T25456] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1712.826434][ T966] usb 4-1: USB disconnect, device number 13 [ 1712.833623][ T966] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1713.084561][ T5840] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1713.123920][ T5840] usb 7-1: USB disconnect, device number 53 [ 1713.142695][ T5840] usblp0: removed [ 1713.197620][ T5881] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1713.225874][ T5881] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1713.443907][ T5881] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1713.461313][ T5881] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 1713.756647][ T5881] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1713.949263][ T5881] usb 1-1: device descriptor read/64, error -71 [ 1714.209271][ T5881] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1714.352784][ T5881] usb 1-1: device descriptor read/64, error -71 [ 1714.500258][ T5881] usb usb1-port1: attempt power cycle [ 1714.551656][T25528] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4861'. [ 1714.858972][ T5881] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1714.889789][ T5881] usb 1-1: device descriptor read/8, error -71 [ 1715.179249][ T5881] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1715.242032][ T5881] usb 1-1: device descriptor read/8, error -71 [ 1715.349306][ T5881] usb usb1-port1: unable to enumerate USB device [ 1715.509274][ T5881] usb 5-1: USB disconnect, device number 114 [ 1716.896172][T25581] ptrace attach of "./syz-executor exec"[20986] was attempted by "./syz-executor exec"[25581] [ 1717.549050][ T966] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1717.679016][ T966] usb 7-1: device descriptor read/64, error -71 [ 1717.983944][ T966] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1718.129026][ T966] usb 7-1: device descriptor read/64, error -71 [ 1718.269236][ T966] usb usb7-port1: attempt power cycle [ 1718.688958][ T966] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1718.720566][ T966] usb 7-1: device descriptor read/8, error -71 [ 1718.989245][ T966] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1719.025526][ T966] usb 7-1: device descriptor read/8, error -71 [ 1719.159304][ T966] usb usb7-port1: unable to enumerate USB device [ 1719.263859][T25630] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4874'. [ 1721.084038][T25679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4883'. [ 1722.221304][T25697] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4884'. [ 1722.334857][T25688] ptrace attach of "./syz-executor exec"[18705] was attempted by "./syz-executor exec"[25688] [ 1723.249104][ T5881] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1723.280687][T25733] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4893'. [ 1723.379190][ T5881] usb 7-1: device descriptor read/64, error -71 [ 1723.619016][ T5881] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1723.809027][ T5881] usb 7-1: device descriptor read/64, error -71 [ 1723.849059][ T6150] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1723.999270][ T5881] usb usb7-port1: attempt power cycle [ 1724.019625][ T6150] usb 5-1: Using ep0 maxpacket: 32 [ 1724.064961][ T6150] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1724.073368][ T6150] usb 5-1: config 0 has no interface number 0 [ 1724.081396][ T6150] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1724.094065][ T6150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.107253][ T6150] usb 5-1: Product: syz [ 1724.117138][ T6150] usb 5-1: Manufacturer: syz [ 1724.131390][ T6150] usb 5-1: SerialNumber: syz [ 1724.151227][ T6150] usb 5-1: config 0 descriptor?? [ 1724.160534][ T6150] smsc95xx v2.0.0 [ 1724.369237][ T5881] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1724.399400][ T5881] usb 7-1: device descriptor read/8, error -71 [ 1724.566439][ T6150] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1724.582159][ T6150] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1724.638976][ T5881] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1724.679928][ T5881] usb 7-1: device descriptor read/8, error -71 [ 1724.790670][ T5881] usb usb7-port1: unable to enumerate USB device [ 1724.793761][ T6150] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1724.820644][ T6150] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 1725.907259][T25819] syz.3.4898 (25819) used greatest stack depth: 20064 bytes left [ 1726.128574][T25835] ptrace attach of "./syz-executor exec"[19125] was attempted by "./syz-executor exec"[25835] [ 1726.348257][T25851] netlink: 892 bytes leftover after parsing attributes in process `syz.3.4905'. [ 1726.572169][ T5840] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1726.738956][ T5840] usb 7-1: Using ep0 maxpacket: 16 [ 1727.117924][ T5840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.150378][ T25] usb 5-1: USB disconnect, device number 115 [ 1727.179092][ T5840] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1727.195878][ T5840] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1727.205318][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.215066][ T5840] usb 7-1: Product: syz [ 1727.220666][ T5840] usb 7-1: Manufacturer: syz [ 1727.226506][ T5840] usb 7-1: SerialNumber: syz [ 1727.251124][ T5840] usb 7-1: config 0 descriptor?? [ 1727.653954][T25880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4908'. [ 1729.289033][ T5840] usb 7-1: USB disconnect, device number 62 [ 1729.425382][T25907] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4914'. [ 1729.744101][T25913] ptrace attach of "./syz-executor exec"[16375] was attempted by "./syz-executor exec"[25913] [ 1729.879317][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.885610][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.329019][ T8] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1730.479003][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 1730.492822][ T8] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1730.549274][ T8] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1730.699136][ T8] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1730.740978][ T8] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1730.779171][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1730.979129][ T8] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1730.988813][ T8] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1730.997846][ T8] usb 6-1: Product: syz [ 1731.002465][ T8] usb 6-1: Manufacturer: syz [ 1731.009050][ T8] usb 6-1: SerialNumber: syz [ 1731.032414][ T8] usb 6-1: config 0 descriptor?? [ 1731.039605][ T8] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1731.049944][ T8] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1731.600807][ T8] usb 6-1: USB disconnect, device number 116 [ 1731.600877][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 1731.616097][T25936] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1731.625810][ T8] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1731.788786][T25945] netlink: 860 bytes leftover after parsing attributes in process `syz.6.4926'. [ 1732.079024][ T8] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 1732.776084][ T8] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1733.026003][ T8] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1733.035476][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.043940][ T8] usb 7-1: Product: syz [ 1733.048080][ T8] usb 7-1: Manufacturer: syz [ 1733.049563][T25955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4929'. [ 1733.086934][ T8] usb 7-1: SerialNumber: syz [ 1733.230084][T25964] ptrace attach of "./syz-executor exec"[19391] was attempted by "./syz-executor exec"[25964] [ 1733.949774][ T8] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 63 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1734.463540][ T8] usb 7-1: USB disconnect, device number 63 [ 1734.477411][ T8] usblp0: removed [ 1734.573088][T25986] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4935'. [ 1735.017098][T26000] netlink: 860 bytes leftover after parsing attributes in process `syz.4.4938'. [ 1735.725157][ T25] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1736.408940][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 1736.420242][ T25] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1736.428351][ T25] usb 1-1: config 0 has no interface number 0 [ 1736.448972][ T5840] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1736.523260][ T25] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1736.532758][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.540883][ T25] usb 1-1: Product: syz [ 1736.545054][ T25] usb 1-1: Manufacturer: syz [ 1736.549763][ T25] usb 1-1: SerialNumber: syz [ 1736.555943][ T25] usb 1-1: config 0 descriptor?? [ 1736.564961][ T25] smsc95xx v2.0.0 [ 1736.598939][ T5840] usb 7-1: Using ep0 maxpacket: 32 [ 1736.605565][ T5840] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1736.620249][ T5840] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1736.649223][ T5840] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1736.661060][ T5840] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1736.760835][ T5840] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1736.775202][ T5840] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1736.784910][ T5840] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1736.985328][ T25] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1737.283983][ T25] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1737.322519][ T5840] usb 7-1: Product: syz [ 1737.326844][ T5840] usb 7-1: Manufacturer: syz [ 1737.331643][ T5840] usb 7-1: SerialNumber: syz [ 1737.343077][T26032] ptrace attach of "./syz-executor exec"[20986] was attempted by "./syz-executor exec"[26032] [ 1737.351908][ T5840] usb 7-1: config 0 descriptor?? [ 1737.360875][ T25] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1737.373040][ T25] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 1737.452171][ T5840] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1737.514949][ T5840] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1737.603222][ T5840] usb 7-1: USB disconnect, device number 64 [ 1737.609218][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 1737.648166][ T5840] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1738.635230][ T8791] usb 1-1: USB disconnect, device number 29 [ 1738.736833][T26083] netlink: 860 bytes leftover after parsing attributes in process `syz.5.4952'. [ 1739.088636][T26096] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4954'. [ 1739.621489][ T8791] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 1739.754000][T26109] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4956'. [ 1739.804091][ T8791] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1739.821468][ T8791] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1739.845116][ T8791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.862976][ T8791] usb 5-1: Product: syz [ 1739.876393][ T8791] usb 5-1: Manufacturer: syz [ 1739.891375][ T8791] usb 5-1: SerialNumber: syz [ 1741.258995][ T5840] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1741.449081][ T5840] usb 7-1: Using ep0 maxpacket: 32 [ 1741.464373][ T5840] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1741.500988][ T5840] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1741.528065][ T5840] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1741.563062][ T5840] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1741.600734][ T5840] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1741.624122][ T5840] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1741.648696][ T5840] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1741.675387][ T5840] usb 7-1: Product: syz [ 1741.688175][ T5840] usb 7-1: Manufacturer: syz [ 1741.708908][ T5840] usb 7-1: SerialNumber: syz [ 1741.724522][ T5840] usb 7-1: config 0 descriptor?? [ 1741.744876][ T5840] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1741.791971][ T5840] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1741.984405][ T5840] usb 7-1: USB disconnect, device number 65 [ 1741.990547][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 1742.069774][ T5840] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1742.416384][ T8791] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 116 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1742.453020][ T8791] usb 5-1: USB disconnect, device number 116 [ 1742.484694][ T8791] usblp0: removed [ 1742.759236][ T8] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1743.035657][T26201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4967'. [ 1743.230349][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 1743.249440][ T8] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1743.265580][ T8] usb 1-1: config 0 has no interface number 0 [ 1743.296571][ T8] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1743.311257][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.399129][ T8] usb 1-1: Product: syz [ 1743.413532][ T8] usb 1-1: Manufacturer: syz [ 1743.420624][ T8] usb 1-1: SerialNumber: syz [ 1743.435319][ T8] usb 1-1: config 0 descriptor?? [ 1743.447197][ T8] smsc95xx v2.0.0 [ 1743.854496][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1743.865675][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1744.081650][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1744.095514][ T8] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 1745.023670][T26237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4974'. [ 1745.200846][T26246] ptrace attach of "./syz-executor exec"[20986] was attempted by "./syz-executor exec"[26246] [ 1745.334995][T26248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4973'. [ 1745.488990][ T8791] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1745.528389][ T5840] usb 1-1: USB disconnect, device number 30 [ 1745.640848][ T8791] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1745.650156][ T8791] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1745.679057][ T8791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.687193][ T8791] usb 4-1: Product: syz [ 1745.691980][ T8791] usb 4-1: Manufacturer: syz [ 1745.696584][ T8791] usb 4-1: SerialNumber: syz [ 1746.079033][ T5840] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1746.403909][ T5840] usb 5-1: Using ep0 maxpacket: 32 [ 1746.412226][ T5840] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1746.421467][ T5840] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1746.443805][ T5840] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1746.457841][ T5840] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1746.524248][ T5840] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1746.541040][ T5840] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1746.553115][ T5840] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1746.562120][ T5840] usb 5-1: Product: syz [ 1746.570800][ T5840] usb 5-1: Manufacturer: syz [ 1746.575527][ T5840] usb 5-1: SerialNumber: syz [ 1746.596789][ T5840] usb 5-1: config 0 descriptor?? [ 1746.613367][ T5840] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1746.635765][ T5840] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1746.769910][T26265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4981'. [ 1746.990072][ T8] usb 5-1: USB disconnect, device number 117 [ 1746.996918][ T8] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1747.368992][ T966] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1747.520614][ T966] usb 6-1: Using ep0 maxpacket: 16 [ 1747.541448][ T966] usb 6-1: config 0 has no interfaces? [ 1747.561612][ T966] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1747.572803][ T966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.596131][ T966] usb 6-1: Product: syz [ 1747.618809][ T966] usb 6-1: Manufacturer: syz [ 1747.671304][ T966] usb 6-1: SerialNumber: syz [ 1747.726508][ T966] usb 6-1: config 0 descriptor?? [ 1748.029774][T26289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4987'. [ 1748.451399][ T8791] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1748.472081][ T8791] usb 4-1: USB disconnect, device number 14 [ 1748.531181][ T8791] usblp0: removed [ 1748.988951][ T8791] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1749.150879][ T8791] usb 4-1: Using ep0 maxpacket: 32 [ 1749.172690][ T8791] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1749.189909][ T8791] usb 4-1: config 0 has no interface number 0 [ 1749.200369][ T8791] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1749.228994][ T8791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.237000][ T8791] usb 4-1: Product: syz [ 1749.241233][ T8791] usb 4-1: Manufacturer: syz [ 1749.245832][ T8791] usb 4-1: SerialNumber: syz [ 1749.254341][ T8791] usb 4-1: config 0 descriptor?? [ 1749.265461][ T8791] smsc95xx v2.0.0 [ 1749.633036][T26315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4993'. [ 1749.678970][ T8791] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1749.926499][ T8791] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1750.168457][ T8791] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1750.179649][ T8791] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 1750.222961][ T5881] usb 6-1: USB disconnect, device number 117 [ 1750.419810][T26329] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4998'. [ 1750.669970][ T5881] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1750.769428][ T5840] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 1750.842987][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 1750.853885][ T5881] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1750.864794][ T5881] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1750.901049][ T5881] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1750.917577][ T5881] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1750.955828][ T5840] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1750.973265][ T5840] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1750.989306][ T5881] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1750.996278][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.014203][ T5840] usb 7-1: Product: syz [ 1751.023102][ T5881] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1751.036189][ T5881] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1751.046867][ T5840] usb 7-1: Manufacturer: syz [ 1751.071288][ T5840] usb 7-1: SerialNumber: syz [ 1751.077705][ T5881] usb 6-1: Product: syz [ 1751.102276][ T5881] usb 6-1: Manufacturer: syz [ 1751.129291][ T5881] usb 6-1: SerialNumber: syz [ 1751.204108][ T5881] usb 6-1: config 0 descriptor?? [ 1751.231628][ T5881] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1751.354979][ T5881] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1751.923455][ T25] usb 4-1: USB disconnect, device number 15 [ 1751.944790][ T5881] usb 6-1: USB disconnect, device number 118 [ 1751.944832][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 1751.956981][T26332] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1751.970815][ T5881] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1752.399109][ T5881] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1752.552634][ T5881] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1752.566718][ T5881] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1752.576348][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.589015][ T5881] usb 4-1: Product: syz [ 1752.593359][ T5881] usb 4-1: Manufacturer: syz [ 1752.598408][ T5881] usb 4-1: SerialNumber: syz [ 1752.975818][T26382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5006'. [ 1753.129024][ T46] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1753.289594][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 1753.295856][ T46] usb 1-1: config 0 has no interfaces? [ 1753.307136][ T46] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1753.316518][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.325924][ T46] usb 1-1: Product: syz [ 1753.331395][ T46] usb 1-1: Manufacturer: syz [ 1753.336069][ T46] usb 1-1: SerialNumber: syz [ 1753.347431][ T46] usb 1-1: config 0 descriptor?? [ 1753.957419][T26390] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5009'. [ 1754.240252][ T5840] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1754.254749][ T5840] usb 7-1: USB disconnect, device number 66 [ 1754.262891][ T5840] usblp0: removed [ 1754.286055][T26396] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5011'. [ 1755.207101][ T5881] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1755.236018][ T5881] usb 4-1: USB disconnect, device number 16 [ 1755.250461][ T5881] usblp0: removed [ 1755.740731][ T8791] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1755.909407][ T8791] usb 5-1: Using ep0 maxpacket: 32 [ 1755.924272][ T8791] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1755.945943][ T8791] usb 5-1: config 0 has no interface number 0 [ 1755.961422][ T8791] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1755.972829][ T46] usb 1-1: USB disconnect, device number 31 [ 1756.001449][ T8791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.029538][ T8791] usb 5-1: Product: syz [ 1756.039324][ T8791] usb 5-1: Manufacturer: syz [ 1756.049300][ T8791] usb 5-1: SerialNumber: syz [ 1756.059174][ T966] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1756.069469][ T8791] usb 5-1: config 0 descriptor?? [ 1756.078292][ T8791] smsc95xx v2.0.0 [ 1756.254229][ T966] usb 7-1: Using ep0 maxpacket: 32 [ 1756.270873][ T966] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1756.289223][ T966] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1756.321684][ T966] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1756.343090][ T966] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1756.349030][ T46] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1756.368934][ T966] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1756.397854][ T966] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1756.417183][ T966] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1756.439609][ T966] usb 7-1: Product: syz [ 1756.443809][ T966] usb 7-1: Manufacturer: syz [ 1756.462757][ T966] usb 7-1: SerialNumber: syz [ 1756.480918][ T966] usb 7-1: config 0 descriptor?? [ 1756.485987][ T8791] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1756.519590][ T8791] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1756.552120][ T46] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1756.577442][ T966] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1756.586307][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1756.600824][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.609315][ T966] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1756.641626][ T46] usb 1-1: Product: syz [ 1756.649190][ T46] usb 1-1: Manufacturer: syz [ 1756.691385][ T46] usb 1-1: SerialNumber: syz [ 1756.810389][ T5882] usb 7-1: USB disconnect, device number 67 [ 1756.816349][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 1756.836116][ T5882] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1757.441719][T26461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5021'. [ 1757.638970][ T8791] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1757.650138][ T8791] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 1758.217822][T26467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5024'. [ 1758.487926][ T8] usb 5-1: USB disconnect, device number 118 [ 1759.054124][ T46] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1759.103911][ T46] usb 1-1: USB disconnect, device number 32 [ 1759.156904][ T46] usblp0: removed [ 1760.580528][T26514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5034'. [ 1761.031018][T26512] ptrace attach of "./syz-executor exec"[16375] was attempted by "./syz-executor exec"[26512] [ 1762.159015][ T46] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1762.169017][ T5840] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1762.309266][ T46] usb 7-1: Using ep0 maxpacket: 32 [ 1762.329463][ T5840] usb 5-1: Using ep0 maxpacket: 16 [ 1762.335687][ T46] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1762.354187][ T46] usb 7-1: config 0 has no interface number 0 [ 1762.369131][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1762.391543][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1762.405725][ T46] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1762.416522][ T5840] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1762.425697][ T5882] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1762.436344][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.444954][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.453339][ T5840] usb 5-1: Product: syz [ 1762.457740][ T46] usb 7-1: Product: syz [ 1762.462358][ T5840] usb 5-1: Manufacturer: syz [ 1762.466970][ T5840] usb 5-1: SerialNumber: syz [ 1762.471646][ T46] usb 7-1: Manufacturer: syz [ 1762.476307][ T46] usb 7-1: SerialNumber: syz [ 1762.482568][ T46] usb 7-1: config 0 descriptor?? [ 1762.489339][ T5840] usb 5-1: config 0 descriptor?? [ 1762.498068][ T46] smsc95xx v2.0.0 [ 1762.503394][ T5840] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1762.610381][ T5882] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1762.618599][ T5882] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1762.628537][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.636844][ T5882] usb 1-1: Product: syz [ 1762.642755][ T5882] usb 1-1: Manufacturer: syz [ 1762.651285][ T5882] usb 1-1: SerialNumber: syz [ 1762.915952][ T46] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1762.926776][ T46] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1763.843566][ T46] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1763.854504][ T46] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 1764.374406][T26563] ptrace attach of "./syz-executor exec"[20986] was attempted by "./syz-executor exec"[26563] [ 1764.488953][ T5881] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1764.643483][ T5881] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1764.657105][ T5881] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1764.667032][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.675375][ T5881] usb 4-1: Product: syz [ 1764.680343][ T5881] usb 4-1: Manufacturer: syz [ 1764.685119][ T5881] usb 4-1: SerialNumber: syz [ 1765.094391][ T5840] usb 7-1: USB disconnect, device number 68 [ 1765.105694][ T8791] usb 5-1: USB disconnect, device number 119 [ 1765.184953][T26572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5049'. [ 1765.205258][ T5882] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1765.229385][ T5882] usb 1-1: USB disconnect, device number 33 [ 1765.266729][ T5882] usblp0: removed [ 1765.688971][ T8791] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1765.870241][ T8791] usb 5-1: Using ep0 maxpacket: 16 [ 1765.876569][ T8791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.934755][ T8791] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1765.947338][ T8791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.978899][ T8791] usb 5-1: Product: syz [ 1765.983172][ T8791] usb 5-1: Manufacturer: syz [ 1765.987769][ T8791] usb 5-1: SerialNumber: syz [ 1766.009246][ T8791] usb 5-1: config 0 descriptor?? [ 1766.919020][ T46] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1767.079164][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 1767.086091][ T46] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1767.094892][ T46] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1767.161092][ T46] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1767.174897][ T46] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1767.192028][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1767.200925][ T46] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1767.216484][ T46] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1767.227169][ T46] usb 1-1: Product: syz [ 1767.235386][ T46] usb 1-1: Manufacturer: syz [ 1767.240115][ T46] usb 1-1: SerialNumber: syz [ 1767.280423][ T46] usb 1-1: config 0 descriptor?? [ 1767.293567][ T46] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1767.311962][ T46] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1767.365122][ T5881] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1767.402940][ T5881] usb 4-1: USB disconnect, device number 17 [ 1767.420353][ T5881] usblp1: removed [ 1767.496864][T26606] ptrace attach of "./syz-executor exec"[19125] was attempted by "./syz-executor exec"[26606] [ 1767.539139][ T46] usb 1-1: USB disconnect, device number 34 [ 1767.539159][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 1767.556529][ T46] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1767.809110][ T8791] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1767.861285][T26612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5060'. [ 1767.999353][ T8791] usb 7-1: Using ep0 maxpacket: 32 [ 1768.057432][ T8791] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1768.179548][ T8791] usb 7-1: config 0 has no interface number 0 [ 1768.221342][ T8791] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1768.230530][ T8791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.238819][ T8791] usb 7-1: Product: syz [ 1768.243151][ T8791] usb 7-1: Manufacturer: syz [ 1768.247744][ T8791] usb 7-1: SerialNumber: syz [ 1768.258496][ T5881] usb 5-1: USB disconnect, device number 120 [ 1768.271980][ T8791] usb 7-1: config 0 descriptor?? [ 1768.282469][ T8791] smsc95xx v2.0.0 [ 1768.449125][ T46] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1768.562309][ T8] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1768.619017][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 1768.632865][ T46] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1768.645346][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1768.671052][ T46] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1768.681438][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.692737][ T46] usb 6-1: Product: syz [ 1768.696978][ T46] usb 6-1: Manufacturer: syz [ 1768.706133][ T46] usb 6-1: SerialNumber: syz [ 1768.720440][ T46] usb 6-1: config 0 descriptor?? [ 1768.725996][ T8791] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1768.728287][ T46] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1768.736796][ T8791] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1768.746963][ T46] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1768.762468][ T5881] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1768.793844][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1768.814784][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1768.831607][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.841704][ T8] usb 4-1: Product: syz [ 1768.845899][ T8] usb 4-1: Manufacturer: syz [ 1768.853850][ T8] usb 4-1: SerialNumber: syz [ 1768.918992][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 1768.925618][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1768.940778][ T5881] usb 1-1: config 0 has no interfaces? [ 1768.948830][ T5881] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1768.958522][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.966895][ T5881] usb 1-1: Product: syz [ 1768.971429][ T5881] usb 1-1: Manufacturer: syz [ 1768.976045][ T5881] usb 1-1: SerialNumber: syz [ 1768.983395][ T5881] usb 1-1: config 0 descriptor?? [ 1769.342183][ T46] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1769.353918][ T46] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1769.373256][ T46] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1769.380383][ T46] em28xx 6-1:0.0: No AC97 audio processor [ 1769.599590][ T8791] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1769.610668][ T8791] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 1770.629156][ T8791] usb 7-1: USB disconnect, device number 69 [ 1770.999080][ T8791] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 1771.699983][ T8] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1771.714758][ T5881] usb 1-1: USB disconnect, device number 35 [ 1771.718236][ T8] usb 4-1: USB disconnect, device number 18 [ 1771.731756][ T8] usblp0: removed [ 1771.759569][ T8791] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1771.767800][ T8791] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1771.799027][ T8791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.829608][ T8791] usb 7-1: Product: syz [ 1771.833794][ T8791] usb 7-1: Manufacturer: syz [ 1771.859141][ T8791] usb 7-1: SerialNumber: syz [ 1771.863082][T26662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5073'. [ 1771.865423][ T966] usb 6-1: USB disconnect, device number 119 [ 1771.879813][ T966] em28xx 6-1:0.0: Disconnecting em28xx [ 1771.914670][ T966] em28xx 6-1:0.0: Freeing device [ 1772.002969][T26665] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5072'. [ 1772.448415][T26672] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5075'. [ 1772.472239][ T8] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1772.639866][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 1772.647089][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.680852][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1772.706096][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.733289][ T8] usb 5-1: Product: syz [ 1772.745763][ T8] usb 5-1: Manufacturer: syz [ 1772.775097][ T8] usb 5-1: SerialNumber: syz [ 1772.790590][ T8] usb 5-1: config 0 descriptor?? [ 1773.683563][ T8791] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1773.714797][ T8791] usb 7-1: USB disconnect, device number 70 [ 1773.750281][ T8791] usblp0: removed [ 1774.559403][ T5881] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1774.719075][ T8791] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1774.769201][ T8] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1774.860827][ T5881] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1774.869596][ T5881] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1774.870761][ T8791] usb 4-1: Using ep0 maxpacket: 16 [ 1774.878629][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.878651][ T5881] usb 1-1: Product: syz [ 1774.878667][ T5881] usb 1-1: Manufacturer: syz [ 1774.878683][ T5881] usb 1-1: SerialNumber: syz [ 1775.384394][ T8791] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1775.398933][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 1775.412153][ T966] usb 5-1: USB disconnect, device number 121 [ 1775.420348][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.441967][ T8] usb 6-1: config 0 has no interfaces? [ 1775.447534][ T8791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1775.475554][ T8] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1775.487008][ T8791] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1775.500485][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.508556][ T8] usb 6-1: Product: syz [ 1775.517679][ T8791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.535888][ T8791] usb 4-1: Product: syz [ 1775.542281][ T8] usb 6-1: Manufacturer: syz [ 1775.546883][ T8] usb 6-1: SerialNumber: syz [ 1775.557944][ T8791] usb 4-1: Manufacturer: syz [ 1775.569092][ T8791] usb 4-1: SerialNumber: syz [ 1775.609129][ T8] usb 6-1: config 0 descriptor?? [ 1775.615021][ T8791] usb 4-1: config 0 descriptor?? [ 1775.653661][ T8791] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1775.675401][ T8791] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1776.256909][ T8791] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1776.264000][ T8791] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1776.274675][ T8791] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1776.282316][ T8791] em28xx 4-1:0.0: No AC97 audio processor [ 1776.573892][T26786] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5088'. [ 1777.199180][ T966] usb 7-1: new full-speed USB device number 71 using dummy_hcd [ 1777.359273][ T5881] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1777.389676][ T5881] usb 1-1: USB disconnect, device number 36 [ 1777.399818][ T5881] usblp0: removed [ 1777.399889][ T966] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1777.422240][ T966] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1777.437546][ T966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.457250][ T966] usb 7-1: Product: syz [ 1777.465180][ T966] usb 7-1: Manufacturer: syz [ 1777.472953][ T966] usb 7-1: SerialNumber: syz [ 1777.512931][ T8791] usb 4-1: USB disconnect, device number 19 [ 1777.519821][ T8791] em28xx 4-1:0.0: Disconnecting em28xx [ 1777.528668][ T8791] em28xx 4-1:0.0: Freeing device [ 1777.715223][ T5840] usb 6-1: USB disconnect, device number 120 [ 1779.359600][T26871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5096'. [ 1779.496975][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5099'. [ 1780.217780][ T6150] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1780.244749][ T966] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1780.264773][ T966] usb 7-1: USB disconnect, device number 71 [ 1780.283518][ T966] usblp0: removed [ 1780.338950][ T8791] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1780.398951][ T6150] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1780.423775][ T6150] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1780.435596][ T6150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.445456][ T6150] usb 4-1: Product: syz [ 1780.451336][ T6150] usb 4-1: Manufacturer: syz [ 1780.456740][ T6150] usb 4-1: SerialNumber: syz [ 1780.499324][ T8791] usb 6-1: Using ep0 maxpacket: 16 [ 1780.511440][ T8791] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1780.610364][ T966] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1780.781776][ T8791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1780.806448][ T8791] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1780.820111][ T8791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.843265][ T8791] usb 6-1: Product: syz [ 1780.855383][ T8791] usb 6-1: Manufacturer: syz [ 1780.866628][ T8791] usb 6-1: SerialNumber: syz [ 1780.877937][ T8791] usb 6-1: config 0 descriptor?? [ 1780.888223][ T8791] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1780.898927][ T8791] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1780.914752][T26895] ptrace attach of "./syz-executor exec"[18705] was attempted by "./syz-executor exec"[26895] [ 1780.929050][ T966] usb 7-1: Using ep0 maxpacket: 32 [ 1780.936116][ T966] usb 7-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 1780.947938][ T966] usb 7-1: config 64 has 0 interfaces, different from the descriptor's value: 1 [ 1780.962449][ T966] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1780.978070][ T966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.986527][ T966] usb 7-1: Product: syz [ 1780.990991][ T966] usb 7-1: Manufacturer: syz [ 1780.995729][ T966] usb 7-1: SerialNumber: syz [ 1781.505097][ T8791] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1781.513090][ T8791] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1781.521063][ T8791] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1781.528784][ T8791] em28xx 6-1:0.0: No AC97 audio processor [ 1782.714478][ T6150] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1782.737928][ T6150] usb 4-1: USB disconnect, device number 20 [ 1782.762269][ T6150] usblp0: removed [ 1782.777169][T26922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5112'. [ 1782.985634][ T966] usb 6-1: USB disconnect, device number 121 [ 1782.992305][ T966] em28xx 6-1:0.0: Disconnecting em28xx [ 1783.001705][ T966] em28xx 6-1:0.0: Freeing device [ 1783.178969][ T6150] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1783.314714][ T5840] usb 7-1: USB disconnect, device number 72 [ 1783.374222][ T6150] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1783.409458][ T6150] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1783.432922][ T6150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.701718][ T6150] usb 4-1: Product: syz [ 1783.709869][ T6150] usb 4-1: Manufacturer: syz [ 1783.722184][ T6150] usb 4-1: SerialNumber: syz [ 1784.318270][T26948] netlink: 'syz.4.5120': attribute type 21 has an invalid length. [ 1784.352635][T26948] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5120'. [ 1784.512430][T26948] netlink: 'syz.4.5120': attribute type 5 has an invalid length. [ 1784.533932][T26951] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5121'. [ 1784.552230][T26948] netlink: 'syz.4.5120': attribute type 6 has an invalid length. [ 1784.560831][T26948] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5120'. [ 1786.069037][ T8791] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1786.077467][ T6150] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1786.128787][ T6150] usb 4-1: USB disconnect, device number 21 [ 1786.198183][ T6150] usblp0: removed [ 1786.221261][ T8791] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1786.268470][ T8791] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1786.317227][T26983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5124'. [ 1786.340873][ T8791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.351848][ T8791] usb 5-1: Product: syz [ 1786.356044][ T8791] usb 5-1: Manufacturer: syz [ 1786.362381][ T8791] usb 5-1: SerialNumber: syz [ 1786.499059][T18239] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1786.600974][T26991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5127'. [ 1786.649741][T18239] usb 6-1: Using ep0 maxpacket: 16 [ 1786.658277][T18239] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1786.706134][T18239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1786.724468][T18239] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1786.762585][T18239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.775572][T18239] usb 6-1: Product: syz [ 1786.781777][T18239] usb 6-1: Manufacturer: syz [ 1786.786459][T18239] usb 6-1: SerialNumber: syz [ 1786.792617][T27000] ptrace attach of "./syz-executor exec"[18705] was attempted by "./syz-executor exec"[27000] [ 1786.814357][T18239] usb 6-1: config 0 descriptor?? [ 1786.833793][T18239] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1786.845108][T18239] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1786.999033][ T5840] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1787.158953][ T5840] usb 4-1: Using ep0 maxpacket: 32 [ 1787.168025][ T5840] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 1787.199821][ T5840] usb 4-1: config 64 has 0 interfaces, different from the descriptor's value: 1 [ 1787.250246][ T5840] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1787.273185][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.291530][ T5840] usb 4-1: Product: syz [ 1787.295720][ T5840] usb 4-1: Manufacturer: syz [ 1787.309432][ T5840] usb 4-1: SerialNumber: syz [ 1787.323991][T27026] netlink: 'syz.6.5132': attribute type 21 has an invalid length. [ 1787.354069][T27026] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5132'. [ 1787.388997][T27026] netlink: 'syz.6.5132': attribute type 5 has an invalid length. [ 1787.397035][T27026] netlink: 'syz.6.5132': attribute type 6 has an invalid length. [ 1787.409629][T27026] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5132'. [ 1787.444476][T18239] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1787.469533][T18239] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1787.489290][T18239] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1787.496277][T18239] em28xx 6-1:0.0: No AC97 audio processor [ 1788.260888][ T8791] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 122 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1788.298005][ T8791] usb 5-1: USB disconnect, device number 122 [ 1788.315709][ T8791] usblp0: removed [ 1788.419021][T18239] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 1789.100026][T18239] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1789.108258][T18239] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1789.117740][T18239] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.128908][T18239] usb 7-1: Product: syz [ 1789.133076][T18239] usb 7-1: Manufacturer: syz [ 1789.137663][T18239] usb 7-1: SerialNumber: syz [ 1789.338756][ T5881] usb 6-1: USB disconnect, device number 122 [ 1789.345381][ T5881] em28xx 6-1:0.0: Disconnecting em28xx [ 1789.357373][ T5881] em28xx 6-1:0.0: Freeing device [ 1789.589982][T27091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5139'. [ 1789.750232][ T966] usb 4-1: USB disconnect, device number 22 [ 1789.972619][T27101] ptrace attach of "./syz-executor exec"[19125] was attempted by "./syz-executor exec"[27101] [ 1790.252218][T27110] netlink: 'syz.4.5143': attribute type 21 has an invalid length. [ 1790.264324][T27110] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5143'. [ 1790.294264][T27110] netlink: 'syz.4.5143': attribute type 5 has an invalid length. [ 1790.317775][T27110] netlink: 'syz.4.5143': attribute type 6 has an invalid length. [ 1790.339514][T27110] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5143'. [ 1790.359022][ T966] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1790.508973][ T966] usb 4-1: Using ep0 maxpacket: 16 [ 1790.515848][ T966] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.541619][ T966] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1790.600916][ T966] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1790.622313][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.654681][ T966] usb 4-1: Product: syz [ 1790.671027][ T966] usb 4-1: Manufacturer: syz [ 1790.685299][ T966] usb 4-1: SerialNumber: syz [ 1790.705065][ T966] usb 4-1: config 0 descriptor?? [ 1791.314973][T18239] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1791.344539][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.354281][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.366038][T18239] usb 7-1: USB disconnect, device number 73 [ 1792.035294][ T966] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 1792.045535][T18239] usblp0: removed [ 1792.224125][ T966] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1792.232713][ T966] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1792.245386][ T966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.263843][ T966] usb 1-1: Product: syz [ 1792.274572][ T966] usb 1-1: Manufacturer: syz [ 1792.284315][ T966] usb 1-1: SerialNumber: syz [ 1792.339212][T18239] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1792.499614][T18239] usb 7-1: Using ep0 maxpacket: 16 [ 1792.507166][T18239] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1792.528022][T18239] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1792.544686][T18239] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1792.558266][T18239] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.566793][T18239] usb 7-1: Product: syz [ 1792.571479][T18239] usb 7-1: Manufacturer: syz [ 1792.576149][T18239] usb 7-1: SerialNumber: syz [ 1792.592581][T18239] usb 7-1: config 0 descriptor?? [ 1792.603628][T18239] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1792.613321][T18239] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1792.996641][T27149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5151'. [ 1793.103797][T27156] ptrace attach of "./syz-executor exec"[19391] was attempted by "./syz-executor exec"[27156] [ 1793.300274][T18239] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1793.315943][T18239] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1793.334060][ T46] usb 4-1: USB disconnect, device number 23 [ 1793.471751][T18239] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1793.484642][T18239] em28xx 7-1:0.0: No AC97 audio processor [ 1794.076853][T27176] netlink: 'syz.5.5157': attribute type 21 has an invalid length. [ 1794.093577][T27176] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5157'. [ 1794.107360][T27176] netlink: 'syz.5.5157': attribute type 5 has an invalid length. [ 1794.116178][T27176] netlink: 'syz.5.5157': attribute type 6 has an invalid length. [ 1794.127977][T27176] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5157'. [ 1794.158932][ T966] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1794.185809][ T966] usb 1-1: USB disconnect, device number 37 [ 1794.210607][ T966] usblp0: removed [ 1794.390880][ T46] usb 7-1: USB disconnect, device number 74 [ 1794.400532][ T46] em28xx 7-1:0.0: Disconnecting em28xx [ 1794.420216][ T46] em28xx 7-1:0.0: Freeing device [ 1794.838931][ T46] usb 7-1: new full-speed USB device number 75 using dummy_hcd [ 1795.530403][ T46] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1795.538723][ T46] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1795.551989][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.567369][ T46] usb 7-1: Product: syz [ 1795.726110][T27192] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5161'. [ 1795.753618][ T46] usb 7-1: Manufacturer: syz [ 1795.941417][ T46] usb 7-1: SerialNumber: syz [ 1796.193492][T27194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5163'. [ 1796.417173][T27201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1797.652340][ T46] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1797.839414][ T46] usb 7-1: USB disconnect, device number 75 [ 1797.851079][ T5881] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 1798.019544][ T46] usblp0: removed [ 1798.160367][ T5881] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1798.168692][ T5881] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1798.178776][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.188606][ T5881] usb 1-1: Product: syz [ 1798.475081][ T5881] usb 1-1: Manufacturer: syz [ 1798.479805][ T5881] usb 1-1: SerialNumber: syz [ 1801.131911][ T5881] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1801.154766][ T5881] usb 1-1: USB disconnect, device number 38 [ 1801.177363][ T5881] usblp0: removed [ 1801.296183][T27278] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5182'. [ 1801.413642][ T5882] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 1801.773992][ T5882] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1801.787012][ T5882] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1801.796498][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.805345][ T5882] usb 7-1: Product: syz [ 1801.809863][ T5882] usb 7-1: Manufacturer: syz [ 1801.814535][ T5882] usb 7-1: SerialNumber: syz [ 1802.450364][T27292] netlink: 'syz.4.5186': attribute type 10 has an invalid length. [ 1802.458266][T27292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5186'. [ 1802.609651][T27298] overlayfs: failed to resolve './file0': -2 [ 1803.815156][T27313] netlink: 'syz.0.5192': attribute type 4 has an invalid length. [ 1804.161520][ T5882] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 76 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1804.246582][T27316] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5195'. [ 1804.247956][ T5882] usb 7-1: USB disconnect, device number 76 [ 1804.263089][ T5882] usblp0: removed [ 1804.797872][ T5882] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 1804.963570][ T5882] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1804.976470][ T5882] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1805.071496][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.205632][ T5882] usb 1-1: Product: syz [ 1805.216212][ T5882] usb 1-1: Manufacturer: syz [ 1805.228884][ T5882] usb 1-1: SerialNumber: syz [ 1805.489131][ T8791] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 1805.640334][ T8791] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1805.653504][ T8791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1805.662610][ T8791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.679113][ T8791] usb 6-1: Product: syz [ 1805.683288][ T8791] usb 6-1: Manufacturer: syz [ 1805.687885][ T8791] usb 6-1: SerialNumber: syz [ 1806.548704][T27361] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1806.563961][T27361] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1806.573882][T27361] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1806.584031][T27361] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1806.601380][T27361] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1806.611360][T27361] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1807.031547][T27360] chnl_net:caif_netlink_parms(): no params data found [ 1807.046568][T27367] netlink: 'syz.3.5211': attribute type 4 has an invalid length. [ 1807.145473][T27360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.158462][T27360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.166303][T27360] bridge_slave_0: entered allmulticast mode [ 1807.187688][T27360] bridge_slave_0: entered promiscuous mode [ 1807.195169][T27360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1807.209089][T27360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.216671][T27360] bridge_slave_1: entered allmulticast mode [ 1807.223942][T27360] bridge_slave_1: entered promiscuous mode [ 1807.265190][T27360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1807.278560][T27360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1807.324940][T27360] team0: Port device team_slave_0 added [ 1807.337695][T27360] team0: Port device team_slave_1 added [ 1807.369554][T27360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1807.376983][T27360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1807.405000][T27360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1807.417524][T27360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1807.424790][T27360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1807.451484][T27360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1807.499745][T27360] hsr_slave_0: entered promiscuous mode [ 1807.506880][T27360] hsr_slave_1: entered promiscuous mode [ 1807.535077][ T5882] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1807.547674][ T5882] usb 1-1: USB disconnect, device number 39 [ 1807.561790][T27360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1807.568806][ T5882] usblp0: removed [ 1807.586024][T27360] Cannot create hsr debugfs directory [ 1808.332614][ T8791] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 123 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1808.363082][ T8791] usb 6-1: USB disconnect, device number 123 [ 1808.375965][ T8791] usblp0: removed [ 1808.666538][ T5838] Bluetooth: hci5: command tx timeout [ 1808.699708][T27406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1809.473332][T27360] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.599753][T27360] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.702499][T27360] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.818291][T27360] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.048604][T27360] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1810.055716][T18239] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1810.076861][T27360] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1810.098346][T27360] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1810.110265][T27360] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1810.188284][T27360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1810.195206][ T5840] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1810.222360][T27360] 8021q: adding VLAN 0 to HW filter on device team0 [ 1810.238820][T10790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.245964][T10790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1810.258484][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.265577][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1810.302618][T18239] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1810.318443][T18239] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1810.471270][T27360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1810.563057][T18239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.648028][T18239] usb 5-1: Product: syz [ 1810.702019][T18239] usb 5-1: Manufacturer: syz [ 1810.755744][T18239] usb 5-1: SerialNumber: syz [ 1810.784615][ T5838] Bluetooth: hci5: command tx timeout [ 1810.813902][ T5840] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1810.830277][ T5840] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1810.839917][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.847928][ T5840] usb 4-1: Product: syz [ 1810.859161][ T5840] usb 4-1: Manufacturer: syz [ 1810.863888][ T5840] usb 4-1: SerialNumber: syz [ 1810.902975][T27442] batadv1: entered promiscuous mode [ 1810.919151][T27442] batadv1: entered allmulticast mode [ 1810.925570][T27442] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1810.964588][T27360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1811.598776][T27360] veth0_vlan: entered promiscuous mode [ 1811.615378][T27360] veth1_vlan: entered promiscuous mode [ 1811.650364][T27360] veth0_macvtap: entered promiscuous mode [ 1811.658561][T27360] veth1_macvtap: entered promiscuous mode [ 1811.678838][T27360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.689601][T27360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.699535][T27360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.710126][T27360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.720027][T27360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.730555][T27360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.740583][T27360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.751015][T27360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.760834][T27360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.771242][T27360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.782264][T27360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1811.791575][T27360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.802110][T27360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.812093][T27360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.822632][T27360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.832489][T27360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.842920][T27360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.852754][T27360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.870318][T27360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.880191][T27360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.890643][T27360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.901423][T27360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1811.966595][T27462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1811.984934][T27360] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.994221][T27360] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.016695][T27360] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.026549][T27360] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.155338][ T2106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.189737][ T2106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.284092][ T6064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.302365][ T6064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.819162][ T5838] Bluetooth: hci5: command tx timeout [ 1812.851378][T18239] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 123 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1812.874662][T18239] usb 5-1: USB disconnect, device number 123 [ 1812.923102][T18239] usblp0: removed [ 1812.977372][ T5840] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1813.020176][ T5840] usb 4-1: USB disconnect, device number 24 [ 1813.046500][ T5840] usblp0: removed [ 1814.535882][T27518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1814.598918][ T5840] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1814.770438][ T5840] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1814.778681][ T5840] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1814.819297][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.827777][ T5840] usb 5-1: Product: syz [ 1814.858210][ T5840] usb 5-1: Manufacturer: syz [ 1814.905943][ T5840] usb 5-1: SerialNumber: syz [ 1814.911046][ T5838] Bluetooth: hci5: command tx timeout [ 1815.909335][T27540] netlink: 'syz.0.5264': attribute type 10 has an invalid length. [ 1815.917619][T27540] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5264'. [ 1815.935112][T27540] team0: entered promiscuous mode [ 1815.944765][T27540] team_slave_0: entered promiscuous mode [ 1815.957693][T27540] team_slave_1: entered promiscuous mode [ 1815.965239][T27540] team0: entered allmulticast mode [ 1815.967031][T27544] overlayfs: missing 'workdir' [ 1815.983766][T27540] team_slave_0: entered allmulticast mode [ 1816.009008][T27540] team_slave_1: entered allmulticast mode [ 1816.015275][T27540] bridge0: port 4(team0) entered blocking state [ 1816.028217][T27540] bridge0: port 4(team0) entered disabled state [ 1816.043261][T27540] bridge0: port 4(team0) entered blocking state [ 1816.049561][T27540] bridge0: port 4(team0) entered forwarding state [ 1816.888651][ T29] audit: type=1400 audit(1732384519.371:1261): avc: denied { write } for pid=27559 comm="syz.3.5270" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1817.224497][T27570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1817.334488][ T5840] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 124 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1817.386557][ T5840] usb 5-1: USB disconnect, device number 124 [ 1817.447018][ T5840] usblp0: removed [ 1817.637977][T27572] input: syz0 as /devices/virtual/input/input38 [ 1818.909908][T27586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1819.594516][T27607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5278'. [ 1820.283805][T27621] binder: 27620:27621 ioctl c0306201 20000c80 returned -14 [ 1820.405995][T27627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1820.509272][ T29] audit: type=1326 audit(1732384523.001:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27629 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa946f7e819 code=0x7ffc0000 [ 1820.532727][ C1] vkms_vblank_simulate: vblank timer overrun [ 1820.570946][ T29] audit: type=1326 audit(1732384523.021:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27629 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa946f7e819 code=0x7ffc0000 [ 1820.649005][T18239] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1820.703185][ T29] audit: type=1326 audit(1732384523.031:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27629 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa946f7e819 code=0x7ffc0000 [ 1820.729042][ T29] audit: type=1326 audit(1732384523.031:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27629 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa946f7e819 code=0x7ffc0000 [ 1820.752480][ C1] vkms_vblank_simulate: vblank timer overrun [ 1820.794546][ T29] audit: type=1326 audit(1732384523.031:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27629 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa946f7e819 code=0x7ffc0000 [ 1820.848935][T18239] usb 1-1: Using ep0 maxpacket: 32 [ 1820.869431][T18239] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1820.881353][T18239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.921846][T18239] usb 1-1: Product: syz [ 1820.943443][T18239] usb 1-1: Manufacturer: syz [ 1820.951930][ T29] audit: type=1326 audit(1732384523.031:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27629 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa946f7e819 code=0x7ffc0000 [ 1820.998386][T18239] usb 1-1: SerialNumber: syz [ 1821.034406][T18239] usb 1-1: config 0 descriptor?? [ 1821.107424][ T29] audit: type=1326 audit(1732384523.031:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27629 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa946f7e819 code=0x7ffc0000 [ 1821.240903][ T29] audit: type=1326 audit(1732384523.031:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27629 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa946f7e819 code=0x7ffc0000 [ 1821.293814][T27648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1821.337336][T18239] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 040 [ 1821.350487][ T29] audit: type=1326 audit(1732384523.031:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27629 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa946f7e819 code=0x7ffc0000 [ 1821.567377][T18239] usb 1-1: USB disconnect, device number 40 [ 1821.780842][T27653] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(164184002088630) <= P.seqno(0) <= S.SWH(164184002088704)) and (P.ackno exists or LAWL(271037934127911) <= P.ackno(271037934127912) <= S.AWH(271037934127912), sending SYNC... [ 1822.141785][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1822.141800][ T29] audit: type=1400 audit(1732384524.631:1286): avc: denied { write } for pid=27658 comm="syz.0.5304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1822.647439][T27674] input: syz0 as /devices/virtual/input/input39 [ 1823.010119][T27684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1823.105571][T27689] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5314'. [ 1824.035140][T27703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5319'. [ 1826.566342][T27758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1826.568238][T27755] overlayfs: missing 'workdir' [ 1827.361408][T27764] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5341'. [ 1827.598939][ T6150] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1827.657298][T27778] netlink: 572 bytes leftover after parsing attributes in process `syz.3.5347'. [ 1827.760200][ T6150] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1827.788552][ T6150] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1827.808732][ T6150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.833966][ T6150] usb 1-1: Product: syz [ 1827.860171][ T6150] usb 1-1: Manufacturer: syz [ 1827.893994][ T6150] usb 1-1: SerialNumber: syz [ 1828.183283][T27789] overlayfs: missing 'workdir' [ 1828.544631][ T6150] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1829.052124][T27811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1829.539062][ T8791] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1829.615844][T27824] ptrace attach of "./syz-executor exec"[19125] was attempted by "./syz-executor exec"[27824] [ 1829.709407][ T8791] usb 7-1: Using ep0 maxpacket: 16 [ 1829.717365][ T8791] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1829.743134][ T8791] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1829.765765][ T8791] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1829.794188][ T8791] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1829.826595][ T8791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.856619][ T8791] usb 7-1: config 0 descriptor?? [ 1830.156972][T27834] binder_alloc: 27833: binder_alloc_buf, no vma [ 1830.195876][T27834] binder: 27833:27834 ioctl c0306201 20000c80 returned -14 [ 1830.324549][ T8791] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5013.0013/input/input40 [ 1830.375414][ T5840] usb 1-1: USB disconnect, device number 41 [ 1830.393399][ T5840] usblp0: removed [ 1830.502672][ T8791] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5013.0013/input/input41 [ 1830.537229][T27844] netlink: 'syz.5.5372': attribute type 21 has an invalid length. [ 1830.555535][T27844] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5372'. [ 1830.567240][T27844] netlink: 'syz.5.5372': attribute type 5 has an invalid length. [ 1830.575302][T27844] netlink: 'syz.5.5372': attribute type 6 has an invalid length. [ 1830.583384][T27844] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5372'. [ 1830.591193][ T8791] kye 0003:0458:5013.0013: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.6-1/input0 [ 1830.618696][T27849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5374'. [ 1830.634664][T27849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5374'. [ 1830.639415][ T8791] usb 7-1: USB disconnect, device number 77 [ 1830.789277][ T5840] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1830.974763][ T5840] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1830.989184][ T5840] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1831.032406][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.080837][ T5840] usb 1-1: Product: syz [ 1831.106753][ T5840] usb 1-1: Manufacturer: syz [ 1831.194222][ T5840] usb 1-1: SerialNumber: syz [ 1831.371693][T27856] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5378'. [ 1832.184976][T27882] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5388'. [ 1832.185431][T27880] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5390'. [ 1832.295833][T27885] ptrace attach of "./syz-executor exec"[27360] was attempted by "./syz-executor exec"[27885] [ 1832.456426][T27891] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5391'. [ 1832.475265][T27891] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5391'. [ 1833.470361][ T5840] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1833.501116][ T5840] usb 1-1: USB disconnect, device number 42 [ 1833.524711][ T5840] usblp0: removed [ 1833.593757][T27922] ptrace attach of "./syz-executor exec"[20986] was attempted by "./syz-executor exec"[27922] [ 1834.238232][T27938] binder_alloc: 27937: binder_alloc_buf, no vma [ 1834.251647][T27938] binder: 27937:27938 ioctl c0306201 20000c80 returned -14 [ 1834.548530][T27944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5414'. [ 1834.568116][T27944] team_slave_0: entered promiscuous mode [ 1834.574261][T27944] team_slave_1: entered promiscuous mode [ 1834.642087][T27944] macvtap1: entered promiscuous mode [ 1834.658985][T27944] team0: entered promiscuous mode [ 1834.684968][T27944] macvtap1: entered allmulticast mode [ 1834.711360][T27944] team0: entered allmulticast mode [ 1834.723940][T27944] team_slave_0: entered allmulticast mode [ 1834.735924][T27944] team_slave_1: entered allmulticast mode [ 1834.749681][T27944] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1834.773307][T27955] binder: 27954:27955 ioctl c0306201 20000c80 returned -14 [ 1834.814084][T27951] team0: left allmulticast mode [ 1834.819481][T27951] team_slave_0: left allmulticast mode [ 1834.838967][T27951] team_slave_1: left allmulticast mode [ 1834.879062][T27951] team0: left promiscuous mode [ 1834.895772][T27951] team_slave_0: left promiscuous mode [ 1834.901779][T27951] team_slave_1: left promiscuous mode [ 1835.398205][T27966] netlink: 'syz.5.5423': attribute type 4 has an invalid length. [ 1835.598147][T27972] binder_alloc: 27971: binder_alloc_buf, no vma [ 1835.626875][T27972] binder: 27971:27972 ioctl c0306201 20000c80 returned -14 [ 1835.807279][T27982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1836.019027][ T5840] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1836.143848][T27984] fuse: Bad value for 'fd' [ 1836.254643][ T5840] usb 4-1: Using ep0 maxpacket: 32 [ 1836.279648][ T5840] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1836.289720][ T5840] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1836.300785][ T5840] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1836.314012][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1836.320800][ T5840] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1836.329939][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.790163][ T5840] usb 4-1: config 0 descriptor?? [ 1837.023963][T27997] __nla_validate_parse: 1 callbacks suppressed [ 1837.023981][T27997] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5436'. [ 1837.774076][T28014] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5442'. [ 1838.636265][T28020] netlink: 'syz.5.5443': attribute type 4 has an invalid length. [ 1838.912673][ T5840] usbhid 4-1:0.0: can't add hid device: -71 [ 1838.919403][ T5840] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1838.930805][ T5840] usb 4-1: USB disconnect, device number 25 [ 1840.298273][T28076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1840.388969][ T46] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1840.558948][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 1840.565135][ T46] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1840.578905][ T46] usb 1-1: config 0 has no interface number 0 [ 1840.588678][ T46] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1840.616163][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.630785][ T46] usb 1-1: Product: syz [ 1840.635016][ T46] usb 1-1: Manufacturer: syz [ 1840.642924][ T46] usb 1-1: SerialNumber: syz [ 1840.655811][ T46] usb 1-1: config 0 descriptor?? [ 1840.662476][ T46] smsc95xx v2.0.0 [ 1840.768783][T28086] binder: 28084:28086 ioctl c0306201 20000c80 returned -14 [ 1841.083793][ T46] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1841.668922][ T46] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1842.467819][ T46] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1842.508460][ T46] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 1842.605187][ T29] audit: type=1400 audit(1732384545.081:1287): avc: denied { write } for pid=46 comm="kworker/1:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=92546 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1842.629777][ C1] vkms_vblank_simulate: vblank timer overrun [ 1843.446409][T28167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1843.761503][ T8791] usb 1-1: USB disconnect, device number 43 [ 1845.026290][T28200] input: syz0 as /devices/virtual/input/input43 [ 1845.689434][T28225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1845.713096][ T5838] block nbd0: Receive control failed (result -107) [ 1845.779202][T28228] nbd0: detected capacity change from 0 to 20 [ 1845.787145][T24071] block nbd0: Dead connection, failed to find a fallback [ 1845.797051][T24071] block nbd0: shutting down sockets [ 1845.815683][T24071] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1845.868169][T24071] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1845.885603][T24071] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1845.904833][T24071] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1845.923821][T24071] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1845.972203][T24071] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1845.997403][T24071] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1846.036503][T24071] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1846.075671][T24071] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1846.136255][T24071] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1846.184556][T24071] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1846.232621][T24071] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1846.261169][T24071] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1846.310566][T24071] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1846.362469][T24071] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1846.412471][T24071] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1846.429108][T24071] ldm_validate_partition_table(): Disk read failed. [ 1846.436268][T24071] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1846.445766][T24071] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1846.453731][T24071] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1846.463226][T24071] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1846.471409][T24071] Dev nbd0: unable to read RDB block 0 [ 1846.477528][T24071] nbd0: unable to read partition table [ 1846.483520][T24071] nbd0: partition table beyond EOD, truncated [ 1846.494964][T28228] ldm_validate_partition_table(): Disk read failed. [ 1846.515510][T28228] Dev nbd0: unable to read RDB block 0 [ 1846.521738][T28228] nbd0: unable to read partition table [ 1846.527791][T28228] nbd0: partition table beyond EOD, truncated [ 1846.542672][T24071] ldm_validate_partition_table(): Disk read failed. [ 1846.555257][T28228] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1846.570865][T24071] Dev nbd0: unable to read RDB block 0 [ 1846.577170][T28228] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=9, location=9 [ 1846.589751][T24071] nbd0: unable to read partition table [ 1846.595407][T24071] nbd0: partition table beyond EOD, truncated [ 1846.617421][T28228] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8, location=8 [ 1846.642504][T28228] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=7, location=7 [ 1846.657485][T28228] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1846.682747][T28228] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1846.700354][T28228] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=4, location=4 [ 1846.716060][T28228] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=3, location=3 [ 1846.725637][T28228] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2, location=2 [ 1846.735123][T28228] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1846.745569][T28228] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1846.788438][T28228] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1 [ 1846.804759][T28228] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 1846.834722][T28228] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1846.844807][T28228] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1847.333961][T28262] binder: BINDER_SET_CONTEXT_MGR already set [ 1847.352565][T28262] binder: 28259:28262 ioctl 4018620d 20000040 returned -16 [ 1847.379912][T28262] binder: 28259:28262 ioctl c0306201 20000c80 returned -14 [ 1847.720461][T28273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5518'. [ 1848.218996][ T5840] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1848.730040][ T5840] usb 1-1: config 0 has an invalid interface number: 189 but max is 0 [ 1848.762176][ T5840] usb 1-1: config 0 has no interface number 0 [ 1848.911733][ T5840] usb 1-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1849.001924][ T5840] usb 1-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1849.027377][ T5840] usb 1-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 1849.051308][ T5840] usb 1-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1849.223519][ T5840] usb 1-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1849.224949][T28288] netlink: 'syz.4.5525': attribute type 10 has an invalid length. [ 1849.280336][T28289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1849.290155][T28288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5525'. [ 1849.290823][ T5840] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1849.323884][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.339217][T28288] overlayfs: missing 'workdir' [ 1849.352889][ T5840] usb 1-1: Product: syz [ 1849.361367][ T5840] usb 1-1: Manufacturer: syz [ 1849.381623][ T5840] usb 1-1: SerialNumber: syz [ 1849.426606][ T5840] usb 1-1: config 0 descriptor?? [ 1849.456186][T28263] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1849.475688][ T5840] ums-alauda 1-1:0.189: USB Mass Storage device detected [ 1849.555620][ T5840] scsi host1: usb-storage 1-1:0.189 [ 1850.247728][T28308] netlink: 324 bytes leftover after parsing attributes in process `syz.4.5530'. [ 1851.049154][ T4309] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 1851.065087][ T4309] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 1851.073081][ T29] audit: type=1400 audit(1732384553.551:1288): avc: denied { ioctl } for pid=28260 comm="syz.0.5517" path="socket:[92825]" dev="sockfs" ino=92825 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1851.244580][T28320] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5535'. [ 1851.354100][ T4309] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 1851.375377][ T4309] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 1851.405820][ T5882] usb 1-1: USB disconnect, device number 44 [ 1851.425585][ T12] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 1851.439529][T17945] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 1851.495070][T17945] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 1851.585840][T17945] sd 1:0:0:1: [sdc] Sense not available. [ 1851.627604][ T12] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 1851.755177][T17945] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 1851.928432][T17945] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 1851.956827][T17945] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 1851.964468][T17945] sd 1:0:0:1: [sdc] Asking for cache data failed [ 1851.973423][T17945] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 1852.050367][T17945] [ 1852.052718][T17945] ====================================================== [ 1852.059728][T17945] WARNING: possible circular locking dependency detected [ 1852.066736][T17945] 6.12.0-syzkaller-08446-g228a1157fb9f #0 Not tainted [ 1852.073491][T17945] ------------------------------------------------------ [ 1852.080498][T17945] kworker/u8:0/17945 is trying to acquire lock: [ 1852.086726][T17945] ffff88802870d758 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_mq_init_sched+0x42b/0x640 [ 1852.096320][T17945] [ 1852.096320][T17945] but task is already holding lock: [ 1852.103677][T17945] ffff88802870cf20 (&q->q_usage_counter(queue)#54){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 1852.114213][T17945] [ 1852.114213][T17945] which lock already depends on the new lock. [ 1852.114213][T17945] [ 1852.124607][T17945] [ 1852.124607][T17945] the existing dependency chain (in reverse order) is: [ 1852.133614][T17945] [ 1852.133614][T17945] -> #5 (&q->q_usage_counter(queue)#54){++++}-{0:0}: [ 1852.142469][T17945] blk_queue_enter+0x50f/0x640 [ 1852.147725][T17945] blk_mq_alloc_request+0x59b/0x950 [ 1852.153416][T17945] scsi_execute_cmd+0x1eb/0xf40 [ 1852.158757][T17945] read_capacity_10+0x1d4/0x6d0 [ 1852.164108][T17945] sd_revalidate_disk.isra.0+0x3145/0xa8d0 [ 1852.170414][T17945] sd_probe+0x904/0x1000 [ 1852.175152][T17945] really_probe+0x23e/0xa90 [ 1852.180169][T17945] __driver_probe_device+0x1de/0x440 [ 1852.185974][T17945] driver_probe_device+0x4c/0x1b0 [ 1852.191518][T17945] __device_attach_driver+0x1df/0x310 [ 1852.197408][T17945] bus_for_each_drv+0x157/0x1e0 [ 1852.202782][T17945] __device_attach_async_helper+0x1d3/0x290 [ 1852.209193][T17945] async_run_entry_fn+0x9c/0x530 [ 1852.214648][T17945] process_one_work+0x9c5/0x1ba0 [ 1852.220102][T17945] worker_thread+0x6c8/0xf00 [ 1852.225203][T17945] kthread+0x2c1/0x3a0 [ 1852.229789][T17945] ret_from_fork+0x45/0x80 [ 1852.234720][T17945] ret_from_fork_asm+0x1a/0x30 [ 1852.240005][T17945] [ 1852.240005][T17945] -> #4 (&q->limits_lock){+.+.}-{4:4}: [ 1852.247646][T17945] __mutex_lock+0x19b/0xa60 [ 1852.252668][T17945] __nbd_set_size+0x2c0/0x730 [ 1852.257867][T17945] nbd_start_device+0x8fd/0xd70 [ 1852.263231][T17945] nbd_ioctl+0x21a/0xfd0 [ 1852.267984][T17945] blkdev_ioctl+0x276/0x6d0 [ 1852.273002][T17945] __x64_sys_ioctl+0x190/0x200 [ 1852.278284][T17945] do_syscall_64+0xcd/0x250 [ 1852.283305][T17945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.289719][T17945] [ 1852.289719][T17945] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1852.298365][T17945] blk_mq_submit_bio+0x1fb6/0x24c0 [ 1852.304000][T17945] __submit_bio+0x384/0x540 [ 1852.309014][T17945] submit_bio_noacct_nocheck+0x698/0xd70 [ 1852.315157][T17945] submit_bio_noacct+0x93a/0x1e20 [ 1852.320695][T17945] block_read_full_folio+0x812/0xa50 [ 1852.326501][T17945] filemap_read_folio+0xc6/0x2a0 [ 1852.331951][T17945] filemap_get_pages+0x155f/0x1be0 [ 1852.337573][T17945] filemap_read+0x3ca/0xd70 [ 1852.342590][T17945] blkdev_read_iter+0x187/0x480 [ 1852.347955][T17945] vfs_read+0x87f/0xbe0 [ 1852.352630][T17945] ksys_read+0x12b/0x250 [ 1852.357389][T17945] do_syscall_64+0xcd/0x250 [ 1852.362408][T17945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.368820][T17945] [ 1852.368820][T17945] -> #2 (mapping.invalidate_lock#2){++++}-{4:4}: [ 1852.377332][T17945] down_read+0x9a/0x330 [ 1852.382007][T17945] page_cache_ra_unbounded+0x173/0x6c0 [ 1852.387984][T17945] page_cache_ra_order+0x7d9/0xc90 [ 1852.393617][T17945] filemap_fault+0x1a8a/0x2820 [ 1852.398895][T17945] __do_fault+0x10a/0x490 [ 1852.403737][T17945] do_pte_missing+0xec5/0x3e70 [ 1852.409015][T17945] __handle_mm_fault+0x100a/0x2a10 [ 1852.414642][T17945] handle_mm_fault+0x3fa/0xaa0 [ 1852.419920][T17945] __get_user_pages+0x8d9/0x3b50 [ 1852.425372][T17945] get_user_pages_unlocked+0x1c2/0x780 [ 1852.431350][T17945] hva_to_pfn+0x2da/0xea0 [ 1852.436199][T17945] __gfn_to_pfn_memslot+0x23f/0x570 [ 1852.441921][T17945] kvm_faultin_pfn+0x486/0x1d90 [ 1852.447288][T17945] kvm_tdp_page_fault+0x182/0x350 [ 1852.452833][T17945] kvm_mmu_do_page_fault+0x59f/0x6a0 [ 1852.458635][T17945] kvm_mmu_page_fault+0x214/0x1b40 [ 1852.464261][T17945] handle_ept_violation+0x1f1/0x510 [ 1852.469978][T17945] vmx_handle_exit+0x733/0x1ed0 [ 1852.475344][T17945] vcpu_run+0x3035/0x4f90 [ 1852.480191][T17945] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 1852.486254][T17945] kvm_vcpu_ioctl+0x6c7/0x1520 [ 1852.491527][T17945] __x64_sys_ioctl+0x190/0x200 [ 1852.496809][T17945] do_syscall_64+0xcd/0x250 [ 1852.501831][T17945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.508252][T17945] [ 1852.508252][T17945] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 1852.515811][T17945] __might_fault+0x11b/0x190 [ 1852.520920][T17945] _copy_from_user+0x29/0xd0 [ 1852.526023][T17945] __blk_trace_setup+0xa8/0x180 [ 1852.531394][T17945] blk_trace_ioctl+0x163/0x290 [ 1852.532712][T28353] binder: 28352:28353 ioctl c0306201 20000c80 returned -14 [ 1852.536667][T17945] blkdev_ioctl+0x109/0x6d0 [ 1852.536687][T17945] __x64_sys_ioctl+0x190/0x200 [ 1852.536705][T17945] do_syscall_64+0xcd/0x250 [ 1852.559133][T17945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.565547][T17945] [ 1852.565547][T17945] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1852.573362][T17945] __lock_acquire+0x249e/0x3c40 [ 1852.578729][T17945] lock_acquire.part.0+0x11b/0x380 [ 1852.584359][T17945] __mutex_lock+0x19b/0xa60 [ 1852.589384][T17945] blk_mq_init_sched+0x42b/0x640 [ 1852.594846][T17945] elevator_init_mq+0x2cd/0x420 [ 1852.600207][T17945] add_disk_fwnode+0x113/0x1300 [ 1852.605549][T17945] sd_probe+0xa86/0x1000 [ 1852.610285][T17945] really_probe+0x23e/0xa90 [ 1852.615279][T17945] __driver_probe_device+0x1de/0x440 [ 1852.621058][T17945] driver_probe_device+0x4c/0x1b0 [ 1852.626575][T17945] __device_attach_driver+0x1df/0x310 [ 1852.632435][T17945] bus_for_each_drv+0x157/0x1e0 [ 1852.637778][T17945] __device_attach_async_helper+0x1d3/0x290 [ 1852.644163][T17945] async_run_entry_fn+0x9c/0x530 [ 1852.649592][T17945] process_one_work+0x9c5/0x1ba0 [ 1852.655021][T17945] worker_thread+0x6c8/0xf00 [ 1852.660101][T17945] kthread+0x2c1/0x3a0 [ 1852.664661][T17945] ret_from_fork+0x45/0x80 [ 1852.669573][T17945] ret_from_fork_asm+0x1a/0x30 [ 1852.674851][T17945] [ 1852.674851][T17945] other info that might help us debug this: [ 1852.674851][T17945] [ 1852.685053][T17945] Chain exists of: [ 1852.685053][T17945] &q->debugfs_mutex --> &q->limits_lock --> &q->q_usage_counter(queue)#54 [ 1852.685053][T17945] [ 1852.699453][T17945] Possible unsafe locking scenario: [ 1852.699453][T17945] [ 1852.706868][T17945] CPU0 CPU1 [ 1852.712200][T17945] ---- ---- [ 1852.717534][T17945] lock(&q->q_usage_counter(queue)#54); [ 1852.723137][T17945] lock(&q->limits_lock); [ 1852.730040][T17945] lock(&q->q_usage_counter(queue)#54); [ 1852.738162][T17945] lock(&q->debugfs_mutex); [ 1852.742731][T17945] [ 1852.742731][T17945] *** DEADLOCK *** [ 1852.742731][T17945] [ 1852.750858][T17945] 4 locks held by kworker/u8:0/17945: [ 1852.756213][T17945] #0: ffff88801beee948 ((wq_completion)async){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1852.766562][T17945] #1: ffffc90005927d80 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1852.777777][T17945] #2: ffff88805b570378 (&dev->mutex){....}-{4:4}, at: __device_attach_async_helper+0x84/0x290 [ 1852.788129][T17945] #3: ffff88802870cf20 (&q->q_usage_counter(queue)#54){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 1852.799095][T17945] [ 1852.799095][T17945] stack backtrace: [ 1852.804967][T17945] CPU: 0 UID: 0 PID: 17945 Comm: kworker/u8:0 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 1852.815543][T17945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1852.819159][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.825565][T17945] Workqueue: async async_run_entry_fn [ 1852.825590][T17945] Call Trace: [ 1852.825596][T17945] [ 1852.825604][T17945] dump_stack_lvl+0x116/0x1f0 [ 1852.831896][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1852.837139][T17945] print_circular_bug+0x419/0x5d0 [ 1852.859142][T17945] check_noncircular+0x31a/0x400 [ 1852.864052][T17945] ? __pfx_check_noncircular+0x10/0x10 [ 1852.869498][T17945] ? lockdep_lock+0xc6/0x200 [ 1852.874058][T17945] ? __pfx_lockdep_lock+0x10/0x10 [ 1852.879055][T17945] __lock_acquire+0x249e/0x3c40 [ 1852.883875][T17945] ? __pfx___lock_acquire+0x10/0x10 [ 1852.889053][T17945] lock_acquire.part.0+0x11b/0x380 [ 1852.894151][T17945] ? blk_mq_init_sched+0x42b/0x640 [ 1852.899240][T17945] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1852.904844][T17945] ? rcu_is_watching+0x12/0xc0 [ 1852.909583][T17945] ? trace_lock_acquire+0x146/0x1e0 [ 1852.914757][T17945] ? blk_mq_init_sched+0x42b/0x640 [ 1852.919844][T17945] ? lock_acquire+0x2f/0xb0 [ 1852.924316][T17945] ? blk_mq_init_sched+0x42b/0x640 [ 1852.929406][T17945] __mutex_lock+0x19b/0xa60 [ 1852.933891][T17945] ? blk_mq_init_sched+0x42b/0x640 [ 1852.938979][T17945] ? blk_mq_init_sched+0x42b/0x640 [ 1852.944062][T17945] ? __pfx___mutex_lock+0x10/0x10 [ 1852.949061][T17945] ? blk_queue_flag_set+0x29/0x40 [ 1852.954058][T17945] ? blk_mq_init_sched+0x42b/0x640 [ 1852.959140][T17945] blk_mq_init_sched+0x42b/0x640 [ 1852.964059][T17945] ? __pfx_blk_mq_init_sched+0x10/0x10 [ 1852.969496][T17945] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 1852.975446][T17945] ? lock_acquire+0x2f/0xb0 [ 1852.979918][T17945] ? add_disk_fwnode+0x113/0x1300 [ 1852.984914][T17945] elevator_init_mq+0x2cd/0x420 [ 1852.989734][T17945] ? add_disk_fwnode+0x113/0x1300 [ 1852.994731][T17945] add_disk_fwnode+0x113/0x1300 [ 1852.999562][T17945] ? _raw_spin_unlock_irq+0x23/0x50 [ 1853.004754][T17945] sd_probe+0xa86/0x1000 [ 1853.008972][T17945] ? __pfx_sd_probe+0x10/0x10 [ 1853.013624][T17945] really_probe+0x23e/0xa90 [ 1853.018097][T17945] __driver_probe_device+0x1de/0x440 [ 1853.023352][T17945] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1853.029128][T17945] driver_probe_device+0x4c/0x1b0 [ 1853.034122][T17945] __device_attach_driver+0x1df/0x310 [ 1853.039464][T17945] ? __pfx___device_attach_driver+0x10/0x10 [ 1853.045425][T17945] bus_for_each_drv+0x157/0x1e0 [ 1853.050249][T17945] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1853.055596][T17945] ? lockdep_hardirqs_on+0x7c/0x110 [ 1853.060789][T17945] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1853.066572][T17945] ? __pfx___device_attach_async_helper+0x10/0x10 [ 1853.072963][T17945] __device_attach_async_helper+0x1d3/0x290 [ 1853.078831][T17945] ? __pfx___device_attach_async_helper+0x10/0x10 [ 1853.085233][T17945] ? ktime_get+0x206/0x300 [ 1853.089623][T17945] ? read_tsc+0x9/0x20 [ 1853.093668][T17945] ? ktime_get+0x1ac/0x300 [ 1853.098053][T17945] async_run_entry_fn+0x9c/0x530 [ 1853.102964][T17945] process_one_work+0x9c5/0x1ba0 [ 1853.107874][T17945] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1853.113481][T17945] ? __pfx_process_one_work+0x10/0x10 [ 1853.118824][T17945] ? rcu_is_watching+0x12/0xc0 [ 1853.123577][T17945] ? assign_work+0x1a0/0x250 [ 1853.128153][T17945] worker_thread+0x6c8/0xf00 [ 1853.132713][T17945] ? __kthread_parkme+0x148/0x220 [ 1853.137710][T17945] ? __pfx_worker_thread+0x10/0x10 [ 1853.142791][T17945] kthread+0x2c1/0x3a0 [ 1853.146832][T17945] ? _raw_spin_unlock_irq+0x23/0x50 [ 1853.152002][T17945] ? __pfx_kthread+0x10/0x10 [ 1853.156568][T17945] ret_from_fork+0x45/0x80 [ 1853.160957][T17945] ? __pfx_kthread+0x10/0x10 [ 1853.165519][T17945] ret_from_fork_asm+0x1a/0x30 [ 1853.170258][T17945] [ 1853.187516][T17945] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 1853.468950][T18239] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1853.517862][T24072] udevd[24072]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 1853.518732][T23433] udevd[23433]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1853.561985][T24071] udevd[24071]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 1853.572773][T23435] udevd[23435]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1853.619032][T18239] usb 4-1: Using ep0 maxpacket: 16 [ 1853.626730][T18239] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1853.635962][T18239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.643990][T18239] usb 4-1: Product: syz [ 1853.648130][T18239] usb 4-1: Manufacturer: syz [ 1853.652732][T18239] usb 4-1: SerialNumber: syz [ 1853.658899][T18239] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1853.665168][T18239] r8152-cfgselector 4-1: config 0 descriptor?? [ 1854.077656][T18239] r8152-cfgselector 4-1: USB disconnect, device number 26