last executing test programs: 17m34.730900432s ago: executing program 3 (id=1029): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000540)=""/146, &(0x7f0000000080)=0x8b) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) futex_waitv(&(0x7f0000001b00), 0x0, 0x0, 0x0, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_pgetevents(r3, 0x4, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000040), 0x0) 17m32.3244133s ago: executing program 3 (id=1034): syz_open_dev$MSR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8054, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000140)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 17m30.199631313s ago: executing program 3 (id=1040): r0 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x8b48a28600b56cfa) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, 0x0, &(0x7f0000000100)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0xa}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x10}}]}]}}}]}, 0x68}}, 0x0) unshare(0x64000600) r11 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r11, 0x0) 17m26.562778912s ago: executing program 3 (id=1046): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r1}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r1}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5014000090789def826d42a9c2fa85e2a250420000"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x13) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x8) 17m24.385717348s ago: executing program 3 (id=1054): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x3, 0x6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000640)=ANY=[], 0x358) 17m22.786578215s ago: executing program 3 (id=1057): unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 17m6.997701388s ago: executing program 32 (id=1057): unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 14m30.217586978s ago: executing program 2 (id=2049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept(r0, &(0x7f0000000400)=@nfc, &(0x7f0000001ac0)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001b80)={'wlan0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000002c0)=[{{0x4, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x2, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1}}, {{0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x40) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) 14m29.447918563s ago: executing program 2 (id=2055): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x10001}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 14m27.123998836s ago: executing program 2 (id=2060): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@deltclass={0x24, 0x29, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff5}, {0x2, 0xfffd}, {0xffe0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x50}, 0x1, 0x7}, 0x20000000) 14m26.59923061s ago: executing program 2 (id=2065): socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r1}, 0x38) 14m25.381155699s ago: executing program 2 (id=2073): syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001b80)={'wlan0\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) 14m23.961949404s ago: executing program 2 (id=2082): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4046814}, 0x2404c880) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0, r2}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 14m7.93094418s ago: executing program 33 (id=2082): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4046814}, 0x2404c880) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0, r2}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 13m26.838202526s ago: executing program 1 (id=2383): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x18, 0x0, &(0x7f0000000180)=[@acquire, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13m25.428049969s ago: executing program 1 (id=2391): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000400)={r3, 0xff, 0x2, "07be"}, 0xa) 13m25.179889975s ago: executing program 1 (id=2394): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a3ff200140600fe8000000000000000000000000000bbfe8000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5014000090789def82"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') syz_open_dev$usbfs(&(0x7f00000000c0), 0xfffffffffffffff7, 0x193383) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113a000000000085100000020000008500000076000000950000004000f0009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 13m23.794645985s ago: executing program 1 (id=2398): unshare(0x24020400) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) connect$can_j1939(r0, 0x0, 0x0) 13m23.208142731s ago: executing program 1 (id=2400): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r2, 0x0, 0x9}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r5}) 13m22.916549945s ago: executing program 1 (id=2403): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x2f}, 0x80, 0x0}, 0x4) 13m7.600766648s ago: executing program 34 (id=2403): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x2f}, 0x80, 0x0}, 0x4) 10m56.008983551s ago: executing program 4 (id=2947): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) 10m54.604501001s ago: executing program 4 (id=2948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m53.298120477s ago: executing program 4 (id=2955): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c0001000000000000000000140003002001000000000000000000000000000150bb"], 0x114}], 0x1}, 0x0) 10m50.475919727s ago: executing program 4 (id=2964): socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)={0x20, r1, 0x9c3fa077fa966179, 0x2, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x9, 0x5b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8c001}, 0x20000094) 10m48.18185406s ago: executing program 4 (id=2974): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='cdg', 0x3) syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x100000000, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x2486, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0xf439}) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 10m47.452063942s ago: executing program 4 (id=2976): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d4509d4992861ac00", "90be885f126752e4f700003f52f322080000bcf66a75fcf700"}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) r2 = socket(0x11, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd29, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x44) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00'}) bind$packet(r2, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) read$alg(r6, &(0x7f0000002200)=""/4146, 0x1032) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88fa"], 0xdd12}], 0x1}, 0x0) 10m30.858171258s ago: executing program 35 (id=2976): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d4509d4992861ac00", "90be885f126752e4f700003f52f322080000bcf66a75fcf700"}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) r2 = socket(0x11, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd29, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x44) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00'}) bind$packet(r2, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) read$alg(r6, &(0x7f0000002200)=""/4146, 0x1032) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88fa"], 0xdd12}], 0x1}, 0x0) 13.513902099s ago: executing program 5 (id=4672): socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000000c0)='./bus\x00', 0x118) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r0], 0x0) 12.416731271s ago: executing program 0 (id=4679): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 12.266253358s ago: executing program 0 (id=4680): syz_io_uring_setup(0x235, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_pgetevents(0x0, 0xe9, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$kcm(0xa, 0x2, 0x3a) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x9, 0xc) socket$unix(0x1, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) accept$packet(r0, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0), 0x0, 0x1}) 11.264169023s ago: executing program 5 (id=4685): socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)={0x20, r1, 0x9c3fa077fa966179, 0x2, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x9, 0x5b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8c001}, 0x20000094) 10.799904778s ago: executing program 6 (id=4689): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000300)={0x40, 0xb, 0x4, "ecae0aac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)={0x0, 0x10, 0x4, "9500499c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b40)={0x0, 0x38, 0x4, "50db0822"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000580)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0}) 9.637395033s ago: executing program 8 (id=4690): socket(0x10, 0x3, 0x0) socket$inet6(0x10, 0x2, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) 9.469588509s ago: executing program 5 (id=4691): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a030000000000000000000200000009"], 0x34}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.503674698s ago: executing program 8 (id=4693): socket(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x20040c91) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x300}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x3, 0x8000000000, 0x200000000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7fffffff, 0xdb3}, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) 6.794910549s ago: executing program 0 (id=4697): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0x9, 0x150}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01030000030000000008000b00", @ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRESOCT, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 6.524857333s ago: executing program 5 (id=4700): sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, 0x0, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x256}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdb9742dd8a2f150ab0e8c5fa047c87d310adca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9", 0xf3}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc", 0x8a}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.369960393s ago: executing program 5 (id=4701): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x3c, 0x1, 0x3, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4002}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a4000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.712896973s ago: executing program 8 (id=4702): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) connect$inet6(r2, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 5.321300979s ago: executing program 6 (id=4704): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB], 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x81, '\x00', 0x0, r2, 0x1, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000540), 0x3021090, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@posixacl}, {@cache_readahead}, {@access_client}, {@debug={'debug', 0x3d, 0xb9}}], [{@obj_user={'obj_user', 0x3d, 'cache=mmap'}}, {@seclabel}, {@seclabel}, {@dont_appraise}]}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) socket$netlink(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.93950245s ago: executing program 8 (id=4707): syz_io_uring_setup(0x235, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_pgetevents(0x0, 0xe9, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$kcm(0xa, 0x2, 0x3a) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x9, 0xc) socket$unix(0x1, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) accept$packet(r0, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0), 0x0, 0x1}) 4.718672668s ago: executing program 0 (id=4709): userfaultfd(0x801) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 3.075286739s ago: executing program 6 (id=4711): mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x529ae000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0) 2.942245909s ago: executing program 0 (id=4712): syz_usb_connect(0x3, 0x1c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc8, 0x16}}}, 0x7) 2.756390562s ago: executing program 7 (id=4713): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, 0x0}}], 0x1, 0x20040804) close(r0) 2.753791162s ago: executing program 7 (id=4714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x74}}, 0x0) 2.523019891s ago: executing program 7 (id=4715): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, 0x0) 2.471632526s ago: executing program 7 (id=4716): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000540), 0x3021090, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl}, {@cache_readahead}, {@access_client}, {@debug={'debug', 0x3d, 0xb9}}], [{@obj_user={'obj_user', 0x3d, 'cache=mmap'}}, {@seclabel}, {@seclabel}, {@dont_appraise}]}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81, 0x2000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.400753576s ago: executing program 0 (id=4717): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x4000000000000002, 0x80, 0xbbc, 0x20000004, 0x1, 0x4234, 0xbe61, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x844b81) 1.175461383s ago: executing program 6 (id=4718): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}}, 0x0, 0x5}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r1, &(0x7f00000003c0), 0x0) 1.174476998s ago: executing program 7 (id=4719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 1.116441841s ago: executing program 8 (id=4720): sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x80002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r2, 0x15b4}, 0x50) close(r2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, 0x0, 0x0) 908.130157ms ago: executing program 8 (id=4721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001b80)={'wlan0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000002c0)=[{{0x4, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x2, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1}}, {{0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) 581.66084ms ago: executing program 6 (id=4722): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x89e1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0x145102) mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x1010, r2, 0xb000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='sys_exit\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0xffff, r5, 0x0}]) 528.170061ms ago: executing program 7 (id=4723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x3c, 0x1, 0x3, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4002}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a4000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 496.255353ms ago: executing program 5 (id=4724): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000680)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x6e0}]}) 0s ago: executing program 6 (id=4725): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x3c, 0x1, 0x3, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4002}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a4000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) kernel console output (not intermixed with test programs): 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.302459][ T10] usb 8-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1191.302491][ T10] usb 8-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1191.302508][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.306439][ T10] usb 8-1: config 0 descriptor?? [ 1191.488542][T16444] usb 1-1: USB disconnect, device number 53 [ 1191.520248][T18053] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1191.520288][T18053] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1191.520308][T18053] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1192.022118][ T10] usbhid 8-1:0.4: can't add hid device: -71 [ 1192.022275][ T10] usbhid 8-1:0.4: probe with driver usbhid failed with error -71 [ 1192.041272][ T10] usb 8-1: USB disconnect, device number 35 [ 1192.060395][T16430] usb 6-1: USB disconnect, device number 41 [ 1193.421333][ T38] audit: type=1326 audit(1761866097.105:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18077 comm="syz.8.3787" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73eea0efc9 code=0x0 [ 1194.146065][T16430] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1194.773428][T16430] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1194.773462][T16430] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.773485][T16430] usb 6-1: Product: syz [ 1194.773500][T16430] usb 6-1: Manufacturer: syz [ 1194.773517][T16430] usb 6-1: SerialNumber: syz [ 1195.034024][T16421] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1195.642703][T16430] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1195.642765][T16430] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1195.642790][T16430] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1195.644776][T16421] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1195.644812][T16421] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1195.644840][T16421] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1195.644887][T16421] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1195.644911][T16421] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.690140][T18099] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3793'. [ 1195.690176][T18099] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3793'. [ 1195.693948][T18090] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1195.841287][T16430] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1197.839440][T16420] usb 6-1: USB disconnect, device number 42 [ 1197.936490][T16421] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 1197.952823][ T10] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1197.962497][T16421] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input14 [ 1198.080116][ C0] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1198.080192][T16421] usb 8-1: USB disconnect, device number 36 [ 1198.118975][ T10] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1198.119011][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.119034][ T10] usb 9-1: Product: syz [ 1198.119051][ T10] usb 9-1: Manufacturer: syz [ 1198.119068][ T10] usb 9-1: SerialNumber: syz [ 1198.424781][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1198.424842][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1198.424865][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1198.509501][ T10] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1198.965878][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3803'. [ 1198.965937][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3803'. [ 1198.965954][T18153] netlink: 'syz.6.3803': attribute type 1 has an invalid length. [ 1198.965969][T18153] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3803'. [ 1198.965989][T18153] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1199.017976][T18157] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3805'. [ 1199.018004][T18157] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3805'. [ 1199.107990][ T6916] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1199.200023][T18163] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3807'. [ 1199.420696][ T6916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1199.420731][ T6916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1199.420770][ T6916] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1199.420793][ T6916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.426407][ T6916] usb 6-1: config 0 descriptor?? [ 1199.848936][ T10] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1199.857624][T16421] usb 9-1: USB disconnect, device number 33 [ 1200.009581][ T10] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1200.009617][ T10] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1200.009647][ T10] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1200.009692][ T10] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1200.009717][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.142494][T18175] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1200.147225][ T6916] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1200.147271][ T6916] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1200.147306][ T6916] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1200.147338][ T6916] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1200.147371][ T6916] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1200.147401][ T6916] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1200.147435][ T6916] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1200.156593][ T6916] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1201.245358][ T6916] cp2112 0003:10C4:EA90.0011: Part Number: 0x82 Device Version: 0xFE [ 1201.460324][ T6916] cp2112 0003:10C4:EA90.0011: error requesting SMBus config [ 1201.488045][ T6916] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -5 [ 1201.717453][ T5895] usb 6-1: reset high-speed USB device number 43 using dummy_hcd [ 1202.116365][ T10] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 1202.120097][ T10] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input15 [ 1202.667803][ T6916] usb 6-1: USB disconnect, device number 43 [ 1204.145110][T16426] usb 8-1: USB disconnect, device number 37 [ 1204.145274][ C0] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1204.198007][T18212] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3821'. [ 1204.198036][T18212] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3821'. [ 1205.329703][T18224] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3819'. [ 1205.329724][T18224] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3819'. [ 1205.329737][T18224] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3819'. [ 1206.127206][T16420] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1206.342717][T16420] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1206.342745][T16420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.342759][T16420] usb 1-1: Product: syz [ 1206.342769][T16420] usb 1-1: Manufacturer: syz [ 1206.342780][T16420] usb 1-1: SerialNumber: syz [ 1206.519607][ T6916] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1206.612373][T16420] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1206.612427][T16420] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1206.612444][T16420] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1206.663297][T16420] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1206.690746][ T6916] usb 7-1: Using ep0 maxpacket: 32 [ 1206.693147][ T6916] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1206.693172][ T6916] usb 7-1: config 0 has no interface number 0 [ 1206.693231][ T6916] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1206.695675][ T6916] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1206.695700][ T6916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.695714][ T6916] usb 7-1: Product: syz [ 1206.695724][ T6916] usb 7-1: Manufacturer: syz [ 1206.695734][ T6916] usb 7-1: SerialNumber: syz [ 1206.700113][ T6916] usb 7-1: config 0 descriptor?? [ 1206.766703][ T6916] smsc75xx v1.0.0 [ 1206.783695][T18236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.792873][T18236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.904678][T16426] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1207.071424][T16426] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.071498][T16426] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1207.071532][T16426] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1207.071549][T16426] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.115840][T16426] usb 8-1: config 0 descriptor?? [ 1207.412687][T18236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1207.424491][T18236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.588658][T16426] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 1207.588700][T16426] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 1207.588795][T16426] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 1207.588827][T16426] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 1207.588857][T16426] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 1207.588887][T16426] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 1207.631898][T16426] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 1207.640900][T16426] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 1207.783526][ T6916] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1207.783748][ T6916] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1207.791188][T16426] cp2112 0003:10C4:EA90.0012: Part Number: 0x82 Device Version: 0xFE [ 1208.010306][T16426] cp2112 0003:10C4:EA90.0012: error requesting SMBus config [ 1208.015747][T16426] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -5 [ 1208.216793][ T6916] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1208.216816][ T6916] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1208.216830][ T6916] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1208.216843][ T6916] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1208.217038][ T6916] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 1208.729428][ T10] usb 1-1: USB disconnect, device number 54 [ 1208.772758][ T68] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.772983][ T68] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.773092][ T68] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.773134][ T68] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.381289][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1209.484517][ T10] usb 7-1: USB disconnect, device number 47 [ 1209.671373][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.101421][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.518621][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.822673][T16444] usb 8-1: USB disconnect, device number 38 [ 1210.898639][T18263] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3834'. [ 1210.898669][T18263] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3834'. [ 1211.473441][T18265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3833'. [ 1211.724956][ C1] vkms_vblank_simulate: vblank timer overrun [ 1211.880918][ C1] vkms_vblank_simulate: vblank timer overrun [ 1212.216324][T18277] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1213.353834][ T6916] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1213.421096][ T10] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1213.546671][ T6916] usb 1-1: Using ep0 maxpacket: 8 [ 1213.615786][ T38] audit: type=1326 audit(1761866115.983:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18288 comm="syz.5.3842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fe58cefc9 code=0x0 [ 1213.693900][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1213.978330][ T10] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1213.978363][ T10] usb 9-1: config 0 has no interface number 0 [ 1213.978435][ T10] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1213.982920][ T10] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1213.982941][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.982956][ T10] usb 9-1: Product: syz [ 1213.982966][ T10] usb 9-1: Manufacturer: syz [ 1213.982977][ T10] usb 9-1: SerialNumber: syz [ 1214.043711][ T10] usb 9-1: config 0 descriptor?? [ 1214.064719][ T10] smsc75xx v1.0.0 [ 1214.080278][ T6916] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1214.080306][ T6916] usb 1-1: config 0 has no interface number 0 [ 1214.080354][ T6916] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1214.080381][ T6916] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1214.080409][ T6916] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1214.080435][ T6916] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1214.080477][ T6916] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1214.080499][ T6916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.186190][ T6916] usb 1-1: config 0 descriptor?? [ 1214.209459][T16444] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1214.217227][ T6916] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1214.369858][T16444] usb 8-1: Using ep0 maxpacket: 32 [ 1214.375464][T16444] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1214.375490][T16444] usb 8-1: config 0 has no interface number 0 [ 1214.375808][T16444] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1214.413372][T16444] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1214.413466][T16444] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.413490][T16444] usb 8-1: Product: syz [ 1214.413506][T16444] usb 8-1: Manufacturer: syz [ 1214.413523][T16444] usb 8-1: SerialNumber: syz [ 1214.464349][T16444] usb 8-1: config 0 descriptor?? [ 1214.486282][T16444] smsc75xx v1.0.0 [ 1214.714868][ T10] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1214.714900][ T10] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1214.717506][ T10] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1214.717536][ T10] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1214.717558][ T10] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1214.717577][ T10] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1214.719764][ T10] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -61 [ 1214.851196][T16420] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1214.911488][T16444] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1214.911521][T16444] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1214.911544][T16444] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1214.911861][T16444] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -32 [ 1215.036634][T16420] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1215.036674][T16420] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1215.036703][T16420] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1215.036748][T16420] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1215.036772][T16420] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.059103][T18298] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1215.398927][ T6916] usb 8-1: USB disconnect, device number 39 [ 1216.788689][T16420] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 1216.793855][T16420] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input16 [ 1216.831911][T16444] usb 1-1: USB disconnect, device number 55 [ 1216.895968][T16444] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1216.975375][ T6916] usb 9-1: USB disconnect, device number 34 [ 1217.727608][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3854'. [ 1217.727688][T18327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3854'. [ 1217.727705][T18327] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3854'. [ 1218.399753][T18331] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1218.950882][ C0] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1218.950955][T16444] usb 7-1: USB disconnect, device number 48 [ 1220.701466][T16444] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1220.872527][T16444] usb 7-1: Using ep0 maxpacket: 32 [ 1220.875825][T16444] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1220.875853][T16444] usb 7-1: config 0 has no interface number 0 [ 1220.875906][T16444] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1220.880343][T16444] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1220.880372][T16444] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.880394][T16444] usb 7-1: Product: syz [ 1220.880410][T16444] usb 7-1: Manufacturer: syz [ 1220.880426][T16444] usb 7-1: SerialNumber: syz [ 1220.947448][ T10] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1220.977336][T16444] usb 7-1: config 0 descriptor?? [ 1221.367136][T16444] smsc75xx v1.0.0 [ 1221.428991][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 1221.431744][ T10] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1221.431764][ T10] usb 8-1: config 0 has no interface number 0 [ 1221.431796][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1221.431814][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1221.431881][ T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1221.431901][ T10] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1221.431932][ T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1221.431949][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.555484][ T10] usb 8-1: config 0 descriptor?? [ 1222.918293][ T10] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1222.939554][T18366] veth0_to_team: entered promiscuous mode [ 1222.939578][T18366] veth0_to_team: entered allmulticast mode [ 1223.160202][T16444] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1223.160241][T16444] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1223.160256][T16444] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1223.160458][T16444] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 1223.394918][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3869'. [ 1223.394991][T18371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3869'. [ 1223.395008][T18371] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3869'. [ 1224.546685][T16444] usb 8-1: USB disconnect, device number 40 [ 1224.567317][T16444] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1224.617800][ T10] usb 7-1: USB disconnect, device number 49 [ 1224.791970][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3870'. [ 1226.282885][T18401] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1226.334396][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3875'. [ 1226.334468][T18401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3875'. [ 1226.334485][T18401] netlink: 26 bytes leftover after parsing attributes in process `syz.6.3875'. [ 1226.415365][T18405] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1226.518552][T18405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3877'. [ 1226.518612][T18405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3877'. [ 1226.518629][T18405] netlink: 'syz.5.3877': attribute type 1 has an invalid length. [ 1226.518645][T18405] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3877'. [ 1227.251315][T18420] veth0_to_team: entered promiscuous mode [ 1227.251343][T18420] veth0_to_team: entered allmulticast mode [ 1230.305722][T16426] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1230.339410][T18424] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1230.339477][T18424] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1230.339503][T18424] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1230.658611][T16426] usb 9-1: Using ep0 maxpacket: 32 [ 1230.663069][T16426] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1230.663096][T16426] usb 9-1: config 0 has no interface number 0 [ 1230.663168][T16426] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1230.667604][T16426] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1230.667633][T16426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.667655][T16426] usb 9-1: Product: syz [ 1230.667671][T16426] usb 9-1: Manufacturer: syz [ 1230.667688][T16426] usb 9-1: SerialNumber: syz [ 1230.690115][T16426] usb 9-1: config 0 descriptor?? [ 1230.725315][T16426] smsc75xx v1.0.0 [ 1231.097894][T16444] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 1231.292057][T16444] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1231.292090][T16444] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.292112][T16444] usb 7-1: config 0 has no interface number 0 [ 1231.292407][T16444] usb 7-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1231.292440][T16444] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1231.295973][T16444] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1231.296005][T16444] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.296027][T16444] usb 7-1: Product: syz [ 1231.296044][T16444] usb 7-1: Manufacturer: syz [ 1231.296061][T16444] usb 7-1: SerialNumber: syz [ 1231.380736][T16444] usb 7-1: config 0 descriptor?? [ 1231.391518][T16444] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 1231.600614][T16426] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1231.600645][T16426] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1231.600664][T16426] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1231.601377][T16426] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -32 [ 1232.006903][T18460] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3893'. [ 1232.843740][T16444] usb 9-1: USB disconnect, device number 35 [ 1233.389039][T18472] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1234.722819][ T6916] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1234.886349][ T6916] usb 8-1: config 0 has an invalid interface number: 4 but max is 0 [ 1234.886431][ T6916] usb 8-1: config 0 has no interface number 0 [ 1234.886497][ T6916] usb 8-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.886526][ T6916] usb 8-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.886551][ T6916] usb 8-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1234.886596][ T6916] usb 8-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1234.886620][ T6916] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.916151][ T6916] usb 8-1: config 0 descriptor?? [ 1235.075881][T16426] usb 7-1: USB disconnect, device number 50 [ 1236.331810][ T6916] usbhid 8-1:0.4: can't add hid device: -71 [ 1236.331939][ T6916] usbhid 8-1:0.4: probe with driver usbhid failed with error -71 [ 1236.515053][ T6916] usb 8-1: USB disconnect, device number 41 [ 1239.204180][ T6916] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1240.466539][ T6916] usb 8-1: Using ep0 maxpacket: 32 [ 1240.518732][ T6916] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1240.518777][ T6916] usb 8-1: config 0 has no interface number 0 [ 1240.518855][ T6916] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1240.567265][ T6916] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1240.567298][ T6916] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.567322][ T6916] usb 8-1: Product: syz [ 1240.567338][ T6916] usb 8-1: Manufacturer: syz [ 1240.567355][ T6916] usb 8-1: SerialNumber: syz [ 1240.808607][ T6916] usb 8-1: config 0 descriptor?? [ 1240.826528][ T6916] smsc75xx v1.0.0 [ 1241.269851][ T6916] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1241.269885][ T6916] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1241.269907][ T6916] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1241.270229][ T6916] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -32 [ 1241.497625][T18532] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3913'. [ 1241.632083][T16444] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1241.755461][ T6916] usb 8-1: USB disconnect, device number 42 [ 1242.517604][T16444] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1242.517636][T16444] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.517658][T16444] usb 6-1: config 0 has no interface number 0 [ 1242.517709][T16444] usb 6-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1242.517739][T16444] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1242.574593][T16444] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1242.574627][T16444] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.574650][T16444] usb 6-1: Product: syz [ 1242.574666][T16444] usb 6-1: Manufacturer: syz [ 1242.574682][T16444] usb 6-1: SerialNumber: syz [ 1242.621419][T16444] usb 6-1: config 0 descriptor?? [ 1242.626602][T16444] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -22 [ 1243.271890][T18548] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1244.718057][T16421] usb 6-1: USB disconnect, device number 44 [ 1246.631007][T18571] fuse: Bad value for 'fd' [ 1247.665937][T18582] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1248.776329][T16421] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1248.942314][T16421] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1248.942348][T16421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.942370][T16421] usb 6-1: Product: syz [ 1248.942386][T16421] usb 6-1: Manufacturer: syz [ 1248.942402][T16421] usb 6-1: SerialNumber: syz [ 1250.387864][T16421] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1250.387933][T16421] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1250.734963][T18595] 9pnet_virtio: no channels available for device [ 1250.839816][T16421] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1250.839858][T16421] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1250.840564][T16421] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1250.895531][T16421] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1251.172988][T18601] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3935'. [ 1251.173017][T18601] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3935'. [ 1251.173036][T18601] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3935'. [ 1251.173262][T18601] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3935'. [ 1251.568439][T18609] binder: 18607:18609 unknown command 0 [ 1251.568463][T18609] binder: 18607:18609 ioctl c0306201 200000000080 returned -22 [ 1251.571566][T18609] binder: 18607:18609 ioctl c0306201 0 returned -14 [ 1251.958094][T16420] usb 6-1: USB disconnect, device number 45 [ 1252.364787][ C0] vkms_vblank_simulate: vblank timer overrun [ 1253.533514][ C0] vkms_vblank_simulate: vblank timer overrun [ 1253.563147][ C0] vkms_vblank_simulate: vblank timer overrun [ 1253.929621][T18611] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1254.091241][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.181020][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.737934][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.966313][ C0] vkms_vblank_simulate: vblank timer overrun [ 1255.364002][ C0] vkms_vblank_simulate: vblank timer overrun [ 1255.411052][ C0] vkms_vblank_simulate: vblank timer overrun [ 1256.098067][ C0] vkms_vblank_simulate: vblank timer overrun [ 1256.108909][T16421] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1256.311604][T16421] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1256.311637][T16421] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.311661][T16421] usb 8-1: Product: syz [ 1256.311677][T16421] usb 8-1: Manufacturer: syz [ 1256.311693][T16421] usb 8-1: SerialNumber: syz [ 1259.027176][T16421] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1259.027243][T16421] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1259.680181][T18687] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3961'. [ 1259.680210][T18687] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3961'. [ 1259.680229][T18687] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3961'. [ 1259.680598][T18687] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3961'. [ 1259.722889][T16421] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1259.722948][T16421] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1259.726715][T16421] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1259.775308][T16421] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1260.077617][T18691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3963'. [ 1260.129059][T16421] usb 8-1: USB disconnect, device number 43 [ 1260.477089][T18697] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1261.043843][T16421] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1261.214810][T16421] usb 1-1: Using ep0 maxpacket: 32 [ 1261.219365][T16421] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1261.219392][T16421] usb 1-1: config 0 has no interface number 0 [ 1261.219444][T16421] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1261.224995][T16421] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1261.225024][T16421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.225039][T16421] usb 1-1: Product: syz [ 1261.225050][T16421] usb 1-1: Manufacturer: syz [ 1261.225061][T16421] usb 1-1: SerialNumber: syz [ 1261.238591][T16421] usb 1-1: config 0 descriptor?? [ 1261.285544][T16421] smsc75xx v1.0.0 [ 1261.428707][ T10] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1261.616101][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1261.616142][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.616468][ T10] usb 6-1: Product: syz [ 1261.616489][ T10] usb 6-1: Manufacturer: syz [ 1261.616515][ T10] usb 6-1: SerialNumber: syz [ 1261.929987][T16421] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1261.930593][T16421] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1262.110826][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1262.110976][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1262.166027][T16421] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1262.166066][T16421] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1262.166158][T16421] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1262.166834][T16421] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 1262.759620][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1262.759684][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1262.763341][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1263.009640][ T10] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1264.640017][T16421] usb 1-1: USB disconnect, device number 56 [ 1264.669552][T16420] usb 6-1: USB disconnect, device number 46 [ 1265.020827][T18770] kvm: user requested TSC rate below hardware speed [ 1266.676181][T18780] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1266.676225][T18780] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1266.676245][T18780] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1267.695998][T18786] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1268.423344][T16420] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1268.595453][T16420] usb 7-1: Using ep0 maxpacket: 32 [ 1268.597990][T16420] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1268.598020][T16420] usb 7-1: config 0 has no interface number 0 [ 1268.598076][T16420] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1268.601890][T16420] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1268.601919][T16420] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.601942][T16420] usb 7-1: Product: syz [ 1268.601958][T16420] usb 7-1: Manufacturer: syz [ 1268.601974][T16420] usb 7-1: SerialNumber: syz [ 1268.667693][T18806] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1268.746660][T16420] usb 7-1: config 0 descriptor?? [ 1268.771074][T16420] smsc75xx v1.0.0 [ 1269.417723][T16420] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1269.417757][T16420] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1269.503692][T16426] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1270.168778][T16420] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1270.168819][T16420] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1270.168840][T16420] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1270.169148][T16420] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 1270.246693][T16426] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1270.246725][T16426] usb 6-1: config 0 has no interface number 0 [ 1270.246780][T16426] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1270.251224][T16426] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1270.251256][T16426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.251279][T16426] usb 6-1: Product: syz [ 1270.251296][T16426] usb 6-1: Manufacturer: syz [ 1270.251312][T16426] usb 6-1: SerialNumber: syz [ 1270.257183][T16426] usb 6-1: config 0 descriptor?? [ 1270.347399][T18824] kvm: user requested TSC rate below hardware speed [ 1271.063440][T16426] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -32 [ 1271.382341][T16420] usb 7-1: USB disconnect, device number 51 [ 1273.119462][T16421] usb 6-1: USB disconnect, device number 47 [ 1273.522197][T18864] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1273.706769][T16426] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1273.714171][T18865] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1273.776680][ C0] vkms_vblank_simulate: vblank timer overrun [ 1273.867214][T16426] usb 1-1: device descriptor read/64, error -71 [ 1273.869278][T18872] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4022'. [ 1273.869304][T18872] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4022'. [ 1273.869323][T18872] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4022'. [ 1273.869581][T18872] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4022'. [ 1274.212557][ C0] vkms_vblank_simulate: vblank timer overrun [ 1274.474941][ C0] vkms_vblank_simulate: vblank timer overrun [ 1274.708922][T16421] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1274.713695][ C0] vkms_vblank_simulate: vblank timer overrun [ 1274.928167][T16426] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1275.205585][ C0] vkms_vblank_simulate: vblank timer overrun [ 1275.463230][ C0] vkms_vblank_simulate: vblank timer overrun [ 1275.490730][ C0] vkms_vblank_simulate: vblank timer overrun [ 1275.491287][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1275.514215][T16426] usb 1-1: device descriptor read/64, error -71 [ 1275.535954][ C0] vkms_vblank_simulate: vblank timer overrun [ 1275.557120][T16421] usb 6-1: Using ep0 maxpacket: 32 [ 1275.559604][T16421] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1275.559630][T16421] usb 6-1: config 0 has no interface number 0 [ 1275.559680][T16421] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1275.562229][T16421] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1275.562255][T16421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.562275][T16421] usb 6-1: Product: syz [ 1275.562289][T16421] usb 6-1: Manufacturer: syz [ 1275.562300][T16421] usb 6-1: SerialNumber: syz [ 1275.566993][T16421] usb 6-1: config 0 descriptor?? [ 1275.576835][T16421] smsc75xx v1.0.0 [ 1275.643232][T16426] usb usb1-port1: attempt power cycle [ 1276.245528][T16421] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1276.245564][T16421] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1276.472481][T16421] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1276.472516][T16421] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1276.472538][T16421] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1276.472849][T16421] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 1276.594469][T16426] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1276.628060][ C0] vkms_vblank_simulate: vblank timer overrun [ 1276.665498][T16426] usb 1-1: device descriptor read/8, error -71 [ 1277.177667][ C0] vkms_vblank_simulate: vblank timer overrun [ 1279.692640][T16430] usb 6-1: USB disconnect, device number 48 [ 1284.282574][T18951] kvm: user requested TSC rate below hardware speed [ 1286.794427][T18966] bridge_slave_0: left allmulticast mode [ 1286.794460][T18966] bridge_slave_0: left promiscuous mode [ 1286.794757][T18966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.931368][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4049'. [ 1286.931426][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4049'. [ 1286.931443][T18969] netlink: 'syz.8.4049': attribute type 1 has an invalid length. [ 1286.931457][T18969] netlink: 10 bytes leftover after parsing attributes in process `syz.8.4049'. [ 1286.931477][T18969] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1287.196096][T18966] bridge_slave_1: left allmulticast mode [ 1287.196128][T18966] bridge_slave_1: left promiscuous mode [ 1287.196413][T18966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.376515][T18966] bond0: (slave bond_slave_0): Releasing backup interface [ 1287.600896][T18966] bond0: (slave bond_slave_1): Releasing backup interface [ 1287.936310][T18980] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1287.940005][T18966] team0: Port device team_slave_0 removed [ 1287.986363][T18966] team0: Port device team_slave_1 removed [ 1287.986877][T18966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1288.405658][T18966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1288.467777][T18966] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1288.939780][T18994] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1289.418094][T16426] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1290.327420][T16426] usb 8-1: Using ep0 maxpacket: 16 [ 1290.351492][T16426] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.351519][T16426] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1290.355808][T16426] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1290.355840][T16426] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.355863][T16426] usb 8-1: Product: syz [ 1290.355879][T16426] usb 8-1: Manufacturer: syz [ 1290.355896][T16426] usb 8-1: SerialNumber: syz [ 1290.649520][T16426] usb 8-1: 0:2 : does not exist [ 1290.715369][T16426] usb 8-1: USB disconnect, device number 44 [ 1290.879363][T19017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4063'. [ 1290.882822][T18049] udevd[18049]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1294.692294][T19065] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1294.733744][T19064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4076'. [ 1294.733774][T19064] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4076'. [ 1294.733806][T19064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4076'. [ 1294.734076][T19064] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4076'. [ 1298.584992][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4087'. [ 1299.850285][T19133] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4093'. [ 1299.850316][T19133] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4093'. [ 1299.850336][T19133] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4093'. [ 1299.850587][T19133] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4093'. [ 1300.523389][T19146] kvm: user requested TSC rate below hardware speed [ 1302.841785][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1302.858244][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1302.859774][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1302.861138][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1302.864499][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1303.176819][T19168] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4103'. [ 1304.399670][T19177] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4105'. [ 1304.399697][T19177] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4105'. [ 1304.399716][T19177] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4105'. [ 1304.399955][T19177] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4105'. [ 1305.118710][ T61] Bluetooth: hci3: command tx timeout [ 1305.494358][T19198] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1306.274758][T19209] netlink: 'syz.6.4111': attribute type 4 has an invalid length. [ 1306.275270][T19158] chnl_net:caif_netlink_parms(): no params data found [ 1306.587486][T19216] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4114'. [ 1306.645453][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4115'. [ 1306.645506][T19217] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4115'. [ 1306.645521][T19217] netlink: 'syz.8.4115': attribute type 1 has an invalid length. [ 1306.645542][T19217] netlink: 10 bytes leftover after parsing attributes in process `syz.8.4115'. [ 1306.645560][T19217] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1307.407842][ T61] Bluetooth: hci3: command tx timeout [ 1308.110975][T19214] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1309.066405][T19254] netlink: 'syz.7.4124': attribute type 4 has an invalid length. [ 1309.077609][T19158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.077753][T19158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.077969][T19158] bridge_slave_0: entered allmulticast mode [ 1309.111404][T19158] bridge_slave_0: entered promiscuous mode [ 1309.131641][T19158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.136567][T19158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.136818][T19158] bridge_slave_1: entered allmulticast mode [ 1309.139693][T19158] bridge_slave_1: entered promiscuous mode [ 1309.535099][T19158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.576582][T19158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.655162][ T61] Bluetooth: hci3: command tx timeout [ 1310.165685][T19158] team0: Port device team_slave_0 added [ 1310.167740][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 1310.517918][T19158] team0: Port device team_slave_1 added [ 1310.562394][T16420] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1311.165948][T16420] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1311.165982][T16420] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.166004][T16420] usb 8-1: Product: syz [ 1311.166020][T16420] usb 8-1: Manufacturer: syz [ 1311.166036][T16420] usb 8-1: SerialNumber: syz [ 1311.825852][T16420] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1311.825907][T16420] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1311.877850][T15226] Bluetooth: hci3: command tx timeout [ 1312.126457][T19290] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1312.745960][T19158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.745979][T19158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.746010][T19158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.824036][T19158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.824054][T19158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.824083][T19158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.825602][T16593] batadv1: left allmulticast mode [ 1312.825629][T16593] batadv1: left promiscuous mode [ 1312.825866][T16593] bridge0: port 3(batadv1) entered disabled state [ 1312.904886][T16420] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1312.904942][T16420] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1312.905637][T16420] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1312.949782][T16420] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1313.591638][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4137'. [ 1313.628488][T16420] usb 8-1: USB disconnect, device number 45 [ 1317.625663][T16593] bond0 (unregistering): Released all slaves [ 1318.108054][T19331] kvm: user requested TSC rate below hardware speed [ 1318.543832][T16420] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1319.646759][T16420] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1319.646791][T16420] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.646812][T16420] usb 8-1: Product: syz [ 1319.646828][T16420] usb 8-1: Manufacturer: syz [ 1319.646844][T16420] usb 8-1: SerialNumber: syz [ 1321.185457][T16420] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1321.185523][T16420] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1321.289021][T19158] hsr_slave_0: entered promiscuous mode [ 1321.311050][T19158] hsr_slave_1: entered promiscuous mode [ 1321.312744][T19158] debugfs: 'hsr0' already exists in 'hsr' [ 1321.314944][T19158] Cannot create hsr debugfs directory [ 1321.696198][T16430] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1321.898186][T16430] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 1321.898218][T16430] usb 1-1: config 0 has no interface number 0 [ 1321.898269][T16430] usb 1-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 1321.898301][T16430] usb 1-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1321.955466][T16430] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1321.955500][T16430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.955522][T16430] usb 1-1: Product: syz [ 1321.955538][T16430] usb 1-1: Manufacturer: syz [ 1321.955554][T16430] usb 1-1: SerialNumber: syz [ 1321.972805][T16430] usb 1-1: config 0 descriptor?? [ 1322.300556][T16420] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1322.300616][T16420] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1322.303114][T16420] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1322.913935][T16420] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1322.997526][T16420] usb 8-1: USB disconnect, device number 46 [ 1323.101223][T18049] udevd[18049]: setting mode of /dev/bus/usb/008/046 to 020664 failed: No such file or directory [ 1323.102742][T18049] udevd[18049]: setting owner of /dev/bus/usb/008/046 to uid=0, gid=0 failed: No such file or directory [ 1323.163542][T16430] asix 1-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1323.163834][T16430] asix 1-1:0.239: probe with driver asix failed with error -71 [ 1323.222603][T16430] usb 1-1: USB disconnect, device number 61 [ 1323.970364][T19374] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1324.994546][T19379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4159'. [ 1325.121405][T19385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4159'. [ 1326.759397][T16420] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1326.964957][T16420] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1326.964990][T16420] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.965012][T16420] usb 8-1: Product: syz [ 1326.965028][T16420] usb 8-1: Manufacturer: syz [ 1326.965045][T16420] usb 8-1: SerialNumber: syz [ 1327.450402][T16420] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1327.450466][T16420] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1329.119238][T16420] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1329.119298][T16420] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1329.120134][T16420] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1329.185736][T16420] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1329.437880][T16593] hsr_slave_0: left promiscuous mode [ 1329.489093][T16593] hsr_slave_1: left promiscuous mode [ 1329.490075][T16593] batman_adv: batadv0: Removing interface: macsec1 [ 1329.570490][T16420] usb 8-1: USB disconnect, device number 47 [ 1329.735836][T19446] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4170'. [ 1330.444812][T16430] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 1330.610286][T16430] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1330.610316][T16430] usb 7-1: config 0 has no interface number 0 [ 1330.610360][T16430] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1330.613120][T16430] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1330.613150][T16430] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.613165][T16430] usb 7-1: Product: syz [ 1330.613252][T16430] usb 7-1: Manufacturer: syz [ 1330.613268][T16430] usb 7-1: SerialNumber: syz [ 1330.668930][T16430] usb 7-1: config 0 descriptor?? [ 1331.335761][T16430] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 1333.455168][T16430] usb 7-1: USB disconnect, device number 52 [ 1336.485124][T19440] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4169'. [ 1336.485173][T19440] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4169'. [ 1336.485192][T19440] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4169'. [ 1336.485510][T19440] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4169'. [ 1336.774311][T19473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4178'. [ 1337.759779][ T6916] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1338.468754][ T6916] usb 8-1: Using ep0 maxpacket: 32 [ 1338.909761][ T6916] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1338.909789][ T6916] usb 8-1: config 0 has no interface number 0 [ 1338.909840][ T6916] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1338.917684][ T6916] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1338.917717][ T6916] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.917739][ T6916] usb 8-1: Product: syz [ 1338.917754][ T6916] usb 8-1: Manufacturer: syz [ 1338.917770][ T6916] usb 8-1: SerialNumber: syz [ 1338.975742][ T6916] usb 8-1: config 0 descriptor?? [ 1338.993074][ T6916] smsc75xx v1.0.0 [ 1339.492961][ T6916] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1339.492992][ T6916] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1339.493011][ T6916] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1339.493268][ T6916] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61 [ 1340.054019][T16593] IPVS: stop unused estimator thread 0... [ 1340.570038][ T10] usb 8-1: USB disconnect, device number 48 [ 1341.060413][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1342.539485][T19158] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1342.650661][T19158] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1342.700819][T19158] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1344.915421][T19158] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1347.166920][T19158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1347.251968][T19158] 8021q: adding VLAN 0 to HW filter on device team0 [ 1347.319748][T16593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.320384][T16593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1347.380336][T14122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.393363][T14122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1347.674638][T16421] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1347.835450][T16421] usb 8-1: Using ep0 maxpacket: 32 [ 1347.838886][T16421] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1347.838913][T16421] usb 8-1: config 0 has no interface number 0 [ 1347.838965][T16421] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1347.919798][T16421] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1347.919833][T16421] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.919856][T16421] usb 8-1: Product: syz [ 1347.919881][T16421] usb 8-1: Manufacturer: syz [ 1347.919897][T16421] usb 8-1: SerialNumber: syz [ 1347.972327][T16421] usb 8-1: config 0 descriptor?? [ 1348.063764][T16421] smsc75xx v1.0.0 [ 1348.894284][T16421] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1348.894596][T16421] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1348.975917][T16421] usb 8-1: USB disconnect, device number 49 [ 1349.401979][T19158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1353.044879][T19158] veth0_vlan: entered promiscuous mode [ 1353.073378][T19158] veth1_vlan: entered promiscuous mode [ 1353.190885][T19158] veth0_macvtap: entered promiscuous mode [ 1353.228421][T19158] veth1_macvtap: entered promiscuous mode [ 1353.288712][T19158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1353.312316][T19158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1353.355904][T13779] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.357646][T13779] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.364905][T13779] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.401356][T13779] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.164563][T13759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.164587][T13759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.279741][T13759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.279762][T13759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.798981][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4216'. [ 1355.378268][T19714] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4221'. [ 1356.169167][T19724] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1357.989678][T19726] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1357.989732][T19726] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1357.989754][T19726] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1358.762048][T19752] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1359.773253][T19757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4235'. [ 1359.889756][T19759] fuse: Bad value for 'rootmode' [ 1362.452272][T19781] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1362.839785][T19788] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1362.864211][T19791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4249'. [ 1363.064976][T16426] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1363.109128][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.172014][T16430] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1363.225736][T16426] usb 7-1: Using ep0 maxpacket: 32 [ 1363.232959][T16426] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1363.232988][T16426] usb 7-1: config 0 has no interface number 0 [ 1363.233154][T16426] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1363.253208][T16426] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1363.253246][T16426] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.253270][T16426] usb 7-1: Product: syz [ 1363.253301][T16426] usb 7-1: Manufacturer: syz [ 1363.253322][T16426] usb 7-1: SerialNumber: syz [ 1363.271438][T16426] usb 7-1: config 0 descriptor?? [ 1363.296342][T16426] smsc75xx v1.0.0 [ 1363.359279][T16430] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1363.359305][T16430] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.359320][T16430] usb 6-1: Product: syz [ 1363.359330][T16430] usb 6-1: Manufacturer: syz [ 1363.359341][T16430] usb 6-1: SerialNumber: syz [ 1363.731097][T16421] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1363.894028][T16421] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 1363.894059][T16421] usb 1-1: config 0 has no interface number 0 [ 1363.894135][T16421] usb 1-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 1363.894166][T16421] usb 1-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1363.897384][T16421] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1363.897414][T16421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.897446][T16421] usb 1-1: Product: syz [ 1363.897464][T16421] usb 1-1: Manufacturer: syz [ 1363.897480][T16421] usb 1-1: SerialNumber: syz [ 1363.913061][T16421] usb 1-1: config 0 descriptor?? [ 1364.997738][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.008590][T16426] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1365.008683][T16426] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1365.036800][T19797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4250'. [ 1365.060009][T16430] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1365.060144][T16430] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1365.175245][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.190246][T16421] asix 1-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1365.190568][T16421] asix 1-1:0.239: probe with driver asix failed with error -71 [ 1365.255698][T16421] usb 1-1: USB disconnect, device number 62 [ 1365.349161][T16426] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1365.349192][T16426] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1365.349289][T16426] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1365.349821][T16426] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 1365.715699][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.796697][T19828] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4260'. [ 1366.226791][T19837] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4265'. [ 1366.226824][T19837] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4265'. [ 1366.226845][T19837] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4265'. [ 1366.227098][T19837] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4265'. [ 1366.858781][ C0] vkms_vblank_simulate: vblank timer overrun [ 1367.521544][ C0] vkms_vblank_simulate: vblank timer overrun [ 1367.528733][T16430] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 1367.529618][T16430] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1367.530463][T16430] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1367.530539][T16430] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1367.531622][T16430] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1367.611380][T16420] usb 7-1: USB disconnect, device number 53 [ 1367.629783][T19846] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1367.629826][T19846] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1367.629846][T19846] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1367.719547][T19848] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4268'. [ 1367.814876][ C0] vkms_vblank_simulate: vblank timer overrun [ 1367.859135][T16430] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1367.879130][T16430] usb 6-1: USB disconnect, device number 49 [ 1368.114374][T19855] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1369.453018][ C0] vkms_vblank_simulate: vblank timer overrun [ 1369.720192][ C0] vkms_vblank_simulate: vblank timer overrun [ 1369.720476][T16421] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 1369.888758][T19865] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1369.891626][T16421] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 1369.891653][T16421] usb 7-1: config 0 has no interface number 0 [ 1369.891719][T16421] usb 7-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 1369.891750][T16421] usb 7-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1369.903813][T16421] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1369.903843][T16421] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.903865][T16421] usb 7-1: Product: syz [ 1369.903881][T16421] usb 7-1: Manufacturer: syz [ 1369.903896][T16421] usb 7-1: SerialNumber: syz [ 1370.008632][T16421] usb 7-1: config 0 descriptor?? [ 1370.276267][T19873] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1370.741560][ C0] vkms_vblank_simulate: vblank timer overrun [ 1370.779893][T19860] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4273'. [ 1370.917606][ C0] vkms_vblank_simulate: vblank timer overrun [ 1370.977288][T19879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4277'. [ 1370.977334][T19879] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4277'. [ 1370.977355][T19879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4277'. [ 1370.977625][T19879] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4277'. [ 1371.024000][T16421] asix 7-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1371.024266][T16421] asix 7-1:0.239: probe with driver asix failed with error -71 [ 1371.072222][T16421] usb 7-1: USB disconnect, device number 54 [ 1371.543771][ C0] vkms_vblank_simulate: vblank timer overrun [ 1371.654595][ C0] vkms_vblank_simulate: vblank timer overrun [ 1371.718810][ C0] vkms_vblank_simulate: vblank timer overrun [ 1376.859122][T19924] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4289'. [ 1378.142384][T19940] netlink: 'syz.8.4291': attribute type 13 has an invalid length. [ 1378.142407][T19940] netlink: 'syz.8.4291': attribute type 17 has an invalid length. [ 1378.410492][T19940] erspan0: left promiscuous mode [ 1378.882214][T19940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1378.900144][T19940] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.235617][T19940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1387.823316][T20028] netlink: 260 bytes leftover after parsing attributes in process `syz.7.4314'. [ 1390.505973][T20049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1390.533550][T20049] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1391.106055][T20056] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1392.455195][T16421] usb 8-1: new full-speed USB device number 50 using dummy_hcd [ 1392.821925][T16421] usb 8-1: config 0 has an invalid interface number: 239 but max is 0 [ 1392.821957][T16421] usb 8-1: config 0 has no interface number 0 [ 1392.822007][T16421] usb 8-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 1392.822038][T16421] usb 8-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1392.825218][T16421] usb 8-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1392.825246][T16421] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.825266][T16421] usb 8-1: Product: syz [ 1392.825281][T16421] usb 8-1: Manufacturer: syz [ 1392.825296][T16421] usb 8-1: SerialNumber: syz [ 1392.917969][T16421] usb 8-1: config 0 descriptor?? [ 1393.630574][T20069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4325'. [ 1393.976262][T16421] asix 8-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1393.976504][T16421] asix 8-1:0.239: probe with driver asix failed with error -71 [ 1394.022851][T16421] usb 8-1: USB disconnect, device number 50 [ 1397.814681][T20138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1397.829865][T20138] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1398.976467][T20137] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1399.742262][T16426] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1399.982057][T16426] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 1399.982084][T16426] usb 1-1: config 0 has no interface number 0 [ 1399.982127][T16426] usb 1-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 1399.993249][T16426] usb 1-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1400.595443][T16426] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1400.595475][T16426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.595496][T16426] usb 1-1: Product: syz [ 1400.595511][T16426] usb 1-1: Manufacturer: syz [ 1400.595527][T16426] usb 1-1: SerialNumber: syz [ 1400.671328][T16426] usb 1-1: config 0 descriptor?? [ 1401.094358][T16426] asix 1-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1401.094679][T16426] asix 1-1:0.239: probe with driver asix failed with error -71 [ 1401.144514][T16426] usb 1-1: USB disconnect, device number 63 [ 1402.963617][T16430] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1403.133906][T16430] usb 8-1: Using ep0 maxpacket: 32 [ 1403.222622][T16430] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1403.222651][T16430] usb 8-1: config 0 has no interface number 0 [ 1403.222717][T16430] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1403.225218][T16430] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1403.258498][T16430] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.258538][T16430] usb 8-1: Product: syz [ 1403.258553][T16430] usb 8-1: Manufacturer: syz [ 1403.258570][T16430] usb 8-1: SerialNumber: syz [ 1403.298102][T16430] usb 8-1: config 0 descriptor?? [ 1403.322673][T16430] smsc75xx v1.0.0 [ 1403.994741][T16430] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1403.994774][T16430] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1404.692718][T16430] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1404.692751][T16430] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1404.692773][T16430] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1404.693084][T16430] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61 [ 1405.380059][T16421] usb 8-1: USB disconnect, device number 51 [ 1406.758801][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1408.451803][T20251] netlink: 'syz.6.4359': attribute type 4 has an invalid length. [ 1409.288617][T20262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1409.357129][T20262] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1411.651923][ C1] vkms_vblank_simulate: vblank timer overrun [ 1411.818927][ C1] vkms_vblank_simulate: vblank timer overrun [ 1412.727904][ C1] vkms_vblank_simulate: vblank timer overrun [ 1413.059117][T20294] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4375'. [ 1413.770326][ C1] vkms_vblank_simulate: vblank timer overrun [ 1414.128483][ C1] vkms_vblank_simulate: vblank timer overrun [ 1414.393642][ C1] vkms_vblank_simulate: vblank timer overrun [ 1414.581970][T20327] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1415.507970][ C1] vkms_vblank_simulate: vblank timer overrun [ 1416.029039][ C1] vkms_vblank_simulate: vblank timer overrun [ 1416.179083][ C1] vkms_vblank_simulate: vblank timer overrun [ 1416.408806][ C1] vkms_vblank_simulate: vblank timer overrun [ 1418.197407][T20359] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1418.227163][T20361] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4389'. [ 1420.113134][T15226] Bluetooth: hci3: command tx timeout [ 1420.626671][T16444] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1420.783167][ C1] vkms_vblank_simulate: vblank timer overrun [ 1420.814009][T16444] usb 8-1: Using ep0 maxpacket: 32 [ 1420.816509][T16444] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1420.816527][T16444] usb 8-1: config 0 has no interface number 0 [ 1420.818794][T16444] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1420.818817][T16444] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.819394][T16444] usb 8-1: Product: syz [ 1420.819411][T16444] usb 8-1: Manufacturer: syz [ 1420.819421][T16444] usb 8-1: SerialNumber: syz [ 1421.325214][ C1] vkms_vblank_simulate: vblank timer overrun [ 1421.626788][ C1] vkms_vblank_simulate: vblank timer overrun [ 1421.672731][T16444] usb 8-1: config 0 descriptor?? [ 1421.770357][ C1] vkms_vblank_simulate: vblank timer overrun [ 1421.836096][T16444] smsc95xx v2.0.0 [ 1422.291184][T16444] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1422.291218][T16444] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1422.315707][T20395] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4401'. [ 1422.364468][T20396] fuse: Bad value for 'rootmode' [ 1422.381244][ C1] vkms_vblank_simulate: vblank timer overrun [ 1422.653622][ C1] vkms_vblank_simulate: vblank timer overrun [ 1422.839507][ C1] vkms_vblank_simulate: vblank timer overrun [ 1423.055387][ C1] vkms_vblank_simulate: vblank timer overrun [ 1423.728833][ C1] vkms_vblank_simulate: vblank timer overrun [ 1424.025259][T16444] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1424.025530][T16444] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 1424.074772][T16444] usb 8-1: USB disconnect, device number 52 [ 1424.536848][ C1] vkms_vblank_simulate: vblank timer overrun [ 1424.563347][T20420] netlink: 'syz.5.4402': attribute type 1 has an invalid length. [ 1424.611474][ C1] vkms_vblank_simulate: vblank timer overrun [ 1425.103599][ C1] vkms_vblank_simulate: vblank timer overrun [ 1425.555156][ C1] vkms_vblank_simulate: vblank timer overrun [ 1426.060138][ C1] vkms_vblank_simulate: vblank timer overrun [ 1426.234084][T20436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4409'. [ 1426.826238][ C1] vkms_vblank_simulate: vblank timer overrun [ 1426.913611][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.987900][ C1] vkms_vblank_simulate: vblank timer overrun [ 1429.376217][T20454] netlink: 'syz.8.4414': attribute type 29 has an invalid length. [ 1429.377529][T20454] netlink: 'syz.8.4414': attribute type 29 has an invalid length. [ 1429.417978][T20455] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4413'. [ 1429.643855][ C1] vkms_vblank_simulate: vblank timer overrun [ 1429.848606][ C1] vkms_vblank_simulate: vblank timer overrun [ 1430.518789][ C1] vkms_vblank_simulate: vblank timer overrun [ 1430.790771][T20467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4418'. [ 1431.010422][T20473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1431.046885][T20473] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1431.383708][T20480] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4423'. [ 1431.383772][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4423'. [ 1431.383790][T20480] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4423'. [ 1431.618428][ C1] vkms_vblank_simulate: vblank timer overrun [ 1431.820227][T20484] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1432.800435][T15226] Bluetooth: hci0: connection err: -111 [ 1432.886476][ C1] vkms_vblank_simulate: vblank timer overrun [ 1434.824486][ C1] vkms_vblank_simulate: vblank timer overrun [ 1435.463317][ C1] vkms_vblank_simulate: vblank timer overrun [ 1435.718214][ C1] vkms_vblank_simulate: vblank timer overrun [ 1436.022888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1436.070379][T16444] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1436.198571][ C1] vkms_vblank_simulate: vblank timer overrun [ 1436.389900][T20529] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1436.394723][ C1] vkms_vblank_simulate: vblank timer overrun [ 1436.874825][T20528] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1436.925867][T16444] usb 1-1: Using ep0 maxpacket: 32 [ 1436.928656][T16444] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1436.928683][T16444] usb 1-1: config 0 has no interface number 0 [ 1436.931812][T16444] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1436.931840][T16444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.931860][T16444] usb 1-1: Product: syz [ 1436.931875][T16444] usb 1-1: Manufacturer: syz [ 1436.931891][T16444] usb 1-1: SerialNumber: syz [ 1437.004395][T16444] usb 1-1: config 0 descriptor?? [ 1437.016730][T16444] smsc95xx v2.0.0 [ 1437.508657][T16444] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1437.508683][T16444] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1438.638388][T16426] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 1438.859349][T16426] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.920115][T16426] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1438.920147][T16426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.920169][T16426] usb 9-1: Product: syz [ 1438.920185][T16426] usb 9-1: Manufacturer: syz [ 1438.920202][T16426] usb 9-1: SerialNumber: syz [ 1438.998869][T16426] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1439.667161][T16426] usb 9-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1439.708080][T20546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4440'. [ 1440.027669][T20554] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1440.950966][T16444] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1440.951285][T16444] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1441.119217][T16444] usb 1-1: USB disconnect, device number 64 [ 1442.126845][T16444] usb 9-1: USB disconnect, device number 36 [ 1444.475267][T20603] binder: 20602:20603 unknown command 0 [ 1444.475296][T20603] binder: 20602:20603 ioctl c0306201 200000000080 returned -22 [ 1444.906890][T16426] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1445.086316][T16426] usb 6-1: Using ep0 maxpacket: 32 [ 1445.090000][T16426] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1445.090031][T16426] usb 6-1: config 0 has no interface number 0 [ 1445.118042][T16426] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1445.118081][T16426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.118108][T16426] usb 6-1: Product: syz [ 1445.118127][T16426] usb 6-1: Manufacturer: syz [ 1445.118146][T16426] usb 6-1: SerialNumber: syz [ 1445.165743][T16426] usb 6-1: config 0 descriptor?? [ 1445.205412][T16426] smsc95xx v2.0.0 [ 1445.641812][T16426] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1445.641847][T16426] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1445.889314][T16421] usb 8-1: new full-speed USB device number 53 using dummy_hcd [ 1446.075613][T16421] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1446.075646][T16421] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1446.112564][T16421] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1446.112598][T16421] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1446.112619][T16421] usb 8-1: Product: syz [ 1446.112635][T16421] usb 8-1: Manufacturer: syz [ 1446.112650][T16421] usb 8-1: SerialNumber: syz [ 1446.178712][T16421] usb 8-1: config 0 descriptor?? [ 1446.253694][T16421] usb 8-1: selecting invalid altsetting 0 [ 1446.788236][T16421] usb 8-1: USB disconnect, device number 53 [ 1446.949414][T16426] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1446.949726][T16426] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 1448.008381][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.387989][T16444] usb 6-1: USB disconnect, device number 50 [ 1448.876085][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.239548][T20670] netlink: 'syz.5.4469': attribute type 13 has an invalid length. [ 1450.239573][T20670] netlink: 'syz.5.4469': attribute type 17 has an invalid length. [ 1450.414096][T20677] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4472'. [ 1450.573103][T20670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1450.765452][T16421] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1450.904527][T16430] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1450.941823][T16421] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1450.941857][T16421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.941878][T16421] usb 1-1: Product: syz [ 1450.941894][T16421] usb 1-1: Manufacturer: syz [ 1450.941910][T16421] usb 1-1: SerialNumber: syz [ 1451.322162][T16430] usb 7-1: Using ep0 maxpacket: 32 [ 1451.332040][T16430] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1451.332071][T16430] usb 7-1: config 0 has no interface number 0 [ 1451.332127][T16430] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1451.337302][T16430] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1451.337351][T16430] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.337377][T16430] usb 7-1: Product: syz [ 1451.337396][T16430] usb 7-1: Manufacturer: syz [ 1451.337413][T16430] usb 7-1: SerialNumber: syz [ 1451.345375][T16430] usb 7-1: config 0 descriptor?? [ 1451.371573][T16430] smsc75xx v1.0.0 [ 1452.622235][T16421] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1452.622298][T16421] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1453.067188][T20684] netlink: 'syz.0.4474': attribute type 1 has an invalid length. [ 1453.067269][T20684] netlink: 'syz.0.4474': attribute type 3 has an invalid length. [ 1453.067283][T20684] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4474'. [ 1453.074366][T16430] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1453.074398][T16430] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1453.075203][T16421] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1453.075259][T16421] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1453.083083][T16421] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1454.134592][T16421] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1454.176644][T16421] usb 1-1: USB disconnect, device number 65 [ 1454.547109][T16430] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1454.547153][T16430] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1454.547175][T16430] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1454.547473][T16430] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 1455.706264][T20728] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4488'. [ 1455.798491][ C1] vkms_vblank_simulate: vblank timer overrun [ 1455.900642][T16421] usb 7-1: USB disconnect, device number 55 [ 1456.054941][T20737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4491'. [ 1456.055091][T20737] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4491'. [ 1456.055108][T20737] netlink: 'syz.6.4491': attribute type 1 has an invalid length. [ 1456.055121][T20737] netlink: 10 bytes leftover after parsing attributes in process `syz.6.4491'. [ 1456.446053][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1456.607138][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1456.609063][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1456.609082][ T10] usb 1-1: config 0 has no interface number 0 [ 1456.611402][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1456.611421][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.611435][ T10] usb 1-1: Product: syz [ 1456.611445][ T10] usb 1-1: Manufacturer: syz [ 1456.611455][ T10] usb 1-1: SerialNumber: syz [ 1456.618705][ T10] usb 1-1: config 0 descriptor?? [ 1456.640492][ T10] smsc95xx v2.0.0 [ 1457.114885][ C1] vkms_vblank_simulate: vblank timer overrun [ 1457.152749][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1457.152771][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1458.111356][ C1] vkms_vblank_simulate: vblank timer overrun [ 1458.894160][ C1] vkms_vblank_simulate: vblank timer overrun [ 1458.953233][ C1] vkms_vblank_simulate: vblank timer overrun [ 1459.716905][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 1459.717158][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 1459.747579][ T10] usb 1-1: USB disconnect, device number 66 [ 1459.849354][T20772] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4500'. [ 1460.003229][T20779] netlink: 'syz.7.4503': attribute type 4 has an invalid length. [ 1460.188128][T16430] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1460.391447][T16430] usb 6-1: Using ep0 maxpacket: 32 [ 1460.426723][T16430] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1460.426755][T16430] usb 6-1: config 0 has no interface number 0 [ 1460.426812][T16430] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1460.450846][T16430] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1460.450894][T16430] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.450916][T16430] usb 6-1: Product: syz [ 1460.450933][T16430] usb 6-1: Manufacturer: syz [ 1460.450949][T16430] usb 6-1: SerialNumber: syz [ 1460.513347][T16430] usb 6-1: config 0 descriptor?? [ 1460.535204][T16430] smsc75xx v1.0.0 [ 1460.917508][T20798] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.4509'. [ 1461.420534][ C1] vkms_vblank_simulate: vblank timer overrun [ 1461.421832][T16430] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1461.421864][T16430] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1461.745394][T20806] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4511'. [ 1462.534588][T16430] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1462.534621][T16430] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1462.534642][T16430] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1462.534974][T16430] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 1463.096671][ C1] vkms_vblank_simulate: vblank timer overrun [ 1463.247796][ C1] vkms_vblank_simulate: vblank timer overrun [ 1463.506538][ C1] vkms_vblank_simulate: vblank timer overrun [ 1464.207975][T16425] usb 6-1: USB disconnect, device number 51 [ 1464.361233][T20830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1464.411786][T20830] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1466.243599][T20854] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1469.987516][T20882] fuse: Bad value for 'rootmode' [ 1471.143464][T20899] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4533'. [ 1471.385779][T16426] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1471.556989][T16426] usb 7-1: Using ep0 maxpacket: 32 [ 1471.559702][T16426] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1471.559731][T16426] usb 7-1: config 0 has no interface number 0 [ 1471.559789][T16426] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1471.562918][T16426] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1471.562946][T16426] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.562968][T16426] usb 7-1: Product: syz [ 1471.562983][T16426] usb 7-1: Manufacturer: syz [ 1471.562999][T16426] usb 7-1: SerialNumber: syz [ 1471.586117][T16426] usb 7-1: config 0 descriptor?? [ 1471.605847][T16426] smsc75xx v1.0.0 [ 1472.066197][T20921] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4541'. [ 1472.239889][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1472.972778][T16426] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1472.972813][T16426] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1472.975635][T16426] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1472.975665][T16426] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1472.975687][T16426] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1472.975707][T16426] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1472.976030][T16426] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 1474.355878][T16444] usb 7-1: USB disconnect, device number 56 [ 1474.602905][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4552'. [ 1474.979201][T16444] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1475.205264][T16444] usb 7-1: Using ep0 maxpacket: 16 [ 1475.266468][T16444] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1475.266504][T16444] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1475.274129][T16444] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1475.274160][T16444] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.274182][T16444] usb 7-1: Product: syz [ 1475.274197][T16444] usb 7-1: Manufacturer: syz [ 1475.274213][T16444] usb 7-1: SerialNumber: syz [ 1475.335120][T16444] usb 7-1: config 0 descriptor?? [ 1475.521436][T16444] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1475.521473][T16444] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1476.256794][T16425] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1476.909313][ T10] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1477.035929][T16444] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1477.036655][T16444] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1477.053612][T16425] usb 1-1: Using ep0 maxpacket: 32 [ 1477.056124][T16425] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1477.056162][T16425] usb 1-1: config 0 has no interface number 0 [ 1477.056259][T16425] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1477.059516][T16425] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1477.059550][T16425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.059577][T16425] usb 1-1: Product: syz [ 1477.059593][T16425] usb 1-1: Manufacturer: syz [ 1477.059611][T16425] usb 1-1: SerialNumber: syz [ 1477.067836][T16425] usb 1-1: config 0 descriptor?? [ 1477.073275][T16425] smsc75xx v1.0.0 [ 1477.192597][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1477.195525][ T10] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1477.195554][ T10] usb 6-1: config 0 has no interface number 0 [ 1477.199541][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1477.199570][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.199592][ T10] usb 6-1: Product: syz [ 1477.199608][ T10] usb 6-1: Manufacturer: syz [ 1477.199623][ T10] usb 6-1: SerialNumber: syz [ 1477.205775][ T10] usb 6-1: config 0 descriptor?? [ 1477.214651][ T10] smsc95xx v2.0.0 [ 1477.655771][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1477.655803][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1477.690956][T16444] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1477.732257][T16425] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1477.732281][T16425] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1478.082526][T16425] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1478.082559][T16425] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1478.082581][T16425] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1478.082889][T16425] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 1478.138009][T16444] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 1478.178234][T16444] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1478.185638][T16444] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1478.186884][T16444] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1478.208051][T16444] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1478.309848][T16444] usb 7-1: USB disconnect, device number 57 [ 1478.372960][T21017] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4568'. [ 1478.372982][T21017] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4568'. [ 1478.372997][T21017] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4568'. [ 1478.408916][T21017] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4568'. [ 1478.647961][T21021] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4569'. [ 1478.647991][T21021] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4569'. [ 1478.648019][T21021] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4569'. [ 1478.648276][T21021] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4569'. [ 1479.199973][T16426] usb 1-1: USB disconnect, device number 67 [ 1479.213736][T16425] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1479.381659][T16425] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1479.381693][T16425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.381715][T16425] usb 7-1: Product: syz [ 1479.381730][T16425] usb 7-1: Manufacturer: syz [ 1479.381746][T16425] usb 7-1: SerialNumber: syz [ 1479.614728][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 1479.615040][ T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1479.653019][T16444] usb 6-1: USB disconnect, device number 52 [ 1479.932759][T16425] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1479.932815][T16425] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1480.149563][T16425] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1480.149603][T16425] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1480.150202][T16425] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1480.191335][T16425] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1480.216243][T16425] usb 7-1: USB disconnect, device number 58 [ 1480.292252][T21050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1480.316217][T21050] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1480.646735][T16444] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1480.875788][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4583'. [ 1480.928475][T16444] usb 1-1: Using ep0 maxpacket: 32 [ 1480.930924][T16444] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1480.930950][T16444] usb 1-1: config 0 has no interface number 0 [ 1480.931001][T16444] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1480.934107][T16444] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1480.934138][T16444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.934158][T16444] usb 1-1: Product: syz [ 1480.934175][T16444] usb 1-1: Manufacturer: syz [ 1480.934190][T16444] usb 1-1: SerialNumber: syz [ 1481.019157][T16444] usb 1-1: config 0 descriptor?? [ 1481.037605][T16444] smsc75xx v1.0.0 [ 1481.677552][T16444] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1481.677585][T16444] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1481.940648][T16425] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1482.311996][T16425] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1482.313156][T16425] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.313176][T16425] usb 8-1: Product: syz [ 1482.313187][T16425] usb 8-1: Manufacturer: syz [ 1482.313198][T16425] usb 8-1: SerialNumber: syz [ 1482.346980][T16430] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1483.496361][T16430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1483.496397][T16430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1483.496486][T16430] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1483.496510][T16430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.545725][T16430] usb 6-1: config 0 descriptor?? [ 1483.729359][T16444] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1483.729392][T16444] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1483.729414][T16444] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1483.729709][T16444] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1483.776011][T16444] usb 1-1: USB disconnect, device number 68 [ 1483.816784][T21083] netlink: 'syz.7.4589': attribute type 1 has an invalid length. [ 1483.816903][T21083] netlink: 'syz.7.4589': attribute type 3 has an invalid length. [ 1483.816920][T21083] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4589'. [ 1483.818725][T16425] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1483.818844][T16425] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1483.828562][T16425] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1483.828701][T16425] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1483.928176][T16425] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1484.002302][T16425] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1484.228364][T16430] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1484.228405][T16430] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1484.228436][T16430] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1484.228465][T16430] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1484.228493][T16430] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1484.228527][T16430] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1484.228553][T16430] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1484.274426][T16425] usb 8-1: USB disconnect, device number 54 [ 1485.353591][T16430] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1485.417293][T16430] cp2112 0003:10C4:EA90.0013: Part Number: 0x82 Device Version: 0xFE [ 1485.634622][T16430] cp2112 0003:10C4:EA90.0013: error requesting SMBus config [ 1485.667743][T16430] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -71 [ 1486.046395][T16430] usb 6-1: USB disconnect, device number 53 [ 1486.077236][T21122] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4595'. [ 1487.611928][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4603'. [ 1487.611981][T21133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4603'. [ 1487.611998][T21133] netlink: 'syz.6.4603': attribute type 1 has an invalid length. [ 1487.612012][T21133] netlink: 10 bytes leftover after parsing attributes in process `syz.6.4603'. [ 1488.849645][ T5895] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1489.020153][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 1489.162277][ T5895] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1489.162310][ T5895] usb 6-1: config 0 has no interface number 0 [ 1489.162388][ T5895] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1489.193835][ T5895] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1489.193867][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.193888][ T5895] usb 6-1: Product: syz [ 1489.193904][ T5895] usb 6-1: Manufacturer: syz [ 1489.193920][ T5895] usb 6-1: SerialNumber: syz [ 1489.208406][ T5895] usb 6-1: config 0 descriptor?? [ 1489.222346][ T5895] smsc75xx v1.0.0 [ 1490.771064][ T5895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1490.771097][ T5895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1490.771620][ T5895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1490.771647][ T5895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1490.771668][ T5895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1490.771688][ T5895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1490.771983][ T5895] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1490.857923][ T5895] usb 6-1: USB disconnect, device number 54 [ 1491.142386][T21168] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.4611'. [ 1491.222911][T16421] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1491.226346][T21171] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4613'. [ 1491.287093][T16430] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1491.383312][T16421] usb 9-1: Using ep0 maxpacket: 32 [ 1491.385891][T16421] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1491.385919][T16421] usb 9-1: config 0 has no interface number 0 [ 1491.389121][T16421] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1491.389151][T16421] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.389173][T16421] usb 9-1: Product: syz [ 1491.389188][T16421] usb 9-1: Manufacturer: syz [ 1491.389204][T16421] usb 9-1: SerialNumber: syz [ 1491.447402][T16430] usb 1-1: Using ep0 maxpacket: 32 [ 1491.451530][T16430] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1491.451557][T16430] usb 1-1: config 0 has no interface number 0 [ 1491.455020][T16430] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1491.455049][T16430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.455072][T16430] usb 1-1: Product: syz [ 1491.455087][T16430] usb 1-1: Manufacturer: syz [ 1491.455175][T16430] usb 1-1: SerialNumber: syz [ 1491.460278][T16421] usb 9-1: config 0 descriptor?? [ 1491.478384][T16430] usb 1-1: config 0 descriptor?? [ 1491.512198][T16430] smsc95xx v2.0.0 [ 1491.534427][T16421] smsc95xx v2.0.0 [ 1491.970521][T16421] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1491.970555][T16421] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1491.982285][T16430] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1491.982321][T16430] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1492.591692][ T5895] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1492.773454][ T5895] usb 8-1: Using ep0 maxpacket: 16 [ 1492.778711][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1492.779150][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.779178][ T5895] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1492.779224][ T5895] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1492.779480][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.806576][ T5895] usb 8-1: config 0 descriptor?? [ 1493.791364][T16430] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1493.792048][T16430] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 1493.994934][ T5895] usbhid 8-1:0.0: can't add hid device: -71 [ 1493.995061][ T5895] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1494.028788][ T5895] usb 8-1: USB disconnect, device number 55 [ 1494.299015][T16421] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 1494.299326][T16421] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -61 [ 1494.476365][T21215] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4625'. [ 1494.991329][T16421] usb 1-1: USB disconnect, device number 69 [ 1495.675719][T16421] usb 9-1: USB disconnect, device number 37 [ 1499.740104][T16420] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1499.906528][T16420] usb 6-1: Using ep0 maxpacket: 16 [ 1499.924345][T16420] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1499.924390][T16420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1500.054334][T16420] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1500.054373][T16420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.054395][T16420] usb 6-1: Product: syz [ 1500.054410][T16420] usb 6-1: Manufacturer: syz [ 1500.054426][T16420] usb 6-1: SerialNumber: syz [ 1500.094733][T16420] usb 6-1: config 0 descriptor?? [ 1500.101049][T16420] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1500.101085][T16420] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1501.325626][T16420] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1501.468050][T16420] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1501.469954][T16420] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1501.469974][T16420] em28xx 6-1:0.0: No AC97 audio processor [ 1501.726999][T21282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1502.229021][T16420] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 1503.495425][T16420] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1503.495458][T16420] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.495480][T16420] usb 7-1: Product: syz [ 1503.495495][T16420] usb 7-1: Manufacturer: syz [ 1503.495509][T16420] usb 7-1: SerialNumber: syz [ 1503.567922][T16420] usb 7-1: config 0 descriptor?? [ 1503.649358][ T5895] usb 6-1: USB disconnect, device number 55 [ 1503.651845][ T5895] em28xx 6-1:0.0: Disconnecting em28xx [ 1504.775681][ T5895] em28xx 6-1:0.0: Freeing device [ 1505.080543][T16420] dvb_usb_rtl28xxu 7-1:0.0: chip type detection failed -110 [ 1505.080665][T16420] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1505.142255][T16420] usb 7-1: USB disconnect, device number 59 [ 1505.628621][T21330] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4656'. [ 1506.652950][ T5895] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1506.825668][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 1507.618209][ T5895] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.618239][ T5895] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1507.621245][ T5895] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1507.621273][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.621296][ T5895] usb 6-1: Product: syz [ 1507.621319][ T5895] usb 6-1: Manufacturer: syz [ 1507.621336][ T5895] usb 6-1: SerialNumber: syz [ 1507.913192][ T5895] usb 6-1: 0:2 : does not exist [ 1507.916521][ T5895] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1507.994735][ T5895] usb 6-1: USB disconnect, device number 56 [ 1509.347488][T19807] udevd[19807]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1509.820373][ T10] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1511.192360][T16426] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1511.252543][T21373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1511.348560][T16426] usb 7-1: Using ep0 maxpacket: 32 [ 1511.351691][T16426] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1511.351728][T16426] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1511.351761][T16426] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1511.351789][T16426] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1511.351819][T16426] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1511.358170][T16426] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1511.358205][T16426] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.358231][T16426] usb 7-1: Product: syz [ 1511.358249][T16426] usb 7-1: Manufacturer: syz [ 1511.358269][T16426] usb 7-1: SerialNumber: syz [ 1511.389372][T16426] usb 7-1: config 0 descriptor?? [ 1511.466187][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1511.471048][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1511.471083][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1511.471110][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1511.471136][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1511.471164][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1511.475211][ T10] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1511.475242][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.475264][ T10] usb 1-1: Product: syz [ 1511.475280][ T10] usb 1-1: Manufacturer: syz [ 1511.475296][ T10] usb 1-1: SerialNumber: syz [ 1511.580264][ T10] usb 1-1: config 0 descriptor?? [ 1511.703816][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.704305][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.706992][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.707486][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.712338][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.714120][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.718385][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.718929][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.719514][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.720727][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.721937][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.730392][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.731900][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.733647][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.740612][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.742161][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.742658][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.743172][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.744243][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.744741][T16426] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1511.744808][T16426] input input17: Timeout waiting for response from device. [ 1511.810481][T16426] usb 7-1: USB disconnect, device number 60 [ 1511.858563][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.859119][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.859578][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.883243][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.883730][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.884202][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.884658][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.885123][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.885597][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.886069][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.887456][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.887922][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.888387][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.888848][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.893336][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.915463][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.958192][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.973717][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.986033][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.986755][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1511.986801][ T10] input input18: Timeout waiting for response from device. [ 1512.033632][ T10] usb 1-1: USB disconnect, device number 70 [ 1512.168535][T21386] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4674'. [ 1512.204105][T16430] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1512.625314][T16426] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1512.642500][T16430] usb 6-1: Using ep0 maxpacket: 16 [ 1512.644952][T16430] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.644986][T16430] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1512.648460][T16430] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1512.648492][T16430] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.648514][T16430] usb 6-1: Product: syz [ 1512.648531][T16430] usb 6-1: Manufacturer: syz [ 1512.648546][T16430] usb 6-1: SerialNumber: syz [ 1512.800808][T16426] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1512.800876][T16426] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.800892][T16426] usb 7-1: Product: syz [ 1512.800903][T16426] usb 7-1: Manufacturer: syz [ 1512.800914][T16426] usb 7-1: SerialNumber: syz [ 1512.894212][T16430] usb 6-1: 0:2 : does not exist [ 1512.933886][T16430] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1513.053556][T16430] usb 6-1: USB disconnect, device number 57 [ 1513.083453][T16426] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1513.083512][T16426] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1513.083533][T16426] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1513.087895][T21383] netlink: 'syz.6.4673': attribute type 1 has an invalid length. [ 1513.087915][T21383] netlink: 'syz.6.4673': attribute type 3 has an invalid length. [ 1513.087938][T21383] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4673'. [ 1513.179949][T16426] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1513.416259][T16426] usb 7-1: USB disconnect, device number 61 [ 1513.423969][T19807] udevd[19807]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1514.056361][T21414] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4684'. [ 1514.056424][T21414] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4684'. [ 1514.056441][T21414] netlink: 'syz.8.4684': attribute type 1 has an invalid length. [ 1514.056455][T21414] netlink: 10 bytes leftover after parsing attributes in process `syz.8.4684'. [ 1514.123247][T21417] fuse: Bad value for 'rootmode' [ 1514.341606][ C1] vkms_vblank_simulate: vblank timer overrun [ 1514.582959][ C1] vkms_vblank_simulate: vblank timer overrun [ 1514.846833][T16430] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1515.438814][ C1] vkms_vblank_simulate: vblank timer overrun [ 1515.510171][T21424] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1515.510221][T21424] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1515.510245][T21424] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1515.662611][ C1] vkms_vblank_simulate: vblank timer overrun [ 1515.765254][T16430] usb 7-1: Using ep0 maxpacket: 32 [ 1515.769661][T16430] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1515.769689][T16430] usb 7-1: config 0 has no interface number 0 [ 1515.769761][T16430] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1515.805136][T16430] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1515.805463][T16430] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.805487][T16430] usb 7-1: Product: syz [ 1515.805504][T16430] usb 7-1: Manufacturer: syz [ 1515.805520][T16430] usb 7-1: SerialNumber: syz [ 1515.869818][T16430] usb 7-1: config 0 descriptor?? [ 1515.880028][T16430] smsc75xx v1.0.0 [ 1515.922792][ C1] vkms_vblank_simulate: vblank timer overrun [ 1516.985209][ C1] vkms_vblank_simulate: vblank timer overrun [ 1517.115380][ C1] vkms_vblank_simulate: vblank timer overrun [ 1517.646206][T16430] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1517.646237][T16430] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1517.939442][ C1] vkms_vblank_simulate: vblank timer overrun [ 1518.098423][ C1] vkms_vblank_simulate: vblank timer overrun [ 1519.049466][T16430] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1519.049491][T16430] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1519.049506][T16430] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1519.049769][T16430] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 1519.290443][ T10] usb 7-1: USB disconnect, device number 62 [ 1522.364370][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.764727][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.826124][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.979356][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.274090][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.467587][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.468083][T16430] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1524.600550][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.697584][T16430] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.697650][T16430] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1524.697682][T16430] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1524.701328][T16430] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1524.701358][T16430] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1524.701381][T16430] usb 1-1: Product: syz [ 1524.701396][T16430] usb 1-1: Manufacturer: syz [ 1524.701432][T16430] usb 1-1: SerialNumber: syz [ 1524.786891][T16430] usb 1-1: config 0 descriptor?? [ 1524.870835][T16430] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1524.964413][T19807] udevd[19807]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1525.034094][T21209] usb 1-1: USB disconnect, device number 71 [ 1525.219182][T21209] ================================================================== [ 1525.219200][T21209] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1525.219239][T21209] Read of size 8 at addr ffffc90017801008 by task kworker/0:0/21209 [ 1525.219259][T21209] [ 1525.219273][T21209] CPU: 0 UID: 0 PID: 21209 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1525.219300][T21209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1525.219316][T21209] Workqueue: usb_hub_wq hub_event [ 1525.219342][T21209] Call Trace: [ 1525.219352][T21209] [ 1525.219363][T21209] dump_stack_lvl+0x189/0x250 [ 1525.219402][T21209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1525.219436][T21209] ? __pfx__printk+0x10/0x10 [ 1525.219462][T21209] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1525.219495][T21209] ? __virt_addr_valid+0xdc/0x5c0 [ 1525.219529][T21209] ? __virt_addr_valid+0xdc/0x5c0 [ 1525.219563][T21209] print_report+0xca/0x240 [ 1525.219594][T21209] ? __list_add_valid_or_report+0x4e/0x130 [ 1525.219620][T21209] kasan_report+0x118/0x150 [ 1525.219653][T21209] ? __list_add_valid_or_report+0x4e/0x130 [ 1525.219686][T21209] __list_add_valid_or_report+0x4e/0x130 [ 1525.219716][T21209] kcov_remote_stop+0x52d/0x660 [ 1525.219750][T21209] hub_event+0x45d2/0x4a20 [ 1525.219773][T21209] ? sched_clock+0x3f/0x60 [ 1525.219808][T21209] ? do_raw_spin_lock+0x121/0x290 [ 1525.219836][T21209] ? register_lock_class+0x51/0x320 [ 1525.219884][T21209] ? __pfx_hub_event+0x10/0x10 [ 1525.219908][T21209] ? process_scheduled_works+0x9ef/0x17b0 [ 1525.219939][T21209] ? _raw_spin_unlock_irq+0x23/0x50 [ 1525.219967][T21209] ? process_scheduled_works+0x9ef/0x17b0 [ 1525.219993][T21209] ? process_scheduled_works+0x9ef/0x17b0 [ 1525.220021][T21209] process_scheduled_works+0xae1/0x17b0 [ 1525.220065][T21209] ? __pfx_process_scheduled_works+0x10/0x10 [ 1525.220102][T21209] worker_thread+0x8a0/0xda0 [ 1525.220131][T21209] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1525.220166][T21209] ? __kthread_parkme+0x7b/0x200 [ 1525.220201][T21209] kthread+0x711/0x8a0 [ 1525.220235][T21209] ? __pfx_worker_thread+0x10/0x10 [ 1525.220262][T21209] ? __pfx_kthread+0x10/0x10 [ 1525.220293][T21209] ? rt_spin_unlock+0x150/0x200 [ 1525.220318][T21209] ? rt_spin_unlock+0x161/0x200 [ 1525.220339][T21209] ? __pfx_kthread+0x10/0x10 [ 1525.220372][T21209] ret_from_fork+0x4bc/0x870 [ 1525.220399][T21209] ? __pfx_ret_from_fork+0x10/0x10 [ 1525.220430][T21209] ? __switch_to_asm+0x39/0x70 [ 1525.220452][T21209] ? __switch_to_asm+0x33/0x70 [ 1525.220474][T21209] ? __pfx_kthread+0x10/0x10 [ 1525.220521][T21209] ret_from_fork_asm+0x1a/0x30 [ 1525.220553][T21209] [ 1525.220562][T21209] [ 1525.220568][T21209] The buggy address belongs to a vmalloc virtual mapping [ 1525.220586][T21209] Memory state around the buggy address: [ 1525.220599][T21209] ffffc90017800f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1525.220614][T21209] ffffc90017800f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1525.220629][T21209] >ffffc90017801000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1525.220647][T21209] ^ [ 1525.220659][T21209] ffffc90017801080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1525.220673][T21209] ffffc90017801100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1525.220686][T21209] ================================================================== [ 1525.220710][T21209] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1525.220725][T21209] CPU: 0 UID: 0 PID: 21209 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1525.220750][T21209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1525.220765][T21209] Workqueue: usb_hub_wq hub_event [ 1525.220787][T21209] Call Trace: [ 1525.220795][T21209] [ 1525.220804][T21209] dump_stack_lvl+0x99/0x250 [ 1525.220837][T21209] ? __asan_memcpy+0x40/0x70 [ 1525.220868][T21209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1525.220900][T21209] ? __pfx__printk+0x10/0x10 [ 1525.220933][T21209] vpanic+0x237/0x6d0 [ 1525.220953][T21209] ? __pfx_vpanic+0x10/0x10 [ 1525.220980][T21209] panic+0xb9/0xc0 [ 1525.221000][T21209] ? __pfx_panic+0x10/0x10 [ 1525.221020][T21209] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1525.221049][T21209] ? lockdep_hardirqs_on+0x9c/0x150 [ 1525.221078][T21209] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1525.221109][T21209] ? __list_add_valid_or_report+0x4e/0x130 [ 1525.221135][T21209] check_panic_on_warn+0x89/0xb0 [ 1525.221156][T21209] ? __list_add_valid_or_report+0x4e/0x130 [ 1525.221182][T21209] end_report+0x78/0x160 [ 1525.221211][T21209] kasan_report+0x129/0x150 [ 1525.221242][T21209] ? __list_add_valid_or_report+0x4e/0x130 [ 1525.221273][T21209] __list_add_valid_or_report+0x4e/0x130 [ 1525.221301][T21209] kcov_remote_stop+0x52d/0x660 [ 1525.221334][T21209] hub_event+0x45d2/0x4a20 [ 1525.221356][T21209] ? sched_clock+0x3f/0x60 [ 1525.221390][T21209] ? do_raw_spin_lock+0x121/0x290 [ 1525.221416][T21209] ? register_lock_class+0x51/0x320 [ 1525.221454][T21209] ? __pfx_hub_event+0x10/0x10 [ 1525.221476][T21209] ? process_scheduled_works+0x9ef/0x17b0 [ 1525.221506][T21209] ? _raw_spin_unlock_irq+0x23/0x50 [ 1525.221533][T21209] ? process_scheduled_works+0x9ef/0x17b0 [ 1525.221559][T21209] ? process_scheduled_works+0x9ef/0x17b0 [ 1525.221586][T21209] process_scheduled_works+0xae1/0x17b0 [ 1525.221628][T21209] ? __pfx_process_scheduled_works+0x10/0x10 [ 1525.221665][T21209] worker_thread+0x8a0/0xda0 [ 1525.221693][T21209] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1525.221726][T21209] ? __kthread_parkme+0x7b/0x200 [ 1525.221760][T21209] kthread+0x711/0x8a0 [ 1525.221792][T21209] ? __pfx_worker_thread+0x10/0x10 [ 1525.221818][T21209] ? __pfx_kthread+0x10/0x10 [ 1525.221854][T21209] ? rt_spin_unlock+0x150/0x200 [ 1525.221879][T21209] ? rt_spin_unlock+0x161/0x200 [ 1525.221900][T21209] ? __pfx_kthread+0x10/0x10 [ 1525.221932][T21209] ret_from_fork+0x4bc/0x870 [ 1525.221959][T21209] ? __pfx_ret_from_fork+0x10/0x10 [ 1525.221989][T21209] ? __switch_to_asm+0x39/0x70 [ 1525.222010][T21209] ? __switch_to_asm+0x33/0x70 [ 1525.222032][T21209] ? __pfx_kthread+0x10/0x10 [ 1525.222063][T21209] ret_from_fork_asm+0x1a/0x30 [ 1525.222095][T21209] [ 1525.222424][T21209] Kernel Offset: disabled