last executing test programs: 15m12.920637819s ago: executing program 2 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r4, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 15m11.137193394s ago: executing program 2 (id=242): ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x3}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="2012d2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m7.48339853s ago: executing program 2 (id=252): setreuid(0xee01, 0xee01) prlimit64(0x0, 0x6, 0x0, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) setreuid(0xee01, 0xee01) 15m6.131962571s ago: executing program 2 (id=257): mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 15m5.802966645s ago: executing program 2 (id=259): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000500)={0x20, 0x3, 0x6, "5f29e897b5ae"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m4.782168857s ago: executing program 32 (id=261): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}]}, 0x3c}}, 0x804) 15m4.76469851s ago: executing program 1 (id=263): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 15m4.756812748s ago: executing program 2 (id=264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x290}}, 0x4048010) 15m4.517052396s ago: executing program 33 (id=264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x290}}, 0x4048010) 15m4.505228286s ago: executing program 1 (id=266): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x20a1b, 0x5148a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x48004) 15m4.080734638s ago: executing program 1 (id=267): setreuid(0xee01, 0xee01) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r0 = syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) setreuid(0xee01, 0xee01) 15m3.4855054s ago: executing program 1 (id=268): mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 15m3.08875654s ago: executing program 1 (id=270): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f00000005c0)={0x0, 0x3, 0x49, "4f94d08cb5f02600c3fcdf9a6a4592d02ea07f9258d9eca25b906e72086ffb98549f7d93ccb9ee2d4c811adea8ecc5b7080a2b5cc17c8d523c1f8a61a434eccf9c8230ed0e4d3b5723"}, 0x0, 0x0}) 15m2.01954939s ago: executing program 1 (id=276): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x24, r1, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 15m1.6504631s ago: executing program 34 (id=276): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x24, r1, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 13m6.200835225s ago: executing program 7 (id=277): setreuid(0xee01, 0xee01) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r0 = syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) setreuid(0xee01, 0xee01) 13m5.672488569s ago: executing program 7 (id=450): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) shmget(0x1, 0xa000, 0x200, &(0x7f0000654000/0xa000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8806000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000140)=@chain) add_key$user(&(0x7f00000006c0), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, r6) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8008000}, 0x200080e0) 13m4.03568657s ago: executing program 7 (id=453): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) 12m48.36509625s ago: executing program 35 (id=453): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) 12m16.046415351s ago: executing program 5 (id=560): r0 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0xe112, 0x0, 0x0) 12m14.101990942s ago: executing program 5 (id=564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 12m13.694555964s ago: executing program 5 (id=568): connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) 12m11.420047372s ago: executing program 5 (id=572): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x2c, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0xffe2, 0xfff1}, {0xfff2, 0xffff}, {0x1, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 12m2.878986781s ago: executing program 5 (id=591): connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) 12m1.544906896s ago: executing program 5 (id=596): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_emit_ethernet(0x2e, &(0x7f0000000300)={@local, @empty, @void, {@llc={0x4, {@snap={0xaa, 0xab, "c6", "4d830c", 0x88e7, "7a45a2cd18fb821c7097e388706298ef95aac44e05985a76"}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x6, 0xa, 0x4, 0x10000, 0x4, {}, {0x3, 0x1, 0x9, 0x9, 0xa, 0x8, "094619bb"}, 0x7, 0x2, {0x0}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11m45.987811898s ago: executing program 36 (id=596): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_emit_ethernet(0x2e, &(0x7f0000000300)={@local, @empty, @void, {@llc={0x4, {@snap={0xaa, 0xab, "c6", "4d830c", 0x88e7, "7a45a2cd18fb821c7097e388706298ef95aac44e05985a76"}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x6, 0xa, 0x4, 0x10000, 0x4, {}, {0x3, 0x1, 0x9, 0x9, 0xa, 0x8, "094619bb"}, 0x7, 0x2, {0x0}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 5m43.108349033s ago: executing program 4 (id=1650): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) r1 = socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x5, 0x80000) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x63) add_key(&(0x7f0000000140)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r8) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 5m41.909052311s ago: executing program 4 (id=1652): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0xffffffffffffff55, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000006800010003001000f9ffff7f0000000000000000240002000003", @ANYRES32], 0x3c}}, 0x4000080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) write$binfmt_script(r0, &(0x7f0000000cc0), 0xfd45) 5m40.811455079s ago: executing program 4 (id=1655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 5m39.832658318s ago: executing program 4 (id=1659): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'erspan0\x00', 0x0}) 5m39.437299086s ago: executing program 4 (id=1660): close(0x3) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) 5m39.224698428s ago: executing program 4 (id=1661): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 5m23.090979402s ago: executing program 37 (id=1661): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1m25.023743314s ago: executing program 6 (id=2314): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 1m23.752116093s ago: executing program 9 (id=2316): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000340)={0x3}) 1m23.684572863s ago: executing program 6 (id=2318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r4, 0x0, 0xd0) 1m23.414220719s ago: executing program 6 (id=2320): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1m23.411203771s ago: executing program 9 (id=2321): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) 1m21.378517794s ago: executing program 9 (id=2326): syz_io_uring_setup(0x3c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x42}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000280)={r4, 0x2, 0xc0, 0x46, &(0x7f0000000040)=[{0x5e5, 0x200, 0x8, 0xff}]}) 1m17.000089198s ago: executing program 6 (id=2334): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/zoneinfo\x00', 0x0, 0x0) socket(0x1d, 0x2, 0x6) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x200, 0xffffffffffffffff, 0x9, 0x0, 0x3, 0xfffffffffffffffa}, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8005}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b1b, &(0x7f0000000040)) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, 0x0, 0x0) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000000)={0x2, 0xfa}, 0x2) r6 = accept$ax25(r1, &(0x7f0000000100)={{}, [@null, @default, @default, @remote, @rose, @remote, @null, @rose]}, &(0x7f0000000280)=0x48) close_range(r6, r3, 0x0) 1m15.408453995s ago: executing program 6 (id=2338): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000140)={0x1, 0xd9, 0x3, &(0x7f00000000c0)={0x8, "810556c721393f4084cc9efc7ddbe76f2fb91f7abe35df2a1f63ef8df4077d040b"}}) 1m11.483109448s ago: executing program 9 (id=2347): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="4acb227dde2874ab2a40abcd519dfb002354d619ad81902949cd0492970c89e2ade1109b15abd12e9453e01c1ba9654b97fb0359eb38d27c"]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m10.264553094s ago: executing program 6 (id=2349): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7d046b38b84f7f1f769e6d3a2e284c5cb3f765ca23397ee8a0627922c4f89d28081484f8a286eb10de81f9b831ac0344add3ac71c1d8df7aead2570358e8eb2fbf55b54608d6b89aefa3672a777e880f55b5357e822c4a2154df934c89ea7525d1662b3540805c296ad4f5e9898f3d043d99cde74e9c61ec70fdae59c8bbb6da8059001dd238a52bea91d3", 0x8b, 0xc000, &(0x7f00000001c0)={0xa, 0x4e22, 0x8000, @mcast2, 0x400}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(0x0, 0xb) unshare(0x22020600) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000140)="bad3", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xf8, 0x6, @random="98c8ca7122df"}, 0x14) inotify_init1(0x0) 1m7.477597446s ago: executing program 0 (id=2354): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="6b9f8724a433c46106543dccff0daa2d856c263cd7b8a1a0a2"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x4, @win={{0x7fffffff, 0xff, 0x3, 0x2ff}, 0x8, 0xae, 0x0, 0x9a, &(0x7f0000000680), 0x1}}) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m7.05676307s ago: executing program 0 (id=2356): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x7, 0xfffff038}, {0x30, 0x1, 0x9, 0xfffff010}, {0x6, 0x7, 0x4}]}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) setpriority(0x0, r0, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(r0, &(0x7f0000000040)='ns\x00') getdents64(r3, &(0x7f00000046c0)=""/4096, 0x1000) getdents64(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x3, 0x12) r5 = socket(0xa, 0x3, 0xff) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0xb, @mcast1, 0x8001}, 0x1c) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x5, 0x1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x2c82221f}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m5.675047865s ago: executing program 9 (id=2359): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff09", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 1m5.425063442s ago: executing program 0 (id=2360): syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) geteuid() setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000440), 0x4) syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x890) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000000080), 0x4) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) 1m1.438240029s ago: executing program 9 (id=2362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f0000000000000000200000000800", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) 1m0.791708248s ago: executing program 0 (id=2363): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/zoneinfo\x00', 0x0, 0x0) socket(0x1d, 0x2, 0x6) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x200, 0xffffffffffffffff, 0x9, 0x0, 0x3, 0xfffffffffffffffa}, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8005}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b1b, &(0x7f0000000040)) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, 0x0, 0x0) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) 59.525719495s ago: executing program 0 (id=2365): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 59.35153137s ago: executing program 0 (id=2367): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRESOCT, @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f00000005c0)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="c168d205b56052709d322247a7f2c93f8e1746fef09b63611d7ba24ec260ae3d78b522ad4033d2b3e83a9aa25efb30961ff6d9b5e7391720b035a6cd8286e563ff6d6b4bb235569fc2a5e90627bb1c6aea8378298f0e7613e0d537fad5ffe3dce44539b2be53b9d8ff8094aa70645d16f411493e56056e618a746f645cb54e6c70b7d50e7a529a0fc0b4b59044a08e040aa4bde6ea25f176bcefdc290bc7e11df8e77b062ea134142cf02e4d652a67409760e6a80774ac686180b4b5ef33bf54d56eee341f17"], &(0x7f0000000000)='GPL\x00', 0x3, 0xe9, &(0x7f0000000700)=""/233, 0x0, 0x1}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003340), 0x0, 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000810, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39011, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f000000000000020003"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) 54.938575499s ago: executing program 38 (id=2349): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7d046b38b84f7f1f769e6d3a2e284c5cb3f765ca23397ee8a0627922c4f89d28081484f8a286eb10de81f9b831ac0344add3ac71c1d8df7aead2570358e8eb2fbf55b54608d6b89aefa3672a777e880f55b5357e822c4a2154df934c89ea7525d1662b3540805c296ad4f5e9898f3d043d99cde74e9c61ec70fdae59c8bbb6da8059001dd238a52bea91d3", 0x8b, 0xc000, &(0x7f00000001c0)={0xa, 0x4e22, 0x8000, @mcast2, 0x400}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(0x0, 0xb) unshare(0x22020600) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000140)="bad3", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xf8, 0x6, @random="98c8ca7122df"}, 0x14) inotify_init1(0x0) 45.738432898s ago: executing program 39 (id=2362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f0000000000000000200000000800", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) 44.006083354s ago: executing program 40 (id=2367): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRESOCT, @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f00000005c0)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="c168d205b56052709d322247a7f2c93f8e1746fef09b63611d7ba24ec260ae3d78b522ad4033d2b3e83a9aa25efb30961ff6d9b5e7391720b035a6cd8286e563ff6d6b4bb235569fc2a5e90627bb1c6aea8378298f0e7613e0d537fad5ffe3dce44539b2be53b9d8ff8094aa70645d16f411493e56056e618a746f645cb54e6c70b7d50e7a529a0fc0b4b59044a08e040aa4bde6ea25f176bcefdc290bc7e11df8e77b062ea134142cf02e4d652a67409760e6a80774ac686180b4b5ef33bf54d56eee341f17"], &(0x7f0000000000)='GPL\x00', 0x3, 0xe9, &(0x7f0000000700)=""/233, 0x0, 0x1}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003340), 0x0, 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000810, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39011, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f000000000000020003"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) 6.512775196s ago: executing program 3 (id=2469): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x487, @mcast1, 0x40003}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x3, @empty, 0x1}, 0x1c) 6.400566747s ago: executing program 3 (id=2470): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) fsopen(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(0x0, 0x206, 0x20182) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0xfffffe40, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close(r2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x3, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd5a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b0100"}) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)) setregid(0x0, 0x0) 6.283200926s ago: executing program 3 (id=2471): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) r1 = socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x5, 0x80000) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x63) add_key(&(0x7f0000000140)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r7 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r7) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 4.960468175s ago: executing program 8 (id=2472): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0xf3f, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.767791951s ago: executing program 3 (id=2473): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) setresuid(0x0, 0xee00, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r3, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) 4.493936384s ago: executing program 3 (id=2474): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) dup(0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x2, @rand_addr=0x64010100, 0x4e24, 0x2, 'nq\x00', 0x8, 0x1, 0x32}, {@remote, 0x4e24, 0x10001, 0x0, 0x6, 0x8001}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.349608604s ago: executing program 8 (id=2475): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000810, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39011, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) 2.773749212s ago: executing program 8 (id=2476): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x4, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0xae, 0x34325241, 0x2, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 2.539843546s ago: executing program 8 (id=2477): socket(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000900)={0x0, 0x1, 0x2, 0x9, 0x200, &(0x7f0000000d80)="1ae19327aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c536689a4a62f872f9ca3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d228186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f91ffffffffd51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6ece06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a2a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0600000000000000a1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe021c773a6664b66ae04aa62c564d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000004000000000f800"}) 2.511047751s ago: executing program 8 (id=2478): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) 1.560742864s ago: executing program 8 (id=2479): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=2480): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) r1 = socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x5, 0x80000) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x63) add_key(&(0x7f0000000140)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r7 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r7) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) kernel console output (not intermixed with test programs): 643 comm="syz.3.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4308b5eec9 code=0x7ffc0000 [ 621.583088][ T37] audit: type=1326 audit(1760237259.637:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10643 comm="syz.3.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4308b5eec9 code=0x7ffc0000 [ 621.674948][ T37] audit: type=1326 audit(1760237259.637:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10643 comm="syz.3.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4308b5eec9 code=0x7ffc0000 [ 621.676114][ T37] audit: type=1326 audit(1760237259.637:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10643 comm="syz.3.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4308b5eec9 code=0x7ffc0000 [ 621.677228][ T37] audit: type=1326 audit(1760237259.637:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10643 comm="syz.3.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4308b5eec9 code=0x7ffc0000 [ 621.845533][ T37] audit: type=1326 audit(1760237259.637:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10643 comm="syz.3.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4308b5eec9 code=0x7ffc0000 [ 621.845597][ T37] audit: type=1326 audit(1760237259.647:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10643 comm="syz.3.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4308b5eec9 code=0x7ffc0000 [ 622.509165][T10661] No control pipe specified [ 622.519834][T10636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.451734][ T6097] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 624.639404][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.639480][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.916602][ T6097] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.916636][ T6097] usb 7-1: config 0 interface 0 has no altsetting 0 [ 624.916669][ T6097] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 624.916691][ T6097] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.926836][ T6097] usb 7-1: config 0 descriptor?? [ 624.944967][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 626.610384][ T6097] usbhid 7-1:0.0: can't add hid device: -71 [ 626.610580][ T6097] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 626.643940][ T6097] usb 7-1: USB disconnect, device number 32 [ 628.002076][ T37] audit: type=1326 audit(1760237265.617:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10701 comm="syz.9.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63afefeec9 code=0x7ffc0000 [ 628.002140][ T37] audit: type=1326 audit(1760237265.617:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10701 comm="syz.9.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63afefeec9 code=0x7ffc0000 [ 628.002185][ T37] audit: type=1326 audit(1760237265.617:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10701 comm="syz.9.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63afefeec9 code=0x7ffc0000 [ 628.002229][ T37] audit: type=1326 audit(1760237265.617:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10701 comm="syz.9.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63afefeec9 code=0x7ffc0000 [ 628.002273][ T37] audit: type=1326 audit(1760237265.617:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10701 comm="syz.9.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63afefeec9 code=0x7ffc0000 [ 628.002317][ T37] audit: type=1326 audit(1760237265.617:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10701 comm="syz.9.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f63afefeec9 code=0x7ffc0000 [ 628.002359][ T37] audit: type=1326 audit(1760237265.627:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10701 comm="syz.9.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63afefeec9 code=0x7ffc0000 [ 628.002416][ T37] audit: type=1326 audit(1760237265.627:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10701 comm="syz.9.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63afefeec9 code=0x7ffc0000 [ 641.434459][ T5888] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 641.590184][ T5888] usb 9-1: Using ep0 maxpacket: 32 [ 641.593512][ T5888] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 641.593536][ T5888] usb 9-1: config 0 has no interface number 0 [ 641.593586][ T5888] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 641.593613][ T5888] usb 9-1: config 0 interface 85 has no altsetting 0 [ 641.644441][ T5888] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 641.644468][ T5888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.644487][ T5888] usb 9-1: Product: syz [ 641.644501][ T5888] usb 9-1: Manufacturer: syz [ 641.644515][ T5888] usb 9-1: SerialNumber: syz [ 641.648630][ T5888] usb 9-1: config 0 descriptor?? [ 642.097656][T10805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.133442][ T5888] appletouch 9-1:0.85: Failed to read mode from device. [ 642.133670][ T5888] appletouch 9-1:0.85: probe with driver appletouch failed with error -5 [ 642.169886][ T5888] usb 9-1: USB disconnect, device number 19 [ 643.226577][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.366284][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.577115][T10816] overlayfs: failed to clone upperpath [ 644.827124][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.689306][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.090146][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.475738][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.490827][T10852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.804418][ T5881] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 647.955583][ T5881] usb 10-1: Using ep0 maxpacket: 32 [ 647.995659][ T5881] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.995691][ T5881] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.995732][ T5881] usb 10-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 647.995753][ T5881] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.071435][ T5881] usb 10-1: config 0 descriptor?? [ 648.521874][ T5881] hid_parser_main: 73 callbacks suppressed [ 648.521889][ T5881] cypress 0003:04B4:BCA1.0005: unknown main item tag 0x7 [ 648.595521][ T5881] cypress 0003:04B4:BCA1.0005: hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.9-1/input0 [ 648.749916][ T5881] usb 10-1: USB disconnect, device number 22 [ 650.072874][T10872] fido_id[10872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 650.554487][T10887] tipc: Started in network mode [ 650.554639][T10887] tipc: Node identity eeae6125948e, cluster identity 4711 [ 650.559474][T10887] tipc: Enabled bearer , priority 0 [ 650.559850][T10898] syzkaller0: entered promiscuous mode [ 650.559871][T10898] syzkaller0: entered allmulticast mode [ 651.576931][ T5888] tipc: Node number set to 2048942373 [ 651.788401][T10898] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 651.856279][T10912] tipc: Resetting bearer [ 651.935542][T10883] tipc: Resetting bearer [ 654.936276][T10883] tipc: Disabling bearer [ 658.263434][ T8942] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 659.498380][ T8942] usb 9-1: config 0 has no interfaces? [ 659.505176][ T8942] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 659.505203][ T8942] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 659.505223][ T8942] usb 9-1: Product: syz [ 659.505238][ T8942] usb 9-1: Manufacturer: syz [ 659.505251][ T8942] usb 9-1: SerialNumber: syz [ 659.556424][ T8942] usb 9-1: config 0 descriptor?? [ 661.255393][ T5889] usb 9-1: USB disconnect, device number 20 [ 662.344842][T11017] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 666.290929][T11053] overlayfs: failed to clone lowerpath [ 666.440325][T11054] overlayfs: failed to clone upperpath [ 667.689180][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1387'. [ 668.714856][T11078] netdevsim netdevsim4: Direct firmware load for . [ 668.714856][T11078] failed with error -2 [ 668.714879][T11078] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 668.714879][T11078] [ 671.882151][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1403'. [ 672.144357][ T5881] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 672.299062][ T5881] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 672.299091][ T5881] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 672.299109][ T5881] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 672.299161][ T5881] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 672.299185][ T5881] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 672.315765][ T5881] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 672.315792][ T5881] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 672.315811][ T5881] usb 9-1: Product: syz [ 672.315824][ T5881] usb 9-1: Manufacturer: syz [ 672.477018][ T5881] cdc_wdm 9-1:1.0: skipping garbage [ 672.477039][ T5881] cdc_wdm 9-1:1.0: skipping garbage [ 672.562949][ T5881] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 672.562971][ T5881] cdc_wdm 9-1:1.0: Unknown control protocol [ 672.727061][ T5810] usb 9-1: USB disconnect, device number 21 [ 674.974788][ T5888] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 675.044607][T11151] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 675.044668][T11151] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 675.124332][ T5888] usb 9-1: Using ep0 maxpacket: 8 [ 675.129634][ T5888] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 675.129652][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.175416][ T5888] usb 9-1: config 0 descriptor?? [ 675.466467][ T5888] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 677.177205][ T5888] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 677.177235][ T5888] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 677.214332][ T5888] asix 9-1:0.0: probe with driver asix failed with error -71 [ 677.235567][ T5888] usb 9-1: USB disconnect, device number 22 [ 677.285268][T11164] overlayfs: failed to clone upperpath [ 678.467643][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.626734][ C1] vkms_vblank_simulate: vblank timer overrun [ 679.053043][ C1] vkms_vblank_simulate: vblank timer overrun [ 679.118728][ C1] vkms_vblank_simulate: vblank timer overrun [ 679.504283][ T5888] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 679.608524][T11191] overlayfs: failed to clone upperpath [ 679.658061][ T5888] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 679.658091][ T5888] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 679.658109][ T5888] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 679.658163][ T5888] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 679.658188][ T5888] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 679.662111][ T5888] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 679.662141][ T5888] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 679.662161][ T5888] usb 9-1: Product: syz [ 679.662174][ T5888] usb 9-1: Manufacturer: syz [ 679.790872][ T5888] cdc_wdm 9-1:1.0: skipping garbage [ 679.790893][ T5888] cdc_wdm 9-1:1.0: skipping garbage [ 679.812019][ T5888] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 679.812040][ T5888] cdc_wdm 9-1:1.0: Unknown control protocol [ 680.029402][ T6097] usb 9-1: USB disconnect, device number 23 [ 680.954307][ T6097] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 681.106667][ T6097] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 681.106696][ T6097] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.138611][ T6097] usb 10-1: config 0 descriptor?? [ 681.167400][ T6097] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 681.540827][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.558852][ T6097] gp8psk: usb in 128 operation failed. [ 681.560961][ T6097] gp8psk: usb in 137 operation failed. [ 681.560994][ T6097] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 681.562226][ T6097] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 681.562284][ T6097] usb 10-1: media controller created [ 682.595997][ T6097] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 682.799364][ C1] vkms_vblank_simulate: vblank timer overrun [ 682.923468][ C1] vkms_vblank_simulate: vblank timer overrun [ 682.931223][ T6097] gp8psk_fe: Frontend attached [ 682.931959][ T6097] usb 10-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 682.932887][ T6097] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 683.758590][T11237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.826868][ T6097] gp8psk: usb in 138 operation failed. [ 683.826885][ T6097] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 683.826897][ T6097] gp8psk: found Genpix USB device pID = 203 (hex) [ 683.868394][ T6097] usb 10-1: USB disconnect, device number 23 [ 684.158322][ T6097] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 684.215028][T11248] comedi comedi3: pcl726: I/O port conflict (0x4f29,16) [ 685.727620][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.964072][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.965730][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.553716][T11284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.781923][T11294] overlayfs: missing 'lowerdir' [ 687.005958][T11295] syz.4.1466 (11295) used greatest stack depth: 17656 bytes left [ 687.055416][ C1] vkms_vblank_simulate: vblank timer overrun [ 687.848459][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.695878][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.934918][ C1] vkms_vblank_simulate: vblank timer overrun [ 689.911986][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.471913][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1480'. [ 691.532813][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.654859][T11343] overlayfs: failed to clone lowerpath [ 691.656213][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.924122][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.956238][T11344] overlayfs: missing 'lowerdir' [ 693.383412][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1486'. [ 693.500726][T11356] macvlan0: entered promiscuous mode [ 693.835945][T11356] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1486'. [ 695.683563][T11382] overlayfs: missing 'lowerdir' [ 695.714469][ T5810] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 695.874333][ T5810] usb 9-1: device descriptor read/64, error -71 [ 695.875457][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1498'. [ 696.134402][ T5810] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 696.284292][ T5810] usb 9-1: device descriptor read/64, error -71 [ 696.395985][ T5810] usb usb9-port1: attempt power cycle [ 699.333424][ T5810] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 699.899714][ T5810] usb 9-1: device descriptor read/8, error -71 [ 700.223221][T11416] overlayfs: missing 'workdir' [ 702.675155][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1518'. [ 704.455468][ T5881] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 705.334316][ T5881] usb 9-1: device descriptor read/64, error -71 [ 705.584414][ T5881] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 705.714295][ T5881] usb 9-1: device descriptor read/64, error -71 [ 705.826018][ T5881] usb usb9-port1: attempt power cycle [ 706.104274][ T31] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 706.174279][ T5881] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 706.196517][ T5881] usb 9-1: device descriptor read/8, error -71 [ 706.259959][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.259986][ T31] usb 7-1: config 0 has no interfaces? [ 706.272850][ T31] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 706.272879][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.272897][ T31] usb 7-1: Product: syz [ 706.272910][ T31] usb 7-1: Manufacturer: syz [ 706.272923][ T31] usb 7-1: SerialNumber: syz [ 706.295355][ T31] usb 7-1: config 0 descriptor?? [ 706.467390][ T5881] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 706.495316][ T5881] usb 9-1: device descriptor read/8, error -71 [ 706.604755][ T5881] usb usb9-port1: unable to enumerate USB device [ 709.050639][ T5881] usb 7-1: USB disconnect, device number 33 [ 709.752678][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1532'. [ 712.462592][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.590435][T11513] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 712.590616][T11513] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 712.652831][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.846493][ T5881] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 712.873452][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.028160][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1544'. [ 713.278568][ T5881] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.278595][ T5881] usb 9-1: config 0 has no interfaces? [ 713.281567][ T5881] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 713.281594][ T5881] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.281613][ T5881] usb 9-1: Product: syz [ 713.281626][ T5881] usb 9-1: Manufacturer: syz [ 713.281640][ T5881] usb 9-1: SerialNumber: syz [ 713.297662][ T5881] usb 9-1: config 0 descriptor?? [ 714.751793][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.918725][T11525] netlink: 'syz.6.1546': attribute type 1 has an invalid length. [ 715.711798][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1548'. [ 715.769343][T11433] Set syz1 is full, maxelem 65536 reached [ 715.919435][ C1] vkms_vblank_simulate: vblank timer overrun [ 715.933661][ T6097] usb 9-1: USB disconnect, device number 32 [ 717.197938][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.086015][T11593] overlayfs: failed to clone lowerpath [ 720.329875][T11593] overlayfs: failed to clone upperpath [ 720.485563][T11596] comedi comedi3: pcl726: I/O port conflict (0x4f29,16) [ 721.237364][T11605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.047948][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.488719][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1572'. [ 723.126753][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.214441][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.463456][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.670059][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.778939][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.844254][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.845318][ C1] vkms_vblank_simulate: vblank timer overrun [ 726.443883][ C1] vkms_vblank_simulate: vblank timer overrun [ 726.498424][ C1] vkms_vblank_simulate: vblank timer overrun [ 726.536286][T11642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.947716][ C1] vkms_vblank_simulate: vblank timer overrun [ 731.243301][ C0] vkms_vblank_simulate: vblank timer overrun [ 732.074698][ C0] vkms_vblank_simulate: vblank timer overrun [ 732.426913][ C0] vkms_vblank_simulate: vblank timer overrun [ 732.741315][ C0] vkms_vblank_simulate: vblank timer overrun [ 732.771550][ C0] vkms_vblank_simulate: vblank timer overrun [ 733.495123][ C0] vkms_vblank_simulate: vblank timer overrun [ 733.962259][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1605'. [ 738.723872][T11734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.764156][T11788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.453032][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.453105][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.314844][ T5813] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 750.274297][ T5888] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 750.428872][ T5888] usb 10-1: Using ep0 maxpacket: 32 [ 750.439953][ T5888] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 750.439970][ T5888] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.439979][ T5888] usb 10-1: config 0 has no interface number 0 [ 750.440007][ T5888] usb 10-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 750.440021][ T5888] usb 10-1: config 0 interface 85 has no altsetting 0 [ 750.442867][ T5888] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 750.442889][ T5888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.442900][ T5888] usb 10-1: Product: syz [ 750.442907][ T5888] usb 10-1: Manufacturer: syz [ 750.442915][ T5888] usb 10-1: SerialNumber: syz [ 750.549643][ T5888] usb 10-1: config 0 descriptor?? [ 752.057834][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.765013][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.911954][ T8832] usb 10-1: USB disconnect, device number 24 [ 754.175032][ C1] vkms_vblank_simulate: vblank timer overrun [ 754.378124][T11877] comedi comedi3: pcl726: I/O port conflict (0x4f29,16) [ 754.423578][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.292130][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.991628][T11889] tipc: Started in network mode [ 756.009557][T11889] tipc: Node identity 023b58a6ef77, cluster identity 4711 [ 756.009781][T11889] tipc: Enabled bearer , priority 0 [ 756.013007][T11889] syzkaller0: entered promiscuous mode [ 756.013030][T11889] syzkaller0: entered allmulticast mode [ 756.171162][T11889] tipc: Resetting bearer [ 756.234564][T11888] tipc: Resetting bearer [ 756.407027][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.552665][T11888] tipc: Disabling bearer [ 758.360729][T11919] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1664'. [ 760.767815][T11943] tipc: Enabled bearer , priority 0 [ 760.768642][T11943] syzkaller0: entered promiscuous mode [ 760.768662][T11943] syzkaller0: entered allmulticast mode [ 760.797469][T11943] tipc: Resetting bearer [ 760.854548][T11942] tipc: Resetting bearer [ 761.005639][T11950] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1675'. [ 761.152879][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.762322][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.854301][ T31] tipc: Node number set to 3981203622 [ 761.986992][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.048377][T11942] tipc: Disabling bearer [ 762.468067][T11953] bridge_slave_0: left allmulticast mode [ 762.468109][T11953] bridge_slave_0: left promiscuous mode [ 762.484303][T11953] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.605591][ T31] libceph: connect (1)[c::]:6789 error -101 [ 762.607287][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 762.635420][ T31] libceph: connect (1)[c::]:6789 error -101 [ 762.647440][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 762.673497][T11953] bridge_slave_1: left allmulticast mode [ 762.673524][T11953] bridge_slave_1: left promiscuous mode [ 762.673757][T11953] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.818392][T11953] bond0: (slave bond_slave_0): Releasing backup interface [ 762.869761][T11953] bond0: (slave bond_slave_1): Releasing backup interface [ 763.019442][ C0] vkms_vblank_simulate: vblank timer overrun [ 763.029162][ T31] libceph: connect (1)[c::]:6789 error -101 [ 763.029371][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 763.064726][T11961] ceph: No mds server is up or the cluster is laggy [ 763.649491][ T31] libceph: connect (1)[c::]:6789 error -101 [ 763.649714][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 763.758195][ C0] vkms_vblank_simulate: vblank timer overrun [ 763.827197][ T5881] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 763.874040][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.052010][ T5881] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.052036][ T5881] usb 7-1: config 0 has no interfaces? [ 764.079497][ T5881] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 764.079525][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.079544][ T5881] usb 7-1: Product: syz [ 764.079557][ T5881] usb 7-1: Manufacturer: syz [ 764.079572][ T5881] usb 7-1: SerialNumber: syz [ 764.089751][ T5881] usb 7-1: config 0 descriptor?? [ 764.239579][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.244420][T11953] team0: Port device team_slave_0 removed [ 764.575059][ C0] vkms_vblank_simulate: vblank timer overrun [ 765.803833][T11977] ieee802154 phy0 wpan0: encryption failed: -22 [ 765.873656][T11953] team0: Port device team_slave_1 removed [ 765.893081][T11953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.893111][T11953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.941084][T11953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.941111][T11953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.014282][T11953] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 766.015091][T11955] team0: Mode changed to "activebackup" [ 766.485370][T11982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.797745][ C1] vkms_vblank_simulate: vblank timer overrun [ 766.799399][ T5889] usb 7-1: USB disconnect, device number 34 [ 767.051254][T11987] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1686'. [ 768.288517][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.234270][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.516295][ C1] vkms_vblank_simulate: vblank timer overrun [ 770.433295][T12006] overlayfs: missing 'lowerdir' [ 771.115353][ C1] vkms_vblank_simulate: vblank timer overrun [ 771.294432][ T8832] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 771.424223][ T5889] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 771.446682][ T8832] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.446707][ T8832] usb 7-1: config 0 has no interfaces? [ 771.449869][ T8832] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 771.449895][ T8832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.449914][ T8832] usb 7-1: Product: syz [ 771.449927][ T8832] usb 7-1: Manufacturer: syz [ 771.449941][ T8832] usb 7-1: SerialNumber: syz [ 771.463336][ T8832] usb 7-1: config 0 descriptor?? [ 771.564333][ T8942] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 771.584258][ T5889] usb 9-1: device descriptor read/64, error -71 [ 771.851178][ T8942] usb 10-1: unable to get BOS descriptor or descriptor too short [ 771.853203][ T8942] usb 10-1: config 7 has an invalid interface number: 1 but max is 0 [ 771.853226][ T8942] usb 10-1: config 7 has no interface number 0 [ 771.859148][ T8942] usb 10-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice=ed.9b [ 771.859174][ T8942] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.859192][ T8942] usb 10-1: Product: syz [ 771.859206][ T8942] usb 10-1: Manufacturer: syz [ 771.859220][ T8942] usb 10-1: SerialNumber: syz [ 772.834076][ T5889] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 772.964203][ T5889] usb 9-1: device descriptor read/64, error -71 [ 773.240858][ T5889] usb usb9-port1: attempt power cycle [ 773.361324][ T8942] snd_usb_variax 10-1:7.1: Line 6 PODxt Live found [ 773.361356][ T8942] usb 10-1: selecting invalid altsetting 1 [ 773.361373][ T8942] snd_usb_variax 10-1:7.1: set_interface failed [ 773.363969][ T8942] snd_usb_variax 10-1:7.1: Line 6 PODxt Live now disconnected [ 773.399291][ T8942] snd_usb_variax 10-1:7.1: probe with driver snd_usb_variax failed with error -22 [ 773.417116][ T8942] usb 10-1: USB disconnect, device number 25 [ 773.584294][ T5889] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 773.618416][ T5889] usb 9-1: device descriptor read/8, error -71 [ 773.699399][T12017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.931809][ T5888] usb 7-1: USB disconnect, device number 35 [ 775.990885][T11924] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 776.002769][T11924] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 776.024720][T11924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 776.025894][T11924] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 776.027317][T11924] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 777.185554][T11911] Set syz1 is full, maxelem 65536 reached [ 778.259177][ T5813] Bluetooth: hci0: command tx timeout [ 780.357482][ T5813] Bluetooth: hci0: command tx timeout [ 780.376091][ T8942] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 780.460565][T12050] chnl_net:caif_netlink_parms(): no params data found [ 780.524314][ T8942] usb 7-1: Using ep0 maxpacket: 16 [ 780.526550][ T8942] usb 7-1: config 0 interface 0 has no altsetting 0 [ 780.526587][ T8942] usb 7-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 780.526609][ T8942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.664273][ T8942] usb 7-1: config 0 descriptor?? [ 781.119231][ T8942] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 781.119269][ T8942] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 781.119297][ T8942] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 781.119332][ T8942] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 781.119358][ T8942] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 781.174934][ T8942] hid-u2fzero 0003:10C4:8ACF.0006: hidraw0: USB HID v4.06 Device [HID 10c4:8acf] on usb-dummy_hcd.6-1/input0 [ 782.061371][ T8942] hid-u2fzero 0003:10C4:8ACF.0006: U2F Zero LED initialised [ 782.061601][ T8942] hid-u2fzero 0003:10C4:8ACF.0006: U2F Zero RNG initialised [ 782.083719][ T8942] usb 7-1: USB disconnect, device number 36 [ 782.148646][T12101] fido_id[12101]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 782.423685][ T5813] Bluetooth: hci0: command tx timeout [ 783.904315][ T5916] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 784.013930][ T5927] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.067477][ T5916] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.067503][ T5916] usb 10-1: config 0 has no interfaces? [ 784.070770][ T5916] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 784.070796][ T5916] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.070815][ T5916] usb 10-1: Product: syz [ 784.070828][ T5916] usb 10-1: Manufacturer: syz [ 784.070842][ T5916] usb 10-1: SerialNumber: syz [ 784.137563][ T5916] usb 10-1: config 0 descriptor?? [ 784.281328][T12148] ieee802154 phy0 wpan0: encryption failed: -22 [ 784.531006][ T5813] Bluetooth: hci0: command tx timeout [ 785.614741][ T31] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 785.854248][ T31] usb 9-1: Using ep0 maxpacket: 8 [ 785.871257][ T31] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 785.871286][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.871306][ T31] usb 9-1: Product: syz [ 785.871319][ T31] usb 9-1: Manufacturer: syz [ 785.871333][ T31] usb 9-1: SerialNumber: syz [ 786.106470][ T31] usb 9-1: config 0 descriptor?? [ 786.128354][ T31] gspca_main: se401-2.14.0 probing 047d:5003 [ 786.565570][T12168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 787.114897][ T5881] usb 10-1: USB disconnect, device number 26 [ 787.249945][ T31] gspca_se401: ExtraFeatures: 48 [ 787.332495][ T5927] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.457925][ T31] input: se401 as /devices/platform/dummy_hcd.8/usb9/9-1/input/input8 [ 787.474147][T12050] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.474278][T12050] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.474524][T12050] bridge_slave_0: entered allmulticast mode [ 787.477295][T12050] bridge_slave_0: entered promiscuous mode [ 787.529201][T12050] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.529350][T12050] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.529592][T12050] bridge_slave_1: entered allmulticast mode [ 787.532346][T12050] bridge_slave_1: entered promiscuous mode [ 787.594830][ T31] usb 9-1: USB disconnect, device number 37 [ 789.512761][ T5927] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.739275][T12212] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 789.741497][T12212] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 790.584490][T12050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.589626][T12050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.717689][T12216] ieee802154 phy0 wpan0: encryption failed: -22 [ 791.081843][ T5927] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.448550][T12223] can0: slcan on ttyS3. [ 791.469958][T12050] team0: Port device team_slave_0 added [ 791.692425][T12050] team0: Port device team_slave_1 added [ 791.703054][T12227] can0 (unregistered): slcan off ttyS3. [ 791.715944][T12227] Falling back ldisc for ttyS3. [ 792.470857][T12050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.470873][T12050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.470895][T12050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.537363][T12050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.537376][T12050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.537390][T12050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.510164][T12050] hsr_slave_0: entered promiscuous mode [ 794.520343][T12050] hsr_slave_1: entered promiscuous mode [ 794.521347][T12050] debugfs: 'hsr0' already exists in 'hsr' [ 794.521369][T12050] Cannot create hsr debugfs directory [ 794.880201][ T5927] bridge_slave_1: left allmulticast mode [ 794.880220][ T5927] bridge_slave_1: left promiscuous mode [ 794.880372][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.328943][T12254] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 795.334525][T12254] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 795.910450][ T5927] bridge_slave_0: left allmulticast mode [ 795.910469][ T5927] bridge_slave_0: left promiscuous mode [ 795.910649][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.567731][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.061663][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.102886][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.232959][ C0] vkms_vblank_simulate: vblank timer overrun [ 798.318394][ C0] vkms_vblank_simulate: vblank timer overrun [ 798.369482][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.329203][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.392994][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.441614][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.499505][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.558653][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.628275][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.690696][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.750174][ C0] vkms_vblank_simulate: vblank timer overrun [ 800.265733][T12288] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 800.265901][T12288] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 801.049978][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.527293][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.532926][T12291] ieee802154 phy0 wpan0: encryption failed: -22 [ 801.795256][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.877075][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.996295][ T5927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.054712][ T5927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.076764][ T5927] bond0 (unregistering): Released all slaves [ 802.241677][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.674350][ T8942] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 802.728295][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.826648][ T8942] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 802.826665][ T8942] usb 10-1: config 1 has no interface number 0 [ 802.826691][ T8942] usb 10-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 802.826705][ T8942] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 802.826718][ T8942] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 802.826729][ T8942] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.828925][ T8942] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 802.828944][ T8942] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.828954][ T8942] usb 10-1: Product: syz [ 802.828962][ T8942] usb 10-1: Manufacturer: syz [ 802.828969][ T8942] usb 10-1: SerialNumber: syz [ 802.861664][T12294] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 802.861805][T12294] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 803.154117][T12294] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 803.155902][T12294] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 803.360856][T12302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.540525][ T8942] sierra_net 10-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.9-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 804.761605][ C0] vkms_vblank_simulate: vblank timer overrun [ 805.689006][ T8942] sierra_net 10-1:1.7 wwan0: Submit SYNC failed -71 [ 805.689034][ T8942] sierra_net 10-1:1.7 wwan0: Send SYNC failed, status -71 [ 805.726299][ T8942] usb 10-1: USB disconnect, device number 27 [ 805.744778][ T8942] sierra_net 10-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.9-1, Sierra Wireless USB-to-WWAN Modem [ 808.068609][ T5881] sierra_net 10-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19 [ 808.068760][ T5881] sierra_net 10-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19 [ 808.775325][ T8942] sierra_net 10-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 809.671991][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.672064][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.777947][ T5927] hsr_slave_0: left promiscuous mode [ 809.804267][ T5927] hsr_slave_1: left promiscuous mode [ 809.805008][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.805025][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.835889][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.835906][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.854647][T12348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.908935][ T5927] veth1_macvtap: left promiscuous mode [ 809.909039][ T5927] veth0_macvtap: left promiscuous mode [ 809.909297][ T5927] veth1_vlan: left promiscuous mode [ 809.909385][ T5927] veth0_vlan: left promiscuous mode [ 812.661011][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.722020][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.758910][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.831312][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.951570][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.038512][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.081440][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.255355][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.293613][ C1] vkms_vblank_simulate: vblank timer overrun [ 814.045983][ T5927] team0 (unregistering): Port device team_slave_1 removed [ 814.284345][ C1] vkms_vblank_simulate: vblank timer overrun [ 814.454754][ T5927] team0 (unregistering): Port device team_slave_0 removed [ 814.909972][ C1] vkms_vblank_simulate: vblank timer overrun [ 816.291173][ C1] vkms_vblank_simulate: vblank timer overrun [ 816.683773][ C1] vkms_vblank_simulate: vblank timer overrun [ 816.741044][ C1] vkms_vblank_simulate: vblank timer overrun [ 816.868453][ C1] vkms_vblank_simulate: vblank timer overrun [ 816.906445][T12363] tipc: Started in network mode [ 816.906475][T12363] tipc: Node identity 1a43254d2f2b, cluster identity 4711 [ 816.906693][T12363] tipc: Enabled bearer , priority 0 [ 816.910986][T12367] syzkaller0: entered promiscuous mode [ 816.911013][T12367] syzkaller0: entered allmulticast mode [ 816.971558][T12394] overlayfs: missing 'lowerdir' [ 817.006665][T12358] tipc: Resetting bearer [ 817.217150][T12358] tipc: Disabling bearer [ 818.998989][T12419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 820.084502][ T5927] IPVS: stop unused estimator thread 0... [ 820.732295][T12449] tipc: Enabled bearer , priority 0 [ 820.733358][T12449] syzkaller0: entered promiscuous mode [ 820.733382][T12449] syzkaller0: entered allmulticast mode [ 820.797049][ C0] vkms_vblank_simulate: vblank timer overrun [ 820.901586][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.054754][T12452] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 821.198594][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.294185][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.415236][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.481570][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.632841][T12454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 821.846971][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.847976][T12447] tipc: Resetting bearer [ 822.490062][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.668754][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.669570][ T8942] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 822.834236][ T8942] usb 7-1: Using ep0 maxpacket: 8 [ 822.837132][ T8942] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 822.840543][ T8942] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 822.840560][ T8942] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 822.840571][ T8942] usb 7-1: Product: syz [ 822.840578][ T8942] usb 7-1: Manufacturer: syz [ 822.840585][ T8942] usb 7-1: SerialNumber: syz [ 822.842496][T12447] tipc: Disabling bearer [ 823.158034][ T8942] usb 7-1: palm_os_3_probe - error -32 getting connection information [ 823.158149][ T8942] visor 7-1:1.0: probe with driver visor failed with error -32 [ 823.621396][T12050] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 823.633548][T12476] overlayfs: failed to clone upperpath [ 824.050724][T12050] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 824.162217][T12050] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 824.195969][T12470] ALSA: mixer_oss: invalid OSS volume '017777777777777777777770xffffff' [ 824.485849][T12050] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 824.830741][ T5881] usb 7-1: USB disconnect, device number 37 [ 825.176544][T12050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.284249][ T5888] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 825.287989][T12050] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.319986][ T9793] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.320066][ T9793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.378717][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.378860][ T5966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.447308][ T5888] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 825.447334][ T5888] usb 7-1: config 0 has no interface number 0 [ 825.451885][ T5888] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 825.451902][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.451912][ T5888] usb 7-1: Product: syz [ 825.451919][ T5888] usb 7-1: Manufacturer: syz [ 825.451927][ T5888] usb 7-1: SerialNumber: syz [ 825.502376][ T5888] usb 7-1: config 0 descriptor?? [ 825.722526][ T5888] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 825.792316][T12050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 825.828934][ T5888] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 825.829362][ T5888] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 825.829416][ T5888] usb 7-1: media controller created [ 825.889052][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 825.956997][ T5888] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 827.052293][ T5888] usb 7-1: USB disconnect, device number 38 [ 827.226397][T12475] syz.9.1837 (12475): drop_caches: 2 [ 827.549505][T12525] tipc: Enabled bearer , priority 0 [ 827.566637][T12525] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 828.073594][T12533] tipc: Resetting bearer [ 828.124494][T12527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.377440][ T5888] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 828.435192][T12523] tipc: Disabling bearer [ 828.499770][T12540] overlayfs: failed to clone upperpath [ 828.575816][ T5888] usb 10-1: Using ep0 maxpacket: 8 [ 828.577761][ T5888] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 828.580227][ T5888] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 828.580249][ T5888] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 828.580268][ T5888] usb 10-1: Product: syz [ 828.580281][ T5888] usb 10-1: Manufacturer: syz [ 828.580294][ T5888] usb 10-1: SerialNumber: syz [ 828.895864][ T5888] usb 10-1: palm_os_3_probe - error -32 getting connection information [ 828.895968][ T5888] visor 10-1:1.0: probe with driver visor failed with error -32 [ 828.944684][T12050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.080207][T12050] veth0_vlan: entered promiscuous mode [ 829.101338][T12050] veth1_vlan: entered promiscuous mode [ 829.199691][ C0] vkms_vblank_simulate: vblank timer overrun [ 829.282339][T12050] veth0_macvtap: entered promiscuous mode [ 829.346335][T12050] veth1_macvtap: entered promiscuous mode [ 829.391926][T12050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.463577][T12050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.716849][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.392891][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.431391][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.444952][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.446000][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.446476][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.664600][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.848705][T12571] No control pipe specified [ 831.030121][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.030143][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.169600][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.169620][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.184545][T12575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.246407][ T5881] usb 10-1: USB disconnect, device number 28 [ 831.671460][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.769448][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.834246][ T49] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 832.006253][ T49] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.006274][ T49] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 832.007406][ T49] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 832.007422][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 832.007432][ T49] usb 1-1: SerialNumber: syz [ 832.444711][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.761971][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.061807][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.141582][ T49] usb 1-1: 0:2 : does not exist [ 833.141726][ T49] usb 1-1: unit 5 not found! [ 833.414311][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.756072][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.929823][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.997744][ T49] usb 1-1: USB disconnect, device number 13 [ 834.133680][T12612] No control pipe specified [ 834.263343][T11743] udevd[11743]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 834.995585][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.053279][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.169981][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.260703][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.340193][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.380093][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.469612][T12628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.680901][T12655] No control pipe specified [ 837.763480][ T5917] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 837.951983][ T5917] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.952010][ T5917] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 837.953538][ T5917] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 837.953564][ T5917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 837.953583][ T5917] usb 9-1: SerialNumber: syz [ 838.415586][ T5917] usb 9-1: 0:2 : does not exist [ 838.415693][ T5917] usb 9-1: unit 5: unexpected type 0x03 [ 839.454941][ T5917] usb 9-1: USB disconnect, device number 38 [ 839.692299][T11743] udevd[11743]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 843.554480][T12696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.554886][T12750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 850.008967][T12768] ieee802154 phy0 wpan0: encryption failed: -22 [ 850.177694][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.299011][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.392394][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.514413][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.619026][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.925167][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.950274][T12769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.740561][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.319555][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.811291][ C0] vkms_vblank_simulate: vblank timer overrun [ 853.294204][ T5889] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 853.473270][ C0] vkms_vblank_simulate: vblank timer overrun [ 853.473446][ T5889] usb 9-1: device descriptor read/64, error -71 [ 853.821178][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.454853][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.574264][ T5889] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 854.653756][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.705879][ T5889] usb 9-1: device descriptor read/64, error -71 [ 854.816255][ T5889] usb usb9-port1: attempt power cycle [ 855.113986][ C0] vkms_vblank_simulate: vblank timer overrun [ 855.249497][T12806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 855.820738][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.277216][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.346364][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.498523][ C0] vkms_vblank_simulate: vblank timer overrun [ 857.644271][ T5889] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 857.894784][ T5889] usb 9-1: device descriptor read/64, error -71 [ 858.754628][ T5889] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 858.925642][ T5889] usb 9-1: device descriptor read/64, error -71 [ 859.045391][ T5889] usb usb9-port1: attempt power cycle [ 859.323739][T12808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.415378][T12827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 860.263538][T12844] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1926'. [ 860.295876][T12844] bond_slave_0: left promiscuous mode [ 860.296017][T12844] bond_slave_1: left promiscuous mode [ 860.317607][T12844] syz_tun: left promiscuous mode [ 861.605735][ T5916] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 862.544163][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 862.545650][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 862.545672][ T5916] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 862.545683][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.548745][ T5916] usb 1-1: config 0 descriptor?? [ 862.959005][ T5916] usbhid 1-1:0.0: can't add hid device: -71 [ 862.959127][ T5916] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 862.995972][ T5916] usb 1-1: USB disconnect, device number 14 [ 866.039800][ T5889] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 866.214237][ T5889] usb 1-1: device descriptor read/64, error -71 [ 866.584203][ T5889] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 866.858888][T12897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.984803][ T5889] usb 1-1: device descriptor read/64, error -71 [ 867.100013][ T5889] usb usb1-port1: attempt power cycle [ 867.243552][T12844] bond1: (slave macvlan2): Removing an active aggregator [ 867.247448][T12844] bond1: (slave macvlan2): Releasing backup interface [ 867.344977][T12844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.395016][T12844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.434310][ T5889] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 867.436048][T12844] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 867.455706][ T5889] usb 1-1: device descriptor read/8, error -71 [ 867.507304][T12844] bond0 (unregistering): Released all slaves [ 867.717483][ T5889] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 867.755293][ T5889] usb 1-1: device descriptor read/8, error -71 [ 868.680839][ T5889] usb usb1-port1: unable to enumerate USB device [ 868.836968][T12888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.375671][T12934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 870.263000][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.263076][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.234892][T12952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.301224][T12967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.656017][ T5916] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 873.844240][ T5916] usb 10-1: Using ep0 maxpacket: 8 [ 873.848896][ T5916] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.848920][ T5916] usb 10-1: config 0 has no interfaces? [ 873.848950][ T5916] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 873.848972][ T5916] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.904970][ T5916] usb 10-1: config 0 descriptor?? [ 875.300053][T13011] overlayfs: failed to resolve './file1': -2 [ 875.576162][ T31] IPVS: starting estimator thread 0... [ 875.784349][T13013] IPVS: using max 7 ests per chain, 16800 per kthread [ 876.487176][ T5889] usb 10-1: USB disconnect, device number 29 [ 877.847380][T13042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.017620][T13054] comedi comedi3: pcl726: I/O port conflict (0x4f29,16) [ 878.124378][ T5916] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 878.276860][ T5916] usb 10-1: Using ep0 maxpacket: 32 [ 878.279311][ T5916] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 878.279326][ T5916] usb 10-1: config 0 has no interface number 0 [ 878.279355][ T5916] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 878.279369][ T5916] usb 10-1: config 0 interface 85 has no altsetting 0 [ 878.281957][ T5916] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 878.281973][ T5916] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.281984][ T5916] usb 10-1: Product: syz [ 878.281991][ T5916] usb 10-1: Manufacturer: syz [ 878.281998][ T5916] usb 10-1: SerialNumber: syz [ 878.288191][ T5916] usb 10-1: config 0 descriptor?? [ 878.496931][ T5916] appletouch 10-1:0.85: Failed to read mode from device. [ 878.497168][ T5916] appletouch 10-1:0.85: probe with driver appletouch failed with error -5 [ 879.725585][ T5916] usb 10-1: USB disconnect, device number 30 [ 880.200321][T13073] overlayfs: failed to clone lowerpath [ 880.416658][T13074] overlayfs: failed to clone upperpath [ 881.844653][ T8942] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 882.284354][ T8942] usb 10-1: Using ep0 maxpacket: 8 [ 882.291525][ T8942] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.291551][ T8942] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 882.291587][ T8942] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 882.291609][ T8942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.425743][ T8942] usb 10-1: config 0 descriptor?? [ 883.719003][T13111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 884.105998][ T5881] usb 10-1: USB disconnect, device number 31 [ 884.403852][T13119] comedi comedi3: pcl726: I/O port conflict (0x4f29,16) [ 887.762324][ T5881] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 888.085350][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 888.089860][ T5881] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 888.089886][ T5881] usb 1-1: config 0 has no interface number 0 [ 888.089942][ T5881] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 888.089969][ T5881] usb 1-1: config 0 interface 85 has no altsetting 0 [ 888.156066][ T5881] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 888.156095][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.156114][ T5881] usb 1-1: Product: syz [ 888.156127][ T5881] usb 1-1: Manufacturer: syz [ 888.156141][ T5881] usb 1-1: SerialNumber: syz [ 888.171913][T13159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 888.230912][ T5881] usb 1-1: config 0 descriptor?? [ 888.456955][ T5881] appletouch 1-1:0.85: Failed to read mode from device. [ 888.457187][ T5881] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 888.900754][ T5881] usb 1-1: USB disconnect, device number 19 [ 892.418876][T13184] ALSA: mixer_oss: invalid OSS volume '017777777777777777777770xffffff' [ 894.558961][T13216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.814251][ T5889] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 895.944280][ T5889] usb 10-1: device descriptor read/64, error -71 [ 896.186971][ T5889] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 896.344190][ T5889] usb 10-1: device descriptor read/64, error -71 [ 896.458539][ T5889] usb usb10-port1: attempt power cycle [ 896.495814][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 896.562784][T13188] syz.0.2005 (13188): drop_caches: 2 [ 896.961094][ T5889] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 896.975266][ T5889] usb 10-1: device descriptor read/8, error -71 [ 897.954271][ T5889] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 897.994501][ T5889] usb 10-1: device descriptor read/8, error -71 [ 898.080430][T13274] overlayfs: failed to clone upperpath [ 898.105144][ T5889] usb usb10-port1: unable to enumerate USB device [ 900.485491][T13288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.834265][ T5881] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 900.985770][ T5881] usb 7-1: Using ep0 maxpacket: 8 [ 901.002737][ T5881] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 901.019424][ T5881] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 901.019443][ T5881] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 901.019453][ T5881] usb 7-1: Product: syz [ 901.019461][ T5881] usb 7-1: Manufacturer: syz [ 901.019468][ T5881] usb 7-1: SerialNumber: syz [ 901.263154][ T5881] usb 7-1: Handspring Visor / Palm OS: No valid connect info available [ 901.263179][ T5881] usb 7-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 901.263198][ T5881] usb 7-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 901.263215][ T5881] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2 [ 902.165003][ T5881] usb 7-1: palm_os_3_probe - error -110 getting bytes available request [ 902.165086][ T5881] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 902.190894][ T5881] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 902.215869][ T5881] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 902.425696][ T5881] usb 7-1: USB disconnect, device number 39 [ 902.449647][ T5881] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 902.478028][ T5881] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 902.491774][ T5881] visor 7-1:1.0: device disconnected [ 903.057384][T11924] Bluetooth: hci0: command 0x0406 tx timeout [ 907.811829][T13353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.046500][ T8832] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 909.204249][ T8832] usb 10-1: Using ep0 maxpacket: 32 [ 909.206936][ T8832] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 909.206963][ T8832] usb 10-1: config 0 has no interface number 0 [ 909.207017][ T8832] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 909.207043][ T8832] usb 10-1: config 0 interface 85 has no altsetting 0 [ 909.209680][ T8832] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 909.209707][ T8832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.209726][ T8832] usb 10-1: Product: syz [ 909.209741][ T8832] usb 10-1: Manufacturer: syz [ 909.209754][ T8832] usb 10-1: SerialNumber: syz [ 909.291864][ T8832] usb 10-1: config 0 descriptor?? [ 909.708766][ T8832] appletouch 10-1:0.85: Geyser mode initialized. [ 909.788401][ T8832] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input11 [ 909.971332][ T8832] usb 10-1: USB disconnect, device number 36 [ 910.013228][T13388] No control pipe specified [ 910.067582][ T8832] appletouch 10-1:0.85: input: appletouch disconnected [ 910.208085][T13391] tipc: Enabling of bearer rejected, failed to enable media [ 911.050464][ C1] vkms_vblank_simulate: vblank timer overrun [ 911.352474][T13406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 912.638589][ C1] vkms_vblank_simulate: vblank timer overrun [ 912.709486][T13433] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 912.709776][T13433] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 912.962458][ C1] vkms_vblank_simulate: vblank timer overrun [ 913.191780][ C1] vkms_vblank_simulate: vblank timer overrun [ 913.220302][T13339] IPVS: starting estimator thread 0... [ 913.383542][ C1] vkms_vblank_simulate: vblank timer overrun [ 913.789998][T13436] IPVS: using max 8 ests per chain, 19200 per kthread [ 914.045018][T13442] tipc: Enabling of bearer rejected, failed to enable media [ 914.532278][ C1] vkms_vblank_simulate: vblank timer overrun [ 914.967975][ T5917] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 915.557081][ C1] vkms_vblank_simulate: vblank timer overrun [ 915.752550][ C1] vkms_vblank_simulate: vblank timer overrun [ 915.942478][T13466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.954200][ T5917] usb 10-1: Using ep0 maxpacket: 32 [ 915.956820][ T5917] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 915.956839][ T5917] usb 10-1: config 0 has no interface number 0 [ 915.956869][ T5917] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 915.956883][ T5917] usb 10-1: config 0 interface 85 has no altsetting 0 [ 915.961391][ T5917] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 915.961417][ T5917] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.961437][ T5917] usb 10-1: Product: syz [ 915.961451][ T5917] usb 10-1: Manufacturer: syz [ 915.961465][ T5917] usb 10-1: SerialNumber: syz [ 916.041435][ T5917] usb 10-1: config 0 descriptor?? [ 916.945668][ C1] vkms_vblank_simulate: vblank timer overrun [ 916.986735][ T5917] appletouch 10-1:0.85: Geyser mode initialized. [ 917.038190][ T5917] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input12 [ 917.201235][ T5889] usb 10-1: USB disconnect, device number 37 [ 918.343495][ C1] vkms_vblank_simulate: vblank timer overrun [ 918.402708][ T5889] appletouch 10-1:0.85: input: appletouch disconnected [ 919.100161][T13500] tipc: Enabling of bearer rejected, failed to enable media [ 919.466367][T13509] overlayfs: failed to clone upperpath [ 921.674474][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.820319][ C1] vkms_vblank_simulate: vblank timer overrun [ 922.954193][ T8942] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 923.002379][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.029229][T13529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 923.685701][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.702590][ T8942] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 923.702605][ T8942] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 923.703524][ T8942] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 923.703538][ T8942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 923.703548][ T8942] usb 1-1: SerialNumber: syz [ 923.989355][ T8942] usb 1-1: 0:2 : does not exist [ 923.989441][ T8942] usb 1-1: unit 5 not found! [ 924.107589][ T8942] usb 1-1: USB disconnect, device number 20 [ 924.215192][T13551] autofs: Bad value for 'fd' [ 924.304849][T11743] udevd[11743]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 924.778435][ C1] vkms_vblank_simulate: vblank timer overrun [ 924.900168][ C1] vkms_vblank_simulate: vblank timer overrun [ 925.872020][ C1] vkms_vblank_simulate: vblank timer overrun [ 927.969930][ C1] vkms_vblank_simulate: vblank timer overrun [ 928.253885][T13588] autofs: Bad value for 'fd' [ 929.141995][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.474282][ T8942] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 931.636961][ T8942] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 931.636989][ T8942] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 931.639008][ T8942] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 931.639654][ T8942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 931.642441][ T8942] usb 1-1: SerialNumber: syz [ 931.705080][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.705151][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.928494][ T8942] usb 1-1: 0:2 : does not exist [ 931.928544][ T8942] usb 1-1: unit 5 not found! [ 932.015708][ T8942] usb 1-1: USB disconnect, device number 21 [ 932.305546][T11743] udevd[11743]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 932.884911][T13641] autofs: Bad value for 'fd' [ 933.119134][ C0] vkms_vblank_simulate: vblank timer overrun [ 933.756175][ C0] vkms_vblank_simulate: vblank timer overrun [ 933.923624][T13636] ALSA: mixer_oss: invalid OSS volume '017777777777777777777770xffffff' [ 934.025630][T13650] overlayfs: failed to clone upperpath [ 934.284277][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 934.321545][T13642] syz.6.2121 (13642): drop_caches: 2 [ 934.518574][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 934.588835][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.588860][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 934.595430][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 934.595457][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.595475][ T31] usb 1-1: Product: syz [ 934.595489][ T31] usb 1-1: Manufacturer: syz [ 934.595503][ T31] usb 1-1: SerialNumber: syz [ 934.940295][ T31] usb 1-1: 0:2 : does not exist [ 934.961561][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 935.086070][ T31] usb 1-1: USB disconnect, device number 22 [ 935.169657][T11743] udevd[11743]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 935.919790][ T5813] Bluetooth: hci0: Invalid handle: 0x7830 > 0x0eff [ 936.255547][T13661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 936.754524][ C0] vkms_vblank_simulate: vblank timer overrun [ 936.821485][ T10] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 937.014701][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 937.755299][ C0] vkms_vblank_simulate: vblank timer overrun [ 937.771034][ T10] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 937.771061][ T10] usb 10-1: config 0 has no interface number 0 [ 937.771111][ T10] usb 10-1: config 0 interface 196 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 937.771137][ T10] usb 10-1: config 0 interface 196 has no altsetting 0 [ 937.817006][ T10] usb 10-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 937.817035][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.817054][ T10] usb 10-1: Product: syz [ 937.817069][ T10] usb 10-1: Manufacturer: syz [ 937.817083][ T10] usb 10-1: SerialNumber: syz [ 937.873879][ T10] usb 10-1: config 0 descriptor?? [ 938.165907][ T10] ipheth 10-1:0.196: Unable to find alternate settings interface [ 938.205921][ T10] usb 10-1: USB disconnect, device number 38 [ 938.447408][T13703] tipc: Enabling of bearer rejected, failed to enable media [ 938.577118][T13710] fuse: Bad value for 'group_id' [ 938.577139][T13710] fuse: Bad value for 'group_id' [ 939.416374][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.965990][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.010895][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.305445][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.401669][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.300011][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.326724][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.689003][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.806857][ C0] vkms_vblank_simulate: vblank timer overrun [ 943.326255][ C0] vkms_vblank_simulate: vblank timer overrun [ 943.379588][T13759] tipc: Enabling of bearer rejected, failed to enable media [ 943.639595][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.388042][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.566227][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.874201][ T49] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 945.024124][ T49] usb 10-1: Using ep0 maxpacket: 8 [ 945.029578][ T49] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 945.029607][ T49] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.029626][ T49] usb 10-1: Product: syz [ 945.029639][ T49] usb 10-1: Manufacturer: syz [ 945.029652][ T49] usb 10-1: SerialNumber: syz [ 945.073718][ T49] usb 10-1: config 0 descriptor?? [ 945.092126][ T49] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 947.652195][ T49] gspca_sonixj: i2c_w8 err -110 [ 947.745450][ T49] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 950.376293][ T49] usb 10-1: USB disconnect, device number 39 [ 950.587682][T13809] tipc: Enabling of bearer rejected, failed to enable media [ 957.859026][T13867] tipc: Enabling of bearer rejected, failed to enable media [ 959.982467][ C0] vkms_vblank_simulate: vblank timer overrun [ 960.436192][ C0] vkms_vblank_simulate: vblank timer overrun [ 960.496463][ T49] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 960.952036][ C0] vkms_vblank_simulate: vblank timer overrun [ 961.024672][ T49] usb 1-1: device descriptor read/64, error -71 [ 961.264229][ T49] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 961.424685][ T49] usb 1-1: device descriptor read/64, error -71 [ 961.513620][ C0] vkms_vblank_simulate: vblank timer overrun [ 961.536141][ T49] usb usb1-port1: attempt power cycle [ 962.582330][ C0] vkms_vblank_simulate: vblank timer overrun [ 962.689340][ C0] vkms_vblank_simulate: vblank timer overrun [ 962.874253][ T49] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 962.905579][ T49] usb 1-1: device descriptor read/8, error -71 [ 963.184277][ T49] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 963.214882][ T49] usb 1-1: device descriptor read/8, error -71 [ 963.525155][ T49] usb usb1-port1: unable to enumerate USB device [ 963.775168][T13897] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 963.775433][T13897] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 964.830782][T13901] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2199'. [ 964.831472][T13901] netlink: 'syz.6.2199': attribute type 10 has an invalid length. [ 964.831489][T13901] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2199'. [ 964.831538][T13901] team0: entered promiscuous mode [ 964.831554][T13901] team_slave_0: entered promiscuous mode [ 964.831821][T13901] team_slave_1: entered promiscuous mode [ 964.832405][T13901] bridge0: port 3(team0) entered blocking state [ 964.832648][T13901] bridge0: port 3(team0) entered disabled state [ 964.832893][T13901] team0: entered allmulticast mode [ 964.832907][T13901] team_slave_0: entered allmulticast mode [ 964.832925][T13901] team_slave_1: entered allmulticast mode [ 964.837508][T13901] bridge0: port 3(team0) entered blocking state [ 964.837662][T13901] bridge0: port 3(team0) entered forwarding state [ 965.116251][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2199'. [ 965.116341][T13901] team0: left allmulticast mode [ 965.116357][T13901] team_slave_0: left allmulticast mode [ 965.116376][T13901] team_slave_1: left allmulticast mode [ 965.117741][T13901] bridge0: port 3(team0) entered disabled state [ 965.425961][T13901] bridge_slave_1: left allmulticast mode [ 965.425989][T13901] bridge_slave_1: left promiscuous mode [ 965.427003][T13901] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.559606][T13901] bridge_slave_0: left allmulticast mode [ 965.559636][T13901] bridge_slave_0: left promiscuous mode [ 965.559895][T13901] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.664217][ T8942] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 965.819145][ T8942] usb 10-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 965.819166][ T8942] usb 10-1: config 0 interface 0 has no altsetting 0 [ 965.819186][ T8942] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 965.819197][ T8942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.813927][ T8942] usb 10-1: config 0 descriptor?? [ 967.004473][T13905] tipc: Enabling of bearer rejected, failed to enable media [ 968.683582][ T5813] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 969.115061][ T5916] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 969.245609][ T5916] usb 1-1: device descriptor read/64, error -71 [ 969.494473][ T5916] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 969.626023][ T5916] usb 1-1: device descriptor read/64, error -71 [ 969.734903][ T5916] usb usb1-port1: attempt power cycle [ 970.096402][T13947] overlayfs: failed to clone lowerpath [ 970.272625][T13948] overlayfs: failed to clone upperpath [ 970.805168][ T5916] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 970.913436][ T5916] usb 1-1: device descriptor read/8, error -71 [ 971.154257][ T5916] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 971.177219][ T5916] usb 1-1: device descriptor read/8, error -71 [ 971.291124][ T5916] usb usb1-port1: unable to enumerate USB device [ 972.294249][ T8942] usbhid 10-1:0.0: can't add hid device: -32 [ 972.294383][ T8942] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 975.836897][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 976.114910][ T8942] usb 10-1: USB disconnect, device number 40 [ 976.404163][ T5917] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 977.540758][ T5917] usb 7-1: Using ep0 maxpacket: 32 [ 977.575871][ T5917] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 977.575888][ T5917] usb 7-1: config 0 has no interface number 0 [ 977.575917][ T5917] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 977.575931][ T5917] usb 7-1: config 0 interface 85 has no altsetting 0 [ 977.580767][ T5917] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 977.580785][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.580797][ T5917] usb 7-1: Product: syz [ 977.580804][ T5917] usb 7-1: Manufacturer: syz [ 977.580811][ T5917] usb 7-1: SerialNumber: syz [ 978.298896][ T5917] usb 7-1: config 0 descriptor?? [ 979.188159][ T5917] appletouch 7-1:0.85: Geyser mode initialized. [ 979.202590][ T5917] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input13 [ 979.630598][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.793956][ T5917] usb 7-1: USB disconnect, device number 40 [ 980.456028][ T5917] appletouch 7-1:0.85: input: appletouch disconnected [ 980.744449][ T49] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 980.914311][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 980.916767][ T49] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 980.916796][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.921877][ C0] vkms_vblank_simulate: vblank timer overrun [ 981.015210][ T49] usb 1-1: config 0 descriptor?? [ 981.268059][ T49] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 981.357995][ T49] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 981.359574][ T49] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 981.359609][ T49] usb 1-1: media controller created [ 981.453568][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 981.766613][ C0] vkms_vblank_simulate: vblank timer overrun [ 982.654125][ C0] vkms_vblank_simulate: vblank timer overrun [ 982.710434][ T49] az6027: usb out operation failed. (-71) [ 982.711531][ T49] az6027: usb out operation failed. (-71) [ 982.711547][ T49] stb0899_attach: Driver disabled by Kconfig [ 982.711556][ T49] az6027: no front-end attached [ 982.711556][ T49] [ 982.745917][ T49] az6027: usb out operation failed. (-71) [ 982.745936][ T49] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 982.750101][ T49] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 982.789159][ T49] dvb-usb: schedule remote query interval to 400 msecs. [ 982.789180][ T49] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 982.816126][ T49] usb 1-1: USB disconnect, device number 31 [ 982.960821][ C0] vkms_vblank_simulate: vblank timer overrun [ 983.206349][ C0] vkms_vblank_simulate: vblank timer overrun [ 983.406561][ C0] vkms_vblank_simulate: vblank timer overrun [ 983.618208][ C0] vkms_vblank_simulate: vblank timer overrun [ 984.452146][ C0] vkms_vblank_simulate: vblank timer overrun [ 985.367916][ T49] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 985.388598][T14061] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 985.509235][T14055] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 985.509267][T14055] overlayfs: failed to set xattr on upper [ 985.509275][T14055] overlayfs: ...falling back to redirect_dir=nofollow. [ 985.509283][T14055] overlayfs: ...falling back to index=off. [ 985.509290][T14055] overlayfs: ...falling back to uuid=null. [ 985.513511][T14062] comedi comedi3: das16m1: I/O port conflict (0x4f2a,16) [ 985.764236][ T49] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 986.273242][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.314676][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 987.027191][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.352191][ T49] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 987.352221][ T49] usb 1-1: config 0 has no interface number 0 [ 987.370591][ T49] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 987.370621][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.370639][ T49] usb 1-1: Product: syz [ 987.370652][ T49] usb 1-1: Manufacturer: syz [ 987.370665][ T49] usb 1-1: SerialNumber: syz [ 987.396113][ T49] usb 1-1: config 0 descriptor?? [ 987.409047][ T49] smsc95xx v2.0.0 [ 987.616445][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.286184][T14088] syz.6.2254 (14088) used greatest stack depth: 15760 bytes left [ 988.462774][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.654699][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.199871][ T49] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 989.199900][ T49] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 989.201986][ T49] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 989.202183][ T49] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 989.263415][ T49] usb 1-1: USB disconnect, device number 32 [ 990.290300][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.281984][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.282057][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.976706][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.735398][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.842901][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.900399][T14158] syzkaller0: entered promiscuous mode [ 996.900423][T14158] syzkaller0: entered allmulticast mode [ 997.133873][T14164] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 997.384933][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.275442][T13950] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 998.367258][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.550469][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.861128][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.544111][T13950] usb 10-1: Using ep0 maxpacket: 16 [ 999.546486][T13950] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 999.546511][T13950] usb 10-1: config 0 has no interface number 0 [ 999.557501][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.752379][T13950] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 999.752408][T13950] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.752426][T13950] usb 10-1: Product: syz [ 999.752441][T13950] usb 10-1: Manufacturer: syz [ 999.752453][T13950] usb 10-1: SerialNumber: syz [ 999.801451][T13950] usb 10-1: config 0 descriptor?? [ 999.838101][T13950] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1001.318334][T13950] gspca_spca1528: reg_w err -110 [ 1001.344206][T13950] spca1528 10-1:0.1: probe with driver spca1528 failed with error -110 [ 1001.541592][ T31] usb 10-1: USB disconnect, device number 41 [ 1004.039908][T14220] syzkaller0: entered promiscuous mode [ 1004.039924][T14220] syzkaller0: entered allmulticast mode [ 1004.133860][T14221] netlink: 'syz.3.2295': attribute type 1 has an invalid length. [ 1004.133873][T14221] netlink: 'syz.3.2295': attribute type 2 has an invalid length. [ 1004.244536][T14224] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1004.404120][ T8942] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1004.544216][ T8942] usb 1-1: device descriptor read/64, error -71 [ 1004.882511][T14213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1004.935815][ T8942] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1005.435050][ T8942] usb 1-1: device descriptor read/64, error -71 [ 1005.804918][ T8942] usb usb1-port1: attempt power cycle [ 1006.245400][ T8942] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1006.284988][ T8942] usb 1-1: device descriptor read/8, error -71 [ 1006.337660][ T49] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1006.501905][ T49] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.501932][ T49] usb 10-1: config 0 has no interfaces? [ 1006.505090][ T49] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1006.505117][ T49] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.505136][ T49] usb 10-1: Product: syz [ 1006.505150][ T49] usb 10-1: Manufacturer: syz [ 1006.505162][ T49] usb 10-1: SerialNumber: syz [ 1006.512341][ T49] usb 10-1: config 0 descriptor?? [ 1006.667025][ T8942] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1006.693158][ T8942] usb 1-1: device descriptor read/8, error -71 [ 1008.985758][ T8942] usb usb1-port1: unable to enumerate USB device [ 1011.132942][ T5916] usb 10-1: USB disconnect, device number 42 [ 1011.787387][ C1] vkms_vblank_simulate: vblank timer overrun [ 1012.330509][ C1] vkms_vblank_simulate: vblank timer overrun [ 1013.307729][ C1] vkms_vblank_simulate: vblank timer overrun [ 1013.996719][ C1] vkms_vblank_simulate: vblank timer overrun [ 1014.714127][T13950] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1015.189336][ C1] vkms_vblank_simulate: vblank timer overrun [ 1015.204612][ T31] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1015.697869][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.697897][ T31] usb 1-1: config 0 has no interfaces? [ 1015.701015][ T31] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1015.701043][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.701063][ T31] usb 1-1: Product: syz [ 1015.701077][ T31] usb 1-1: Manufacturer: syz [ 1015.701091][ T31] usb 1-1: SerialNumber: syz [ 1015.894121][T13950] usb 7-1: Using ep0 maxpacket: 8 [ 1016.025976][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.032342][ T31] usb 1-1: config 0 descriptor?? [ 1016.186482][T13950] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1016.186511][T13950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.186531][T13950] usb 7-1: Product: syz [ 1016.186544][T13950] usb 7-1: Manufacturer: syz [ 1016.186559][T13950] usb 7-1: SerialNumber: syz [ 1016.202739][T13950] usb 7-1: config 0 descriptor?? [ 1016.598298][T13950] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1016.790321][ C1] vkms_vblank_simulate: vblank timer overrun [ 1017.102440][ C1] vkms_vblank_simulate: vblank timer overrun [ 1017.505635][ C1] vkms_vblank_simulate: vblank timer overrun [ 1018.149492][ C1] vkms_vblank_simulate: vblank timer overrun [ 1018.170247][T13950] gspca_sonixj: reg_r err -32 [ 1018.170342][T13950] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 1018.621118][ C1] vkms_vblank_simulate: vblank timer overrun [ 1018.778695][ C1] vkms_vblank_simulate: vblank timer overrun [ 1019.001522][ C1] vkms_vblank_simulate: vblank timer overrun [ 1019.077607][ T31] usb 7-1: USB disconnect, device number 41 [ 1019.181176][T14342] overlayfs: failed to clone upperpath [ 1019.310907][ C1] vkms_vblank_simulate: vblank timer overrun [ 1019.316725][T13339] usb 1-1: USB disconnect, device number 37 [ 1019.944458][T14348] Falling back ldisc for ptm1. [ 1019.994211][T14346] misc userio: Invalid payload size [ 1019.998762][T14346] misc userio: No port type given on /dev/userio [ 1019.999870][T14346] misc userio: The device must be registered before sending interrupts [ 1020.503523][ C1] vkms_vblank_simulate: vblank timer overrun [ 1021.778826][ C1] vkms_vblank_simulate: vblank timer overrun [ 1022.081701][ C1] vkms_vblank_simulate: vblank timer overrun [ 1022.477467][ C1] vkms_vblank_simulate: vblank timer overrun [ 1022.752506][ T10] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1022.904524][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1022.906878][ T10] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1022.906904][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.913349][ T10] usb 7-1: config 0 descriptor?? [ 1023.318961][ C1] vkms_vblank_simulate: vblank timer overrun [ 1024.125369][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1024.135607][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1024.157342][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1024.157399][ T10] usb 7-1: media controller created [ 1024.244192][ T31] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1024.273625][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1024.529889][ C1] vkms_vblank_simulate: vblank timer overrun [ 1024.605111][ T31] usb 9-1: Using ep0 maxpacket: 16 [ 1024.623213][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1024.628487][ T10] az6027: usb out operation failed. (-71) [ 1024.628889][ T10] az6027: usb out operation failed. (-71) [ 1024.628901][ T10] stb0899_attach: Driver disabled by Kconfig [ 1024.628927][ T10] az6027: no front-end attached [ 1024.628927][ T10] [ 1024.629312][ T10] az6027: usb out operation failed. (-71) [ 1024.629328][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1024.632771][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input15 [ 1024.647939][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1024.647995][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1025.179978][ C1] vkms_vblank_simulate: vblank timer overrun [ 1025.216597][ T10] usb 7-1: USB disconnect, device number 42 [ 1025.251797][ T31] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1025.251826][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.251889][ T31] usb 9-1: Product: syz [ 1025.251903][ T31] usb 9-1: Manufacturer: syz [ 1025.251914][ T31] usb 9-1: SerialNumber: syz [ 1025.318082][ T31] usb 9-1: config 0 descriptor?? [ 1025.346124][ T31] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1025.346162][ T31] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1025.687015][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1025.815264][ T5916] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1025.964207][ T5916] usb 10-1: Using ep0 maxpacket: 32 [ 1025.990741][ T5916] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 1025.990979][ T5916] usb 10-1: config 0 has no interface number 0 [ 1025.991027][ T5916] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1025.991053][ T5916] usb 10-1: config 0 interface 85 has no altsetting 0 [ 1026.088004][ T5916] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1026.088033][ T5916] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.088052][ T5916] usb 10-1: Product: syz [ 1026.088066][ T5916] usb 10-1: Manufacturer: syz [ 1026.088080][ T5916] usb 10-1: SerialNumber: syz [ 1027.062649][T14396] misc userio: Invalid payload size [ 1027.063365][T14396] misc userio: No port type given on /dev/userio [ 1027.311540][ T31] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1027.785408][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.843373][ T5916] usb 10-1: config 0 descriptor?? [ 1027.948855][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.980721][ T31] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1027.980753][ T31] em28xx 9-1:0.0: board has no eeprom [ 1028.074563][ T31] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1028.074608][ T31] em28xx 9-1:0.0: dvb set to bulk mode. [ 1028.075381][ T991] em28xx 9-1:0.0: Binding DVB extension [ 1028.298672][ T10] usb 9-1: USB disconnect, device number 45 [ 1028.314704][ T10] em28xx 9-1:0.0: Disconnecting em28xx [ 1028.643295][T14393] syzkaller0: entered promiscuous mode [ 1028.643361][T14393] syzkaller0: entered allmulticast mode [ 1028.646786][ C1] vkms_vblank_simulate: vblank timer overrun [ 1028.684507][ T5916] appletouch 10-1:0.85: Geyser mode initialized. [ 1028.848309][ T991] em28xx 9-1:0.0: Registering input extension [ 1028.848706][ T5916] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input16 [ 1028.852659][ T10] em28xx 9-1:0.0: Closing input extension [ 1028.978212][ T5916] usb 10-1: USB disconnect, device number 43 [ 1028.978320][ C0] appletouch 10-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1029.114402][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.209630][ T10] em28xx 9-1:0.0: Freeing device [ 1029.278755][ T5916] appletouch 10-1:0.85: input: appletouch disconnected [ 1029.326464][ T37] audit: type=1326 audit(1760237667.387:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14412 comm="syz.0.2356" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e75aceec9 code=0x0 [ 1029.330412][T14415] No control pipe specified [ 1029.360097][ C1] vkms_vblank_simulate: vblank timer overrun [ 1030.649170][ C1] vkms_vblank_simulate: vblank timer overrun [ 1030.719193][ C1] vkms_vblank_simulate: vblank timer overrun [ 1030.789361][ C1] vkms_vblank_simulate: vblank timer overrun [ 1031.017367][ C1] vkms_vblank_simulate: vblank timer overrun [ 1031.089123][T13339] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1031.120751][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.212566][T13339] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.212592][T13339] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1032.259545][T13339] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1032.259574][T13339] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1032.259595][T13339] usb 10-1: SerialNumber: syz [ 1032.271377][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.319543][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.319757][ T31] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1032.421530][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.518969][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.527562][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.527588][ T31] usb 1-1: config 0 has no interfaces? [ 1032.530975][ T31] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1032.531001][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.531019][ T31] usb 1-1: Product: syz [ 1032.531033][ T31] usb 1-1: Manufacturer: syz [ 1032.531046][ T31] usb 1-1: SerialNumber: syz [ 1032.595379][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.611311][T13339] usb 10-1: 0:2 : does not exist [ 1032.662099][ T31] usb 1-1: config 0 descriptor?? [ 1032.738183][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.741522][T13339] usb 10-1: USB disconnect, device number 44 [ 1032.871303][ C1] vkms_vblank_simulate: vblank timer overrun [ 1034.082191][T11743] udevd[11743]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1034.171445][ C1] vkms_vblank_simulate: vblank timer overrun [ 1034.241531][ C1] vkms_vblank_simulate: vblank timer overrun [ 1034.341468][ C1] vkms_vblank_simulate: vblank timer overrun [ 1034.409552][ C1] vkms_vblank_simulate: vblank timer overrun [ 1034.458370][ C1] vkms_vblank_simulate: vblank timer overrun [ 1034.508368][ C1] vkms_vblank_simulate: vblank timer overrun [ 1034.610049][ C1] vkms_vblank_simulate: vblank timer overrun [ 1034.657781][ C1] vkms_vblank_simulate: vblank timer overrun [ 1034.738888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1034.953370][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.059133][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.109064][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.161493][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.288809][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.304170][ T5916] usb 1-1: USB disconnect, device number 38 [ 1035.469103][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.519823][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.568445][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.997281][T14445] misc userio: Invalid payload size [ 1036.001543][T14445] misc userio: No port type given on /dev/userio [ 1036.467980][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.722329][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.788053][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.942956][T14456] No control pipe specified [ 1037.118776][ C1] vkms_vblank_simulate: vblank timer overrun [ 1037.175426][ C1] vkms_vblank_simulate: vblank timer overrun [ 1037.270172][ C1] vkms_vblank_simulate: vblank timer overrun [ 1037.515395][ C1] vkms_vblank_simulate: vblank timer overrun [ 1037.664073][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.123774][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.168323][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.287693][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.367932][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.422124][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.455616][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.655923][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.698631][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.774217][ T5889] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1039.858563][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.905083][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.937961][ T5889] usb 9-1: Using ep0 maxpacket: 32 [ 1040.100726][ C1] vkms_vblank_simulate: vblank timer overrun [ 1040.118247][ T5889] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1040.118274][ T5889] usb 9-1: config 0 has no interface number 0 [ 1040.120675][ T5889] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1040.120696][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.120707][ T5889] usb 9-1: Product: syz [ 1040.120714][ T5889] usb 9-1: Manufacturer: syz [ 1040.120721][ T5889] usb 9-1: SerialNumber: syz [ 1041.104923][ T5889] usb 9-1: config 0 descriptor?? [ 1041.118887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.128516][ T5889] smsc95xx v2.0.0 [ 1041.214604][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.268469][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.320129][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.410684][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.435306][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.469243][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.501735][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.621112][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.890297][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.891778][ T5889] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1041.891804][ T5889] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1041.918911][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.001011][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.093872][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.139619][ T5889] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1042.139916][ T5889] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1042.157566][ T5889] usb 9-1: USB disconnect, device number 46 [ 1042.535890][T11924] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1042.575388][T11924] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1042.582036][T11924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1042.626064][T11924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1042.627029][T11924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1044.734298][ T5813] Bluetooth: hci4: command tx timeout [ 1044.807859][T14491] No control pipe specified [ 1044.856472][ C0] vkms_vblank_simulate: vblank timer overrun [ 1044.921084][ C0] vkms_vblank_simulate: vblank timer overrun [ 1045.001664][ C0] vkms_vblank_simulate: vblank timer overrun [ 1045.036637][ C0] vkms_vblank_simulate: vblank timer overrun [ 1045.115944][ C0] vkms_vblank_simulate: vblank timer overrun [ 1045.189332][ C0] vkms_vblank_simulate: vblank timer overrun [ 1045.535958][ C0] vkms_vblank_simulate: vblank timer overrun [ 1045.638399][ C0] vkms_vblank_simulate: vblank timer overrun [ 1045.686007][ C0] vkms_vblank_simulate: vblank timer overrun [ 1045.818658][ C0] vkms_vblank_simulate: vblank timer overrun [ 1045.906406][ C0] vkms_vblank_simulate: vblank timer overrun [ 1045.950490][ C0] vkms_vblank_simulate: vblank timer overrun [ 1046.002202][ C0] vkms_vblank_simulate: vblank timer overrun [ 1046.041662][ C0] vkms_vblank_simulate: vblank timer overrun [ 1046.090435][ C0] vkms_vblank_simulate: vblank timer overrun [ 1046.367170][ C0] vkms_vblank_simulate: vblank timer overrun [ 1046.502568][ C0] vkms_vblank_simulate: vblank timer overrun [ 1047.524152][ T5813] Bluetooth: hci4: command tx timeout [ 1047.652628][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.886788][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.987420][ C0] vkms_vblank_simulate: vblank timer overrun [ 1049.069339][ C0] vkms_vblank_simulate: vblank timer overrun [ 1049.554204][ C0] vkms_vblank_simulate: vblank timer overrun [ 1049.554345][ T5813] Bluetooth: hci4: command tx timeout [ 1049.640234][ C0] vkms_vblank_simulate: vblank timer overrun [ 1049.738098][ C0] vkms_vblank_simulate: vblank timer overrun [ 1051.614258][ T5813] Bluetooth: hci4: command tx timeout [ 1052.152280][T14519] IPVS: set_ctl: invalid protocol: 2 100.1.1.0:20004 [ 1052.539606][T11924] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1052.564271][T11924] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1052.569329][T11924] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1052.625300][T11924] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1052.626237][T11924] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1053.188741][T11924] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1053.220567][T11924] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1053.222503][T11924] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1053.262961][T11924] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1053.264805][T11924] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1054.228080][T14530] process 'syz.8.2392' launched './file2' with NULL argv: empty string added [ 1054.604606][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.604649][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.752123][ T5813] Bluetooth: hci5: command tx timeout [ 1055.396340][ T5813] Bluetooth: hci6: command tx timeout [ 1057.054955][ T5813] Bluetooth: hci5: command tx timeout [ 1057.454108][ T5813] Bluetooth: hci6: command tx timeout [ 1058.857796][ T6117] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.120089][ C0] vkms_vblank_simulate: vblank timer overrun [ 1059.134150][ T5813] Bluetooth: hci5: command tx timeout [ 1059.670337][ C0] vkms_vblank_simulate: vblank timer overrun [ 1060.049731][ T5813] Bluetooth: hci6: command tx timeout [ 1060.251239][ C0] vkms_vblank_simulate: vblank timer overrun [ 1060.371707][ T6117] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.678354][ T6117] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.774122][ T5889] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1060.924281][ T5889] usb 9-1: Using ep0 maxpacket: 32 [ 1060.926520][ T5889] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 1060.926545][ T5889] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.926563][ T5889] usb 9-1: config 0 has no interface number 0 [ 1060.926610][ T5889] usb 9-1: config 0 interface 196 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1060.926636][ T5889] usb 9-1: config 0 interface 196 has no altsetting 0 [ 1060.929309][ T5889] usb 9-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1060.929333][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.929351][ T5889] usb 9-1: Product: syz [ 1060.929364][ T5889] usb 9-1: Manufacturer: syz [ 1060.929377][ T5889] usb 9-1: SerialNumber: syz [ 1060.956841][ C0] vkms_vblank_simulate: vblank timer overrun [ 1061.018953][ C0] vkms_vblank_simulate: vblank timer overrun [ 1061.151424][ T5889] usb 9-1: config 0 descriptor?? [ 1061.354794][ T5813] Bluetooth: hci5: command tx timeout [ 1061.555814][ T5889] usb 9-1: USB disconnect, device number 47 [ 1061.839915][ C0] vkms_vblank_simulate: vblank timer overrun [ 1061.890947][ T6117] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.094917][ T5813] Bluetooth: hci6: command tx timeout [ 1062.398822][T14522] chnl_net:caif_netlink_parms(): no params data found [ 1062.565299][T14476] chnl_net:caif_netlink_parms(): no params data found [ 1062.820947][ C0] vkms_vblank_simulate: vblank timer overrun [ 1062.883650][ C0] vkms_vblank_simulate: vblank timer overrun [ 1062.998967][ C0] vkms_vblank_simulate: vblank timer overrun [ 1063.078703][T14526] chnl_net:caif_netlink_parms(): no params data found [ 1063.305514][ C0] vkms_vblank_simulate: vblank timer overrun [ 1064.516814][T14595] Bluetooth: hci3: command 0x0406 tx timeout [ 1066.030352][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.122187][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.312651][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.441430][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.512014][T14631] overlayfs: failed to clone upperpath [ 1066.546541][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.652689][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.773420][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.836860][ C0] vkms_vblank_simulate: vblank timer overrun [ 1068.467167][ C0] vkms_vblank_simulate: vblank timer overrun [ 1068.598644][ C0] vkms_vblank_simulate: vblank timer overrun [ 1068.668280][ C0] vkms_vblank_simulate: vblank timer overrun [ 1068.690494][ T37] audit: type=1326 audit(1760237706.757:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14648 comm="syz.8.2426" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56d276eec9 code=0x0 [ 1068.855222][ C0] vkms_vblank_simulate: vblank timer overrun [ 1069.672784][ C0] vkms_vblank_simulate: vblank timer overrun [ 1069.717057][ C0] vkms_vblank_simulate: vblank timer overrun [ 1069.800378][ C0] vkms_vblank_simulate: vblank timer overrun [ 1070.005750][ T6117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.188592][ C0] vkms_vblank_simulate: vblank timer overrun [ 1070.232110][ C0] vkms_vblank_simulate: vblank timer overrun [ 1070.265016][ T6117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.316536][ C0] vkms_vblank_simulate: vblank timer overrun [ 1070.377045][ T6117] bond0 (unregistering): Released all slaves [ 1070.521608][ C0] vkms_vblank_simulate: vblank timer overrun [ 1070.600454][ T6117] tipc: Left network mode [ 1070.632705][ C0] vkms_vblank_simulate: vblank timer overrun [ 1070.700651][ C0] vkms_vblank_simulate: vblank timer overrun [ 1070.704137][ T5889] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1070.791327][T14522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.791452][T14522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.791580][T14522] bridge_slave_0: entered allmulticast mode [ 1070.793074][T14522] bridge_slave_0: entered promiscuous mode [ 1070.864094][ T5889] usb 9-1: Using ep0 maxpacket: 32 [ 1070.865836][ T5889] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 1070.865860][ T5889] usb 9-1: config 0 has no interface number 0 [ 1070.865899][ T5889] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1070.865913][ T5889] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1070.868787][ T5889] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1070.868812][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.868824][ T5889] usb 9-1: Product: syz [ 1070.868831][ T5889] usb 9-1: Manufacturer: syz [ 1070.868838][ T5889] usb 9-1: SerialNumber: syz [ 1070.871940][ T5889] usb 9-1: config 0 descriptor?? [ 1071.114294][ T5889] radio-si470x 9-1:0.35: this is not a si470x device. [ 1071.144530][ T5889] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 1071.165129][ T5889] usb 9-1: USB disconnect, device number 48 [ 1071.186063][T14513] udevd[14513]: setting mode of /dev/bus/usb/009/048 to 020664 failed: No such file or directory [ 1071.186294][T14513] udevd[14513]: setting owner of /dev/bus/usb/009/048 to uid=0, gid=0 failed: No such file or directory [ 1071.668211][ C0] vkms_vblank_simulate: vblank timer overrun [ 1071.670650][T14522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.670802][T14522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.671063][T14522] bridge_slave_1: entered allmulticast mode [ 1071.701731][T14522] bridge_slave_1: entered promiscuous mode [ 1071.764967][ C0] vkms_vblank_simulate: vblank timer overrun [ 1071.767100][T14476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.767233][T14476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.767469][T14476] bridge_slave_0: entered allmulticast mode [ 1071.780370][T14476] bridge_slave_0: entered promiscuous mode [ 1072.197167][T14476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.197306][T14476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.197496][T14476] bridge_slave_1: entered allmulticast mode [ 1072.200350][T14476] bridge_slave_1: entered promiscuous mode [ 1072.392118][ C0] vkms_vblank_simulate: vblank timer overrun [ 1073.064765][ C0] vkms_vblank_simulate: vblank timer overrun [ 1073.165628][ C0] vkms_vblank_simulate: vblank timer overrun [ 1073.463013][ C0] vkms_vblank_simulate: vblank timer overrun [ 1073.676348][ C0] vkms_vblank_simulate: vblank timer overrun [ 1074.085933][T14526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.094250][T14526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.094504][T14526] bridge_slave_0: entered allmulticast mode [ 1074.117399][T14526] bridge_slave_0: entered promiscuous mode [ 1074.253371][T14522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.254416][T14526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.254548][T14526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.254759][T14526] bridge_slave_1: entered allmulticast mode [ 1074.258825][T14526] bridge_slave_1: entered promiscuous mode [ 1074.279352][T14476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.397514][T14522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1074.399506][T14476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1074.492620][T14697] overlayfs: failed to clone lowerpath [ 1074.536760][T14697] overlayfs: failed to clone upperpath [ 1074.597014][ T6117] hsr_slave_0: left promiscuous mode [ 1074.654328][ T6117] hsr_slave_1: left promiscuous mode [ 1074.655507][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.655532][ T6117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.679503][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.679529][ T6117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.781170][ T6117] veth1_macvtap: left promiscuous mode [ 1074.781285][ T6117] veth0_macvtap: left promiscuous mode [ 1074.781549][ T6117] veth1_vlan: left promiscuous mode [ 1074.781742][ T6117] veth0_vlan: left promiscuous mode [ 1075.617328][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.684862][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.777357][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.321323][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.769512][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.069659][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.354790][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.410831][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.508253][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.786412][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.895168][ C0] vkms_vblank_simulate: vblank timer overrun [ 1078.536530][T14733] overlayfs: failed to resolve './file0': -2 [ 1079.192108][ C0] vkms_vblank_simulate: vblank timer overrun [ 1079.544592][ C0] vkms_vblank_simulate: vblank timer overrun [ 1080.466600][ C0] vkms_vblank_simulate: vblank timer overrun [ 1080.624314][ C0] vkms_vblank_simulate: vblank timer overrun [ 1080.927077][ C0] vkms_vblank_simulate: vblank timer overrun [ 1081.374755][ C0] vkms_vblank_simulate: vblank timer overrun [ 1081.528569][ C0] vkms_vblank_simulate: vblank timer overrun [ 1081.641464][ C0] vkms_vblank_simulate: vblank timer overrun [ 1081.713162][T14751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1081.757651][ C0] vkms_vblank_simulate: vblank timer overrun [ 1081.825039][ C0] vkms_vblank_simulate: vblank timer overrun [ 1081.918084][ C0] vkms_vblank_simulate: vblank timer overrun [ 1081.973989][ C0] vkms_vblank_simulate: vblank timer overrun [ 1082.084238][ T5888] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1082.273217][ C0] vkms_vblank_simulate: vblank timer overrun [ 1082.274120][ T5888] usb 9-1: Using ep0 maxpacket: 32 [ 1082.277948][ T5888] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 1082.277969][ T5888] usb 9-1: config 0 has no interface number 0 [ 1082.278015][ T5888] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1082.278040][ T5888] usb 9-1: config 0 interface 85 has no altsetting 0 [ 1082.307813][ T5888] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1082.307840][ T5888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.307858][ T5888] usb 9-1: Product: syz [ 1082.307871][ T5888] usb 9-1: Manufacturer: syz [ 1082.307891][ T5888] usb 9-1: SerialNumber: syz [ 1082.322920][ T5888] usb 9-1: config 0 descriptor?? [ 1082.798523][T14759] overlayfs: failed to resolve './file0': -2 [ 1083.461315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1083.588617][ T6117] team_slave_1 (unregistering): left promiscuous mode [ 1083.627537][ T6117] team0 (unregistering): Port device team_slave_1 removed [ 1083.691384][ T5888] appletouch 9-1:0.85: Geyser mode initialized. [ 1083.703004][ T5888] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input18 [ 1083.740129][ C0] vkms_vblank_simulate: vblank timer overrun [ 1084.412532][ C0] vkms_vblank_simulate: vblank timer overrun [ 1084.631613][ C0] vkms_vblank_simulate: vblank timer overrun [ 1084.640513][ T10] usb 9-1: USB disconnect, device number 49 [ 1084.708107][ C0] vkms_vblank_simulate: vblank timer overrun [ 1084.964926][ T6117] team_slave_0 (unregistering): left promiscuous mode [ 1084.966838][ T10] appletouch 9-1:0.85: input: appletouch disconnected [ 1085.050272][ C0] vkms_vblank_simulate: vblank timer overrun [ 1085.644576][ C0] vkms_vblank_simulate: vblank timer overrun [ 1085.961342][ T6117] team0 (unregistering): Port device team_slave_0 removed [ 1086.221680][ C0] vkms_vblank_simulate: vblank timer overrun [ 1086.717441][ C1] vkms_vblank_simulate: vblank timer overrun [ 1086.807877][ C1] vkms_vblank_simulate: vblank timer overrun [ 1086.933044][ C1] vkms_vblank_simulate: vblank timer overrun [ 1087.200654][ C1] vkms_vblank_simulate: vblank timer overrun [ 1087.251180][ C1] vkms_vblank_simulate: vblank timer overrun [ 1088.197032][ C1] vkms_vblank_simulate: vblank timer overrun [ 1088.263857][ T8942] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1088.484162][ T8942] usb 9-1: device descriptor read/64, error -71 [ 1088.600262][ C1] vkms_vblank_simulate: vblank timer overrun [ 1088.764793][T14789] overlayfs: failed to resolve './file0': -2 [ 1088.767043][ C1] vkms_vblank_simulate: vblank timer overrun [ 1088.924994][ C1] vkms_vblank_simulate: vblank timer overrun [ 1089.398869][ C1] vkms_vblank_simulate: vblank timer overrun [ 1089.459548][ C1] vkms_vblank_simulate: vblank timer overrun [ 1089.578804][ T8942] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1089.704253][ T8942] usb 9-1: device descriptor read/64, error -71 [ 1089.734784][ C1] vkms_vblank_simulate: vblank timer overrun [ 1089.814641][ T8942] usb usb9-port1: attempt power cycle [ 1090.010792][ C1] vkms_vblank_simulate: vblank timer overrun [ 1090.961097][ C1] vkms_vblank_simulate: vblank timer overrun [ 1091.027748][ C1] vkms_vblank_simulate: vblank timer overrun [ 1091.036718][ T8942] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1091.092372][ T8942] usb 9-1: device descriptor read/8, error -71 [ 1091.267130][ C1] vkms_vblank_simulate: vblank timer overrun [ 1091.325778][ C1] vkms_vblank_simulate: vblank timer overrun [ 1091.582686][ C1] vkms_vblank_simulate: vblank timer overrun [ 1091.766022][T14810] IPVS: set_ctl: invalid protocol: 2 100.1.1.0:20004 [ 1091.971034][ C1] vkms_vblank_simulate: vblank timer overrun [ 1093.461920][ C0] vkms_vblank_simulate: vblank timer overrun [ 1093.677976][ C0] vkms_vblank_simulate: vblank timer overrun [ 1094.528641][ C0] vkms_vblank_simulate: vblank timer overrun [ 1094.640677][ C0] vkms_vblank_simulate: vblank timer overrun [ 1094.681680][ C0] vkms_vblank_simulate: vblank timer overrun [ 1094.763600][ C0] vkms_vblank_simulate: vblank timer overrun [ 1094.825858][ T8942] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1094.964221][ T8942] usb 9-1: device descriptor read/64, error -71 [ 1095.009873][ C0] vkms_vblank_simulate: vblank timer overrun [ 1095.089777][ C0] vkms_vblank_simulate: vblank timer overrun [ 1095.224125][ T8942] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1095.354213][ T8942] usb 9-1: device descriptor read/64, error -71 [ 1095.466416][ T8942] usb usb9-port1: attempt power cycle [ 1095.824125][ T8942] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1095.845547][ T8942] usb 9-1: device descriptor read/8, error -71 [ 1096.051750][T14526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.095278][ T8942] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1096.116443][ T8942] usb 9-1: device descriptor read/8, error -71 [ 1096.264254][ T8942] usb usb9-port1: unable to enumerate USB device [ 1096.269991][ T8942] ================================================================== [ 1096.270007][ T8942] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1096.270038][ T8942] Read of size 8 at addr ffffc9000e2d9008 by task kworker/0:2/8942 [ 1096.270054][ T8942] [ 1096.270076][ T8942] CPU: 0 UID: 0 PID: 8942 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1096.270098][ T8942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1096.270112][ T8942] Workqueue: usb_hub_wq hub_event [ 1096.270145][ T8942] Call Trace: [ 1096.270156][ T8942] [ 1096.270164][ T8942] dump_stack_lvl+0x189/0x250 [ 1096.270190][ T8942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1096.270211][ T8942] ? __pfx__printk+0x10/0x10 [ 1096.270232][ T8942] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1096.270260][ T8942] ? __virt_addr_valid+0xdc/0x5c0 [ 1096.270281][ T8942] ? __virt_addr_valid+0xdc/0x5c0 [ 1096.270310][ T8942] print_report+0xca/0x240 [ 1096.270335][ T8942] ? __list_add_valid_or_report+0x4e/0x130 [ 1096.270354][ T8942] kasan_report+0x118/0x150 [ 1096.270376][ T8942] ? __list_add_valid_or_report+0x4e/0x130 [ 1096.270402][ T8942] __list_add_valid_or_report+0x4e/0x130 [ 1096.270425][ T8942] kcov_remote_stop+0x52d/0x660 [ 1096.270448][ T8942] hub_event+0x45d2/0x4a20 [ 1096.270491][ T8942] ? __pfx_hub_event+0x10/0x10 [ 1096.270508][ T8942] ? process_scheduled_works+0x9ef/0x17b0 [ 1096.270538][ T8942] ? _raw_spin_unlock_irq+0x23/0x50 [ 1096.270563][ T8942] ? process_scheduled_works+0x9ef/0x17b0 [ 1096.270588][ T8942] ? process_scheduled_works+0x9ef/0x17b0 [ 1096.270615][ T8942] process_scheduled_works+0xae1/0x17b0 [ 1096.270654][ T8942] ? __pfx_process_scheduled_works+0x10/0x10 [ 1096.270689][ T8942] worker_thread+0x8a0/0xda0 [ 1096.270707][ T8942] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1096.270737][ T8942] ? __kthread_parkme+0x7b/0x200 [ 1096.270761][ T8942] kthread+0x711/0x8a0 [ 1096.270783][ T8942] ? __pfx_worker_thread+0x10/0x10 [ 1096.270800][ T8942] ? __pfx_kthread+0x10/0x10 [ 1096.270818][ T8942] ? rt_spin_unlock+0x150/0x200 [ 1096.270842][ T8942] ? rt_spin_unlock+0x161/0x200 [ 1096.270862][ T8942] ? __pfx_kthread+0x10/0x10 [ 1096.270883][ T8942] ret_from_fork+0x4bc/0x870 [ 1096.270910][ T8942] ? __pfx_ret_from_fork+0x10/0x10 [ 1096.270939][ T8942] ? __switch_to_asm+0x39/0x70 [ 1096.270961][ T8942] ? __switch_to_asm+0x33/0x70 [ 1096.270983][ T8942] ? __pfx_kthread+0x10/0x10 [ 1096.271004][ T8942] ret_from_fork_asm+0x1a/0x30 [ 1096.271035][ T8942] [ 1096.271042][ T8942] [ 1096.271047][ T8942] The buggy address belongs to a vmalloc virtual mapping [ 1096.271065][ T8942] Memory state around the buggy address: [ 1096.271075][ T8942] ffffc9000e2d8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1096.271088][ T8942] ffffc9000e2d8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1096.271100][ T8942] >ffffc9000e2d9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1096.271115][ T8942] ^ [ 1096.271125][ T8942] ffffc9000e2d9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1096.271137][ T8942] ffffc9000e2d9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1096.271147][ T8942] ================================================================== [ 1096.271169][ T8942] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1096.271182][ T8942] CPU: 0 UID: 0 PID: 8942 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1096.271203][ T8942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1096.271215][ T8942] Workqueue: usb_hub_wq hub_event [ 1096.271232][ T8942] Call Trace: [ 1096.271239][ T8942] [ 1096.271246][ T8942] dump_stack_lvl+0x99/0x250 [ 1096.271267][ T8942] ? __asan_memcpy+0x40/0x70 [ 1096.271295][ T8942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1096.271317][ T8942] ? __pfx__printk+0x10/0x10 [ 1096.271343][ T8942] vpanic+0x237/0x6d0 [ 1096.271361][ T8942] ? __pfx_vpanic+0x10/0x10 [ 1096.271383][ T8942] panic+0xb9/0xc0 [ 1096.271400][ T8942] ? __pfx_panic+0x10/0x10 [ 1096.271418][ T8942] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1096.271444][ T8942] ? lockdep_hardirqs_on+0x9c/0x150 [ 1096.271473][ T8942] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1096.271501][ T8942] ? __list_add_valid_or_report+0x4e/0x130 [ 1096.271522][ T8942] check_panic_on_warn+0x89/0xb0 [ 1096.271543][ T8942] ? __list_add_valid_or_report+0x4e/0x130 [ 1096.271565][ T8942] end_report+0x78/0x160 [ 1096.271583][ T8942] kasan_report+0x129/0x150 [ 1096.271603][ T8942] ? __list_add_valid_or_report+0x4e/0x130 [ 1096.271629][ T8942] __list_add_valid_or_report+0x4e/0x130 [ 1096.271652][ T8942] kcov_remote_stop+0x52d/0x660 [ 1096.271674][ T8942] hub_event+0x45d2/0x4a20 [ 1096.271716][ T8942] ? __pfx_hub_event+0x10/0x10 [ 1096.271733][ T8942] ? process_scheduled_works+0x9ef/0x17b0 [ 1096.271762][ T8942] ? _raw_spin_unlock_irq+0x23/0x50 [ 1096.271787][ T8942] ? process_scheduled_works+0x9ef/0x17b0 [ 1096.271812][ T8942] ? process_scheduled_works+0x9ef/0x17b0 [ 1096.271839][ T8942] process_scheduled_works+0xae1/0x17b0 [ 1096.271878][ T8942] ? __pfx_process_scheduled_works+0x10/0x10 [ 1096.271913][ T8942] worker_thread+0x8a0/0xda0 [ 1096.271931][ T8942] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1096.271961][ T8942] ? __kthread_parkme+0x7b/0x200 [ 1096.271985][ T8942] kthread+0x711/0x8a0 [ 1096.272006][ T8942] ? __pfx_worker_thread+0x10/0x10 [ 1096.272023][ T8942] ? __pfx_kthread+0x10/0x10 [ 1096.272042][ T8942] ? rt_spin_unlock+0x150/0x200 [ 1096.272066][ T8942] ? rt_spin_unlock+0x161/0x200 [ 1096.272086][ T8942] ? __pfx_kthread+0x10/0x10 [ 1096.272107][ T8942] ret_from_fork+0x4bc/0x870 [ 1096.272134][ T8942] ? __pfx_ret_from_fork+0x10/0x10 [ 1096.272162][ T8942] ? __switch_to_asm+0x39/0x70 [ 1096.272184][ T8942] ? __switch_to_asm+0x33/0x70 [ 1096.272206][ T8942] ? __pfx_kthread+0x10/0x10 [ 1096.272227][ T8942] ret_from_fork_asm+0x1a/0x30 [ 1096.272258][ T8942] [ 1096.272537][ T8942] Kernel Offset: disabled