last executing test programs: 15m15.263526915s ago: executing program 0 (id=704): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080), 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x24008084) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 15m12.356857049s ago: executing program 0 (id=713): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r2, 0x6000000) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x227, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) socket$inet_smc(0x2b, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) 15m8.447119354s ago: executing program 0 (id=718): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x8, 0x0, @value=0x100000000001013}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000b1e000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0xe1}], 0x1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/190, 0xbe}, {&(0x7f0000000500)=""/101, 0x65}], 0x2}, 0x2140) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x1, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15m7.647004765s ago: executing program 0 (id=721): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[]) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 15m7.423954843s ago: executing program 0 (id=723): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20]) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x2, 0x0, 0x48) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f00000000c0)=0x58, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) gettid() timer_create(0x3, 0x0, &(0x7f0000044000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15m6.623882144s ago: executing program 0 (id=725): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100008ddfb240490b4f06fdd40102030109021b0001000000"], 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setuid(0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900"], 0x4c}}, 0x40000) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 15m5.648778234s ago: executing program 32 (id=725): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100008ddfb240490b4f06fdd40102030109021b0001000000"], 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setuid(0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900"], 0x4c}}, 0x40000) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 12m12.141279406s ago: executing program 3 (id=1020): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000340)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x6, 0xffffffffffffffff}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0x18, 0x10}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x270c40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x804) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10000000000002, 0x9, 0xffbffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1003, 0x8000000000000000, 0xc595, 0xa, 0x1, 0x9, 0x8000000000000001, 0x5, 0x8d], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m10.688153098s ago: executing program 3 (id=1024): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000c00) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r1, 0x400000000000007c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x1, 0x3, 0x2, 0x3c}, 0x20) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xe1) close_range(r0, 0xffffffffffffffff, 0x0) 12m10.15059567s ago: executing program 3 (id=1026): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b", 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) sendmsg$sock(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000019c0)="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", 0x5de}], 0x1}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="260f882b000000430f1bd9460f2355c402d1aa045af2440f07460f01c566baf80cb8b0439287ef66bafc0ced430f01bf470000003ef3410fc7720248b80b83f09c6f777d3a0f23d00f21f835000000080f23f8", 0x53}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000000)={0xf0000000, 0x79d}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12m8.991921133s ago: executing program 3 (id=1027): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 12m8.744770447s ago: executing program 3 (id=1028): timer_create(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, 0x0, 0x0) timerfd_gettime(r3, &(0x7f0000000780)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000000000000a6c00080006810b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002ffffffff0000000040000000150900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a000000000000"], 0x94}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback={0x2000000}, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x800) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3d, 0x4}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xfffffffff7ff8518]}, 0xffffffffffffffff, 0x0, 0x8) syz_open_dev$evdev(&(0x7f0000000100), 0x2d, 0x6a141) 12m7.768008263s ago: executing program 3 (id=1031): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r2, 0x6000000) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x227, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) syz_emit_ethernet(0x2e, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = socket$inet_smc(0x2b, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[]}, 0x78) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) 12m6.274710162s ago: executing program 33 (id=1031): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r2, 0x6000000) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x227, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) syz_emit_ethernet(0x2e, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = socket$inet_smc(0x2b, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[]}, 0x78) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) 2m34.380160379s ago: executing program 2 (id=2062): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 2m34.28770181s ago: executing program 4 (id=2065): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 2m33.319475321s ago: executing program 2 (id=2067): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) dup2(r3, r3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) ioctl$BLKTRACESETUP(r3, 0xc0481273, 0x0) 2m31.508742211s ago: executing program 4 (id=2070): socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x8, 0x5, 0x0, 0x0, @irqchip={0x100081c, 0x4}}]}) socket$tipc(0x1e, 0x7, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a056300000000000001"], 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) 2m31.250395241s ago: executing program 2 (id=2073): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000500)={0xfffffddf}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) 2m22.102859997s ago: executing program 6 (id=2086): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r3, &(0x7f0000000900), 0x0, 0x4008044, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)='i', 0x1) sendto$inet(r3, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 2m20.394385378s ago: executing program 1 (id=2088): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x2, @loopback}, 0x10) r1 = memfd_secret(0x0) ftruncate(r1, 0x51a9497) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_open_procfs(0x0, 0x0) syz_open_dev$video(0x0, 0x4a6, 0x4420c2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x200000, 0x0, 0x10}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0xfffffffd, 0x7eac0, 0x3d3b4e}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 2m20.393114105s ago: executing program 6 (id=2089): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r6, 0x808a}, {r6, 0x408}], 0x2, 0x6) syz_open_dev$audion(&(0x7f00000003c0), 0x3, 0x54000) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"/492], 0x1d8}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000000400)={0xa8, 0x0, 0x2}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc10c5541, &(0x7f0000000040)) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, &(0x7f00000001c0)={0x14, &(0x7f0000000480)=ANY=[@ANYRES64], 0x0}, 0x0) syz_usb_control_io$printer(r7, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x21, 0x1c, {0x1c, 0x3, "d3c449f803eee5d8c03748e3786d60ea3e26a249d7aa00000000"}}, &(0x7f0000000140)={0x0, 0x3, 0x29, @string={0x29, 0x3, "840e0a04dc24b39dbb2ea69161adf899d334122cd95254223a8a2899a5bfe068f741de757229cd"}}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) 2m18.687526188s ago: executing program 4 (id=2092): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@hyper}) r1 = signalfd4(r0, 0x0, 0x0, 0x80800) write$FUSE_NOTIFY_DELETE(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 2m18.611484044s ago: executing program 2 (id=2094): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff6734", 0xb}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0xb4, 0xa, 0xb2b9, 0x26, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x5000, 0x1, 0x48, 0x100d, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe76b, 0x16, 0x2, 0xfffffff8, 0x401, 0xfffffff5, 0x405, 0xdb9, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x40000002, 0x7, 0x4, 0x7, 0x4, 0x4007f, 0xffffffff, 0x9], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xc66, 0xa8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x4, 0xa7, 0x1000, 0x0, 0x200b395, 0x5, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0xb14, 0x3, 0x8, 0xffffff7f, 0x402, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0x5, 0x5], [0x2, 0xfffffffe, 0xfffc, 0xc, 0x2, 0x2e6bf783, 0x5, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2008004, 0x1, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x1, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xbb3f, 0x1005, 0x1, 0x101, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xffbffff7, 0x8, 0x7, 0x5396, 0x939, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0xba7d, 0xfff, 0x0, 0x40000000000180, 0x8, 0x7fffffff, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m17.064750649s ago: executing program 4 (id=2096): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x1) fsmount(r0, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) 2m16.650375316s ago: executing program 4 (id=2097): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r3, 0x541b, 0x20000000) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcda) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r5, &(0x7f0000000000)='./file0\x00', 0x5) getpid() socket(0x2b, 0x1, 0x1) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="1c0012800b0001006970766c616e00000c000280060001000200000018ba67142bd854a83c7358a84c47772638d206d7ca129dfbcf71e48b4df5bc8c5359cf0aa672ef31f003f2fb0505c510184fc7bd3f8cb35cdcce18610a18a93e4b9f1f343b3105344a359cfc884b315d0f9c3a58e9f4692ad771e17a261abcf8fbdafbaa39014724c575f106679b8a68951d5b1bae6d870d7f59985199fefda6e8ec670d01e0a992c264bc69a57f47cd08e0134b044620f28f3f28fdc4a64b26d17ecfb929cd4a6087fce2e6517221776601245e35cf97b08f72916b7ecdf8891470785d2596c630a7b606397993fa28"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) 2m16.59187529s ago: executing program 2 (id=2098): socket$xdp(0x2c, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) shutdown(r3, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r2, 0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) close_range(0xffffffffffffffff, r4, 0x0) 2m15.005546911s ago: executing program 1 (id=2102): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FE_SET_TONE(r0, 0x6f42, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) write$binfmt_misc(r4, &(0x7f0000000000)='i', 0x1) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c9702", 0x5e, 0x0, 0x0, 0x0) 2m14.919131145s ago: executing program 5 (id=2103): socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x8, 0x5, 0x0, 0x0, @irqchip={0x100081c, 0x4}}]}) socket$tipc(0x1e, 0x7, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a05630000000000000109"], 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) 2m13.798107469s ago: executing program 1 (id=2104): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000140)={'vlan1\x00', @random="02000000002b"}) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2m13.358646795s ago: executing program 6 (id=2105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 2m13.295601372s ago: executing program 5 (id=2106): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000500)={0xfffffddf}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) 2m12.750291248s ago: executing program 1 (id=2107): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x227, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[]}, 0x78) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) 2m12.669494239s ago: executing program 5 (id=2108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) 2m12.403237274s ago: executing program 5 (id=2109): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0x200, 0x0) r5 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r6 = dup(r5) fanotify_mark(r4, 0x1, 0x48000046, r6, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000300000000000004000000080002000500000006"], 0x24}}, 0x0) 2m12.200013384s ago: executing program 6 (id=2110): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="8824", 0x2}], 0x1}, 0x45) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a80)="18", 0x1}], 0x1}, 0x20000001) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 2m11.526578641s ago: executing program 1 (id=2111): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x8, 0x0, @value=0x100000000001013}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000b1e000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0xe1}], 0x1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/190, 0xbe}, {&(0x7f0000000500)=""/101, 0x65}], 0x2}, 0x2140) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0), 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m11.258868113s ago: executing program 5 (id=2112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280), 0x0) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9) 2m11.218646961s ago: executing program 6 (id=2113): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FE_SET_TONE(r0, 0x6f42, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r4, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa", 0x59, 0x4008044, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x300, 0x0) 2m10.817863637s ago: executing program 5 (id=2114): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(0x0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)="00c9", 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x2, r0, 0x0}]) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m9.793264269s ago: executing program 6 (id=2115): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$sndseq(0xffffffffffffffff, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x801}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x3, 0x6, 0x6, @loopback, @local, 0x8, 0x7827, 0x3, 0x3}}) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r4, r4, 0x0, 0x4800000009) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m9.640295283s ago: executing program 1 (id=2116): socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x8, 0x5, 0x0, 0x0, @irqchip={0x100081c, 0x4}}]}) socket$tipc(0x1e, 0x7, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a05630000000000000109"], 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) 2m8.247871216s ago: executing program 2 (id=2117): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000140)={'vlan1\x00', @random="02000000002b"}) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2m7.270611679s ago: executing program 4 (id=2118): socket(0x2, 0x80805, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000001680)=0x1, 0x4) sendmmsg$inet6(r0, 0x0, 0x0, 0x20080058) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m53.91799597s ago: executing program 34 (id=2114): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(0x0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)="00c9", 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x2, r0, 0x0}]) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m49.709987932s ago: executing program 35 (id=2116): socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x8, 0x5, 0x0, 0x0, @irqchip={0x100081c, 0x4}}]}) socket$tipc(0x1e, 0x7, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a05630000000000000109"], 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) 21.237956258s ago: executing program 36 (id=2117): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000140)={'vlan1\x00', @random="02000000002b"}) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 0s ago: executing program 37 (id=2115): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$sndseq(0xffffffffffffffff, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x801}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x3, 0x6, 0x6, @loopback, @local, 0x8, 0x7827, 0x3, 0x3}}) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r4, r4, 0x0, 0x4800000009) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): sb_control_msg() failed=-71 [ 729.577653][ T9771] zl10353_read_register: readreg error (reg=127, ret==-71) [ 729.612404][ T9771] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 729.875287][ T9771] usb 2-1: USB disconnect, device number 21 [ 729.924764][ T5881] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 730.106394][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 730.111800][ T5881] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 730.139698][ T5881] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 730.139732][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.139754][ T5881] usb 3-1: Product: syz [ 730.139769][ T5881] usb 3-1: Manufacturer: syz [ 730.139784][ T5881] usb 3-1: SerialNumber: syz [ 730.207152][ T5881] usb 3-1: config 0 descriptor?? [ 730.223860][ T5881] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 731.884826][ T5881] gspca_zc3xx: reg_w_i err -110 [ 732.554688][ T5881] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 732.554768][ T5881] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 733.605198][ T5882] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 733.779225][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 733.785410][ T5882] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 733.785474][ T5882] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 733.785491][ T5882] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 733.785509][ T5882] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 733.785527][ T5882] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.785565][ T5882] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 733.785582][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.244677][ T5882] usb 2-1: GET_CAPABILITIES returned 0 [ 734.244735][ T5882] usbtmc 2-1:16.0: can't read capabilities [ 734.475253][ T9771] usb 2-1: USB disconnect, device number 22 [ 735.594869][ T9771] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 736.804661][ T9771] usb 7-1: Using ep0 maxpacket: 32 [ 736.874995][ T9771] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 736.875025][ T9771] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.875046][ T9771] usb 7-1: config 0 has no interface number 0 [ 736.875091][ T9771] usb 7-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 737.062889][ T9771] usb 7-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 737.062914][ T9771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.062928][ T9771] usb 7-1: Product: syz [ 737.062939][ T9771] usb 7-1: Manufacturer: syz [ 737.062950][ T9771] usb 7-1: SerialNumber: syz [ 737.129345][ T9771] usb 7-1: config 0 descriptor?? [ 737.150801][ T9771] hub 7-1:0.89: bad descriptor, ignoring hub [ 737.150842][ T9771] hub 7-1:0.89: probe with driver hub failed with error -5 [ 737.152774][ T9771] option 7-1:0.89: GSM modem (1-port) converter detected [ 737.451673][T10668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1126'. [ 737.452430][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 737.524777][ T5882] usb 7-1: USB disconnect, device number 2 [ 737.526645][ T5882] option 7-1:0.89: device disconnected [ 737.741525][ T9771] usb 3-1: USB disconnect, device number 33 [ 738.305280][T10678] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 738.954699][ T5941] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 739.124618][ T5941] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 739.124650][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.124670][ T5941] usb 7-1: Product: syz [ 739.124685][ T5941] usb 7-1: Manufacturer: syz [ 739.124700][ T5941] usb 7-1: SerialNumber: syz [ 739.171234][ T5941] usb 7-1: config 0 descriptor?? [ 739.554264][T10689] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1130'. [ 739.913080][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 739.916070][ T37] audit: type=1326 audit(1775622352.059:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10684 comm="syz.4.1131" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7fc778c819 code=0x0 [ 741.714764][ T37] audit: type=1326 audit(1775622353.859:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 741.714829][ T37] audit: type=1326 audit(1775622353.859:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 741.714877][ T37] audit: type=1326 audit(1775622353.859:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 741.714925][ T37] audit: type=1326 audit(1775622353.859:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 741.714969][ T37] audit: type=1326 audit(1775622353.859:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 741.720032][ T37] audit: type=1326 audit(1775622353.859:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a8a0cd04e code=0x7ffc0000 [ 741.720087][ T37] audit: type=1326 audit(1775622353.859:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a8a0cd04e code=0x7ffc0000 [ 741.720133][ T37] audit: type=1326 audit(1775622353.859:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 741.720181][ T37] audit: type=1326 audit(1775622353.859:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 743.306477][T10712] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 743.384606][ T5881] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 743.534781][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 743.567283][ T5881] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 743.567347][ T5881] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 743.567372][ T5881] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 743.567397][ T5881] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 743.567421][ T5881] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 743.567463][ T5881] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 743.567486][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.924759][ T5881] usb 2-1: GET_CAPABILITIES returned 0 [ 743.924809][ T5881] usbtmc 2-1:16.0: can't read capabilities [ 744.158389][ T5941] usb 2-1: USB disconnect, device number 23 [ 744.396933][ T9771] usb 7-1: USB disconnect, device number 3 [ 744.934682][ T9771] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 745.086230][ T9771] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 745.086253][ T9771] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 745.086267][ T9771] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.086281][ T9771] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 745.086306][ T9771] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 745.086339][ T9771] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 745.089005][ T9771] usb 7-1: string descriptor 0 read error: -22 [ 745.089110][ T9771] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 745.089128][ T9771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.092952][ T9771] usb 7-1: config 0 descriptor?? [ 745.096000][ T9771] hub 7-1:0.0: bad descriptor, ignoring hub [ 745.096038][ T9771] hub 7-1:0.0: probe with driver hub failed with error -5 [ 745.510976][T10728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.513091][T10728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.519284][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1138'. [ 745.523279][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1138'. [ 747.585019][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.585137][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.427338][T10748] random: crng reseeded on system resumption [ 750.524641][ T5874] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 750.674550][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 750.679543][ T5874] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 750.679574][ T5874] usb 5-1: config 0 has no interface number 0 [ 750.696940][ T5874] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 750.697036][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.697092][ T5874] usb 5-1: Product: syz [ 750.697122][ T5874] usb 5-1: Manufacturer: syz [ 750.697158][ T5874] usb 5-1: SerialNumber: syz [ 750.871528][ T5874] usb 5-1: config 0 descriptor?? [ 750.912712][ T5874] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 750.912734][ T5874] usb 5-1: selecting invalid altsetting 1 [ 750.912746][ T5874] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 750.973020][ T5874] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 750.973280][ T5874] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 750.973315][ T5874] usb 5-1: media controller created [ 751.035856][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 751.070416][ T9771] usb 7-1: USB disconnect, device number 4 [ 751.265965][ T5874] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 751.266027][ T5874] zl10353_read_register: readreg error (reg=127, ret==-71) [ 751.275098][ T5874] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 751.600708][ T5874] usb 5-1: USB disconnect, device number 24 [ 752.460033][T10773] sctp: [Deprecated]: syz.1.1149 (pid 10773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 752.460033][T10773] Use struct sctp_sack_info instead [ 756.070553][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 756.070586][ T37] audit: type=1326 audit(1775622368.219:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10787 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 756.070645][ T37] audit: type=1326 audit(1775622368.219:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10787 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 756.070692][ T37] audit: type=1326 audit(1775622368.219:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10787 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 756.104034][ T37] audit: type=1326 audit(1775622368.259:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10787 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 756.144701][ T37] audit: type=1326 audit(1775622368.269:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10787 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 756.144855][ T37] audit: type=1326 audit(1775622368.269:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10787 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 756.144978][ T37] audit: type=1326 audit(1775622368.259:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10787 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 756.145100][ T37] audit: type=1326 audit(1775622368.269:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10787 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 756.145222][ T37] audit: type=1326 audit(1775622368.279:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10787 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 756.145335][ T37] audit: type=1326 audit(1775622368.279:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10787 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 756.318745][ T5941] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 756.534867][ T5941] usb 7-1: Using ep0 maxpacket: 32 [ 756.537269][ T5941] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 756.537309][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.543408][ T5941] usb 7-1: config 0 descriptor?? [ 756.548905][ T5941] gspca_main: sunplus-2.14.0 probing 041e:400b [ 757.704096][T10798] sctp: [Deprecated]: syz.5.1156 (pid 10798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 757.704096][T10798] Use struct sctp_sack_info instead [ 758.008628][ T5941] gspca_sunplus: reg_w_riv err -110 [ 758.008703][ T5941] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 758.484971][T10431] usb 7-1: USB disconnect, device number 5 [ 761.456930][T10818] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1160'. [ 762.425013][T10832] random: crng reseeded on system resumption [ 763.624704][T10836] sctp: [Deprecated]: syz.4.1165 (pid 10836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 763.624704][T10836] Use struct sctp_sack_info instead [ 765.802496][T10848] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 765.933829][ T10] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 766.116508][ T10] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 766.116529][ T10] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 766.116544][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.116558][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 766.116585][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 766.116620][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 766.122871][ T10] usb 6-1: string descriptor 0 read error: -22 [ 766.122972][ T10] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 766.122990][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.248140][ T10] usb 6-1: config 0 descriptor?? [ 766.252971][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 766.253012][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 766.657196][T10852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.662755][T10852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.668335][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1167'. [ 766.672560][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1167'. [ 766.764548][ T9026] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 766.926771][ T9026] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 766.926795][ T9026] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 766.926809][ T9026] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.926823][ T9026] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 766.926864][ T9026] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 766.926892][ T9026] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 766.929998][ T9026] usb 3-1: string descriptor 0 read error: -22 [ 766.930096][ T9026] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 766.930113][ T9026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.933723][ T9026] usb 3-1: config 0 descriptor?? [ 767.282966][ T9026] hub 3-1:0.0: bad descriptor, ignoring hub [ 767.283009][ T9026] hub 3-1:0.0: probe with driver hub failed with error -5 [ 768.199306][T10859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.200383][T10859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.203894][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 768.283559][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 768.701833][T10864] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1170'. [ 768.702656][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1170'. [ 770.653126][T10878] sctp: [Deprecated]: syz.4.1174 (pid 10878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 770.653126][T10878] Use struct sctp_sack_info instead [ 770.924950][ T9026] usb 6-1: USB disconnect, device number 10 [ 771.884988][ T5882] usb 3-1: USB disconnect, device number 34 [ 772.236174][T10891] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1176'. [ 774.445868][ T37] kauditd_printk_skb: 202 callbacks suppressed [ 774.445891][ T37] audit: type=1326 audit(1775622386.589:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10896 comm="syz.2.1179" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b6724c819 code=0x0 [ 774.780677][T10905] random: crng reseeded on system resumption [ 775.434619][T10755] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 775.565586][T10755] usb 7-1: device descriptor read/64, error -71 [ 775.804714][T10755] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 775.934628][T10755] usb 7-1: device descriptor read/64, error -71 [ 776.184784][T10755] usb usb7-port1: attempt power cycle [ 776.834938][T10924] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1185'. [ 776.834945][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1185'. [ 776.904998][T10755] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 776.931809][T10755] usb 7-1: device descriptor read/8, error -71 [ 777.434660][T10755] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 777.455589][T10755] usb 7-1: device descriptor read/8, error -71 [ 777.569685][T10755] usb usb7-port1: unable to enumerate USB device [ 781.874678][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 782.054567][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 782.057074][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 782.057116][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 782.057132][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 782.057150][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 782.057171][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.057203][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 782.057224][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.295484][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 782.295520][ T10] usbtmc 2-1:16.0: can't read capabilities [ 782.525853][T10431] usb 2-1: USB disconnect, device number 24 [ 782.731111][T10960] sctp: [Deprecated]: syz.2.1192 (pid 10960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 782.731111][T10960] Use struct sctp_sack_info instead [ 783.805540][T10975] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1197'. [ 785.146402][ T10] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 785.304760][ T10] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 785.304792][ T10] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 785.304819][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.304833][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 785.304859][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 785.304887][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 785.308232][ T10] usb 6-1: string descriptor 0 read error: -22 [ 785.308362][ T10] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 785.308380][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.311863][ T10] usb 6-1: config 0 descriptor?? [ 785.356309][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 785.356349][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 785.690932][T10981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.691616][T10981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.697499][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1199'. [ 785.778745][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1199'. [ 790.077946][T11008] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 791.458873][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 791.592491][T11012] random: crng reseeded on system resumption [ 793.065200][ T10] usb 6-1: USB disconnect, device number 11 [ 795.091431][T11043] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 795.645783][T11054] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1213'. [ 795.734581][ T9026] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 795.788727][T11055] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1215'. [ 795.790035][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1215'. [ 795.928419][ T9026] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 795.928455][ T9026] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 795.928477][ T9026] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.928496][ T9026] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 795.928540][ T9026] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 795.928580][ T9026] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 795.934625][ T9026] usb 5-1: string descriptor 0 read error: -22 [ 795.934784][ T9026] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 795.934809][ T9026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.022897][ T9026] usb 5-1: config 0 descriptor?? [ 796.038866][ T9026] hub 5-1:0.0: bad descriptor, ignoring hub [ 796.038894][ T9026] hub 5-1:0.0: probe with driver hub failed with error -5 [ 796.478285][T11057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.479301][T11057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.482573][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'. [ 796.485049][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'. [ 799.214592][ T9026] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 799.378501][ T9026] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 799.378533][ T9026] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 799.378554][ T9026] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.378572][ T9026] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 799.378614][ T9026] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 799.378643][ T9026] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 799.383069][ T9026] usb 2-1: string descriptor 0 read error: -22 [ 799.383210][ T9026] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 799.383228][ T9026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.511018][ T9026] usb 2-1: config 0 descriptor?? [ 799.570360][ T9026] hub 2-1:0.0: bad descriptor, ignoring hub [ 799.570406][ T9026] hub 2-1:0.0: probe with driver hub failed with error -5 [ 800.064692][T11070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.065854][T11070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.135434][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 800.192303][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 801.849194][ T9026] usb 5-1: USB disconnect, device number 25 [ 802.824620][ T9026] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 803.009682][T11089] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1223'. [ 803.010539][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1223'. [ 803.053213][ T9026] usb 3-1: Using ep0 maxpacket: 8 [ 803.064550][ T9026] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 803.101193][ T9026] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 803.101226][ T9026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.101305][ T9026] usb 3-1: Product: syz [ 803.101322][ T9026] usb 3-1: Manufacturer: syz [ 803.101338][ T9026] usb 3-1: SerialNumber: syz [ 803.130092][ T9026] usb 3-1: config 0 descriptor?? [ 803.183220][ T9026] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 804.230462][ T9026] gspca_zc3xx: reg_w_i err -71 [ 804.814618][ T9026] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 804.814737][ T9026] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 804.860299][ T9026] usb 3-1: USB disconnect, device number 35 [ 805.725030][ T5866] usb 2-1: USB disconnect, device number 25 [ 806.150399][T11112] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1230'. [ 806.954024][T11114] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 807.428254][T10431] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 807.604559][T10431] usb 6-1: Using ep0 maxpacket: 8 [ 807.646889][T10431] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 807.646919][T10431] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 807.646969][T10431] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 807.646994][T10431] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.144839][T11125] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1233'. [ 808.146018][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1233'. [ 808.995460][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.995533][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.188045][ T5866] usb 6-1: USB disconnect, device number 12 [ 810.314556][T10431] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 810.634500][T10431] usb 7-1: Using ep0 maxpacket: 8 [ 810.636720][T10431] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 810.640575][T10431] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 810.640606][T10431] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.640625][T10431] usb 7-1: Product: syz [ 810.640639][T10431] usb 7-1: Manufacturer: syz [ 810.640652][T10431] usb 7-1: SerialNumber: syz [ 810.669381][T10431] usb 7-1: config 0 descriptor?? [ 811.526070][T10431] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 812.168643][T11148] sctp: [Deprecated]: syz.5.1238 (pid 11148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 812.168643][T11148] Use struct sctp_sack_info instead [ 812.549225][T10431] gspca_zc3xx: reg_w_i err -110 [ 812.892546][T11160] sctp: [Deprecated]: syz.4.1239 (pid 11160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 812.892546][T11160] Use struct sctp_sack_info instead [ 813.144634][T10431] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 813.144753][T10431] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 813.320213][ T5866] usb 7-1: USB disconnect, device number 10 [ 815.197046][ T37] audit: type=1326 audit(1775622427.359:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 815.197101][ T37] audit: type=1326 audit(1775622427.359:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 815.197138][ T37] audit: type=1326 audit(1775622427.359:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 815.197170][ T37] audit: type=1326 audit(1775622427.359:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 815.200269][ T37] audit: type=1326 audit(1775622427.359:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 815.200764][ T37] audit: type=1326 audit(1775622427.359:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 815.201733][ T37] audit: type=1326 audit(1775622427.359:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b6720d04e code=0x7ffc0000 [ 815.216147][ T37] audit: type=1326 audit(1775622427.379:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b6720d04e code=0x7ffc0000 [ 815.220665][ T37] audit: type=1326 audit(1775622427.379:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 815.224707][ T37] audit: type=1326 audit(1775622427.379:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 815.350452][T11168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 819.789066][T11211] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1252'. [ 825.536058][T10431] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 825.755203][T10431] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 825.755485][T10431] usb 7-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 825.756144][T10431] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.535967][T10431] usb 7-1: config 0 descriptor?? [ 826.539748][T11233] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 827.193296][T10431] hid (null): report_id 2022860571 is invalid [ 827.193315][T10431] hid (null): invalid report_size 12450 [ 827.314539][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 827.314558][ T37] audit: type=1326 audit(1775622439.469:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11241 comm="syz.1.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 827.340207][ T37] audit: type=1326 audit(1775622439.469:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11241 comm="syz.1.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 828.354227][T10431] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 828.354267][T10431] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 828.354296][T10431] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 828.354323][T10431] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 828.354350][T10431] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 829.554235][ T37] audit: type=1326 audit(1775622441.709:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11241 comm="syz.1.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 829.554477][ T37] audit: type=1326 audit(1775622441.709:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11241 comm="syz.1.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 829.819786][T11247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 829.838304][ T37] audit: type=1326 audit(1775622441.709:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11241 comm="syz.1.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 829.838777][T10431] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 829.838888][T10431] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 829.838997][T10431] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 829.839087][T10431] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 829.839156][T10431] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 830.105403][T11256] input: syz0 as /devices/virtual/input/input8 [ 830.880870][T10431] asus 0003:0B05:1ABE.000B: report_id 2022860571 is invalid [ 830.880900][T10431] asus 0003:0B05:1ABE.000B: item 0 4 1 8 parsing failed [ 830.905699][T10431] asus 0003:0B05:1ABE.000B: Asus hid parse failed: -22 [ 830.905842][T10431] asus 0003:0B05:1ABE.000B: probe with driver asus failed with error -22 [ 833.405312][ T9026] usb 7-1: USB disconnect, device number 11 [ 833.868124][T11275] Bluetooth: MGMT ver 1.23 [ 834.484585][T10755] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 834.634586][T10755] usb 5-1: Using ep0 maxpacket: 8 [ 834.636948][T10755] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 834.640227][T10755] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 834.640258][T10755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.640279][T10755] usb 5-1: Product: syz [ 834.640295][T10755] usb 5-1: Manufacturer: syz [ 834.640310][T10755] usb 5-1: SerialNumber: syz [ 834.655547][T10755] usb 5-1: config 0 descriptor?? [ 834.719262][T10755] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 835.806169][T10755] gspca_zc3xx: reg_w_i err -71 [ 836.514676][T10755] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 836.514789][T10755] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 836.521322][T10755] usb 5-1: USB disconnect, device number 26 [ 837.634568][ T5882] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 837.919813][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 838.290292][ T5882] usb 5-1: unable to get BOS descriptor or descriptor too short [ 838.291534][ T5882] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 838.291560][ T5882] usb 5-1: config 7 has an invalid descriptor of length 171, skipping remainder of the config [ 838.291582][ T5882] usb 5-1: config 7 has no interface number 0 [ 838.291626][ T5882] usb 5-1: config 7 interface 187 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 838.291658][ T5882] usb 5-1: config 7 interface 187 has no altsetting 0 [ 838.338655][ T5882] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 838.338754][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.338812][ T5882] usb 5-1: Product: syz [ 838.338849][ T5882] usb 5-1: Manufacturer: syz [ 838.338893][ T5882] usb 5-1: SerialNumber: syz [ 838.668702][ T5882] usb 5-1: Limiting number of CPorts to U8_MAX [ 838.671886][ T5882] usb 5-1: Not enough endpoints found in device, aborting! [ 838.881173][ T5941] usb 5-1: USB disconnect, device number 27 [ 841.474640][ T37] audit: type=1326 audit(1775622453.629:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11327 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc778c819 code=0x7ffc0000 [ 841.474691][ T37] audit: type=1326 audit(1775622453.629:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11327 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc778c819 code=0x7ffc0000 [ 841.507380][ T37] audit: type=1326 audit(1775622453.649:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11327 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7fc778c819 code=0x7ffc0000 [ 841.507613][ T37] audit: type=1326 audit(1775622453.649:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11327 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc778c819 code=0x7ffc0000 [ 841.507737][ T37] audit: type=1326 audit(1775622453.649:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11327 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7fc778c819 code=0x7ffc0000 [ 841.507931][ T37] audit: type=1326 audit(1775622453.649:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11327 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc778c819 code=0x7ffc0000 [ 841.508055][ T37] audit: type=1326 audit(1775622453.659:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11327 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7fc774d04e code=0x7ffc0000 [ 841.508178][ T37] audit: type=1326 audit(1775622453.659:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11327 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7fc774d04e code=0x7ffc0000 [ 841.508298][ T37] audit: type=1326 audit(1775622453.669:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11327 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc778c819 code=0x7ffc0000 [ 841.532996][ T37] audit: type=1326 audit(1775622453.669:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11327 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f7fc778c819 code=0x7ffc0000 [ 841.652842][T11332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 847.486684][ T37] kauditd_printk_skb: 31 callbacks suppressed [ 847.486699][ T37] audit: type=1326 audit(1775622459.649:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11357 comm="syz.4.1289" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7fc778c819 code=0x0 [ 848.242246][T11369] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1290'. [ 848.245347][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1290'. [ 848.395902][T11375] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1291'. [ 848.425121][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 855.632495][ T37] audit: type=1326 audit(1775622467.789:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11404 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 855.641666][ T37] audit: type=1326 audit(1775622467.789:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11404 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 855.641748][ T37] audit: type=1326 audit(1775622467.789:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11404 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 855.641795][ T37] audit: type=1326 audit(1775622467.799:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11404 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 855.641841][ T37] audit: type=1326 audit(1775622467.799:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11404 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 855.641887][ T37] audit: type=1326 audit(1775622467.799:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11404 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 855.641933][ T37] audit: type=1326 audit(1775622467.799:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11404 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a8a0cd04e code=0x7ffc0000 [ 855.641981][ T37] audit: type=1326 audit(1775622467.799:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11404 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a8a0cd04e code=0x7ffc0000 [ 855.642028][ T37] audit: type=1326 audit(1775622467.799:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11404 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 855.642073][ T37] audit: type=1326 audit(1775622467.799:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11404 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 856.763652][T11410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 858.227228][T11429] random: crng reseeded on system resumption [ 858.416610][ T5882] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 858.592602][ T5882] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 858.592632][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.592647][ T5882] usb 2-1: Product: syz [ 858.592658][ T5882] usb 2-1: Manufacturer: syz [ 858.592669][ T5882] usb 2-1: SerialNumber: syz [ 858.623536][ T5882] usb 2-1: config 0 descriptor?? [ 858.868474][ T5882] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 859.267114][ T5882] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 859.269714][ T5882] usb 2-1: USB disconnect, device number 26 [ 859.379149][T11435] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1306'. [ 862.500675][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 862.500698][ T37] audit: type=1800 audit(1775622474.659:1348): pid=11444 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1311" name="bus" dev="ramfs" ino=39319 res=0 errno=0 [ 862.889233][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1313'. [ 863.084628][ T9026] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 864.230862][ T9026] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 864.230885][ T9026] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 864.230900][ T9026] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.230914][ T9026] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 864.230941][ T9026] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 864.230969][ T9026] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 864.331767][ T9026] usb 5-1: string descriptor 0 read error: -22 [ 864.331946][ T9026] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 864.331965][ T9026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.353606][ T9026] usb 5-1: config 0 descriptor?? [ 864.402261][ T9026] hub 5-1:0.0: bad descriptor, ignoring hub [ 864.402290][ T9026] hub 5-1:0.0: probe with driver hub failed with error -5 [ 866.155068][ T5866] usb 5-1: USB disconnect, device number 28 [ 866.274648][T10755] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 866.467970][T10755] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 866.467995][T10755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.468009][T10755] usb 2-1: Product: syz [ 866.468020][T10755] usb 2-1: Manufacturer: syz [ 866.468031][T10755] usb 2-1: SerialNumber: syz [ 867.332185][T10755] usb 2-1: config 0 descriptor?? [ 867.554983][T10755] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 868.001569][T10755] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 868.029776][T10755] usb 2-1: USB disconnect, device number 27 [ 868.151946][T11483] sctp: [Deprecated]: syz.4.1321 (pid 11483) Use of struct sctp_assoc_value in delayed_ack socket option. [ 868.151946][T11483] Use struct sctp_sack_info instead [ 868.498986][T11488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 868.502952][ T37] audit: type=1326 audit(1775622480.639:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11486 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 868.503014][ T37] audit: type=1326 audit(1775622480.639:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11486 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 868.503052][ T37] audit: type=1326 audit(1775622480.639:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11486 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 868.503085][ T37] audit: type=1326 audit(1775622480.639:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11486 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 868.503118][ T37] audit: type=1326 audit(1775622480.639:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11486 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 868.503153][ T37] audit: type=1326 audit(1775622480.639:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11486 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 868.503185][ T37] audit: type=1326 audit(1775622480.639:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11486 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b6720d04e code=0x7ffc0000 [ 868.503216][ T37] audit: type=1326 audit(1775622480.639:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11486 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b6720d04e code=0x7ffc0000 [ 868.503247][ T37] audit: type=1326 audit(1775622480.639:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11486 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 868.503279][ T37] audit: type=1326 audit(1775622480.639:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11486 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 869.305490][T11494] random: crng reseeded on system resumption [ 870.429568][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.429644][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.594511][ T9026] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 870.764552][ T9026] usb 6-1: Using ep0 maxpacket: 32 [ 870.767542][ T9026] usb 6-1: unable to get BOS descriptor or descriptor too short [ 870.769021][ T9026] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 870.769041][ T9026] usb 6-1: config 7 has an invalid descriptor of length 171, skipping remainder of the config [ 870.769055][ T9026] usb 6-1: config 7 has no interface number 0 [ 870.769085][ T9026] usb 6-1: config 7 interface 187 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 870.769106][ T9026] usb 6-1: config 7 interface 187 has no altsetting 0 [ 870.772443][ T9026] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 870.772472][ T9026] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.772493][ T9026] usb 6-1: Product: syz [ 870.772508][ T9026] usb 6-1: Manufacturer: syz [ 870.772523][ T9026] usb 6-1: SerialNumber: syz [ 871.195518][ T9026] usb 6-1: Cannot retrieve CPort count: -71 [ 871.195572][ T9026] usb 6-1: Cannot retrieve CPort count: -71 [ 871.195609][ T9026] es2_ap_driver 6-1:7.187: probe with driver es2_ap_driver failed with error -71 [ 871.201905][ T9026] usb 6-1: USB disconnect, device number 13 [ 871.664748][T10755] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 871.985331][T10755] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.985398][T10755] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 871.985433][T10755] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 871.985450][T10755] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.989598][T10755] usb 7-1: config 0 descriptor?? [ 872.063939][T10755] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 872.327455][T10431] usb 7-1: USB disconnect, device number 12 [ 873.681370][T10431] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 874.604498][T10431] usb 7-1: Using ep0 maxpacket: 32 [ 874.630641][T10431] usb 7-1: device descriptor read/all, error -71 [ 875.982670][T11542] sctp: [Deprecated]: syz.5.1336 (pid 11542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 875.982670][T11542] Use struct sctp_sack_info instead [ 876.528374][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 876.528432][ T37] audit: type=1326 audit(1775622488.669:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11545 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 876.554625][ T37] audit: type=1326 audit(1775622488.669:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11545 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 876.555009][ T37] audit: type=1326 audit(1775622488.669:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11545 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 876.555060][ T37] audit: type=1326 audit(1775622488.669:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11545 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 876.555103][ T37] audit: type=1326 audit(1775622488.679:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11545 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 876.555148][ T37] audit: type=1326 audit(1775622488.679:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11545 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b6720d04e code=0x7ffc0000 [ 876.555195][ T37] audit: type=1326 audit(1775622488.679:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11545 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b6720d04e code=0x7ffc0000 [ 876.555248][ T37] audit: type=1326 audit(1775622488.689:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11545 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 876.555297][ T37] audit: type=1326 audit(1775622488.689:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11545 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 876.555345][ T37] audit: type=1326 audit(1775622488.689:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11545 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 878.176733][T11550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 878.764630][ T5866] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 878.934670][ T5866] usb 7-1: Using ep0 maxpacket: 16 [ 878.936673][ T5866] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 878.936702][ T5866] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 878.936748][ T5866] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 878.936765][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.952070][ T5866] usb 7-1: config 0 descriptor?? [ 879.041955][ T5866] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 881.944612][ T5866] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 881.957974][T10755] usb 7-1: USB disconnect, device number 15 [ 882.096653][ T5866] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.096694][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 882.096725][ T5866] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 882.096742][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.101091][ T5866] usb 6-1: config 0 descriptor?? [ 882.218412][ T5866] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 882.519816][ T5882] usb 6-1: USB disconnect, device number 14 [ 883.817524][ T5882] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 884.774582][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 885.464166][ T5882] usb 6-1: device descriptor read/all, error -71 [ 891.513595][T11633] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 892.204587][ T5874] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 892.439025][ T5874] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 892.439056][ T5874] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.439075][ T5874] usb 7-1: config 0 has no interfaces? [ 892.439097][ T5874] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 892.439114][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.443707][ T5874] usb 7-1: config 0 descriptor?? [ 892.719511][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 892.719526][ T37] audit: type=1326 audit(1775622504.879:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11645 comm="syz.5.1366" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a8a10c819 code=0x0 [ 894.657914][T11663] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1368'. [ 897.374534][T10431] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 897.528918][T10755] usb 7-1: USB disconnect, device number 16 [ 897.564505][T10431] usb 2-1: Using ep0 maxpacket: 32 [ 897.565378][T10431] usb 2-1: no configurations [ 897.565395][T10431] usb 2-1: can't read configurations, error -22 [ 897.695482][T10431] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 897.844454][T10431] usb 2-1: Using ep0 maxpacket: 32 [ 897.845334][T10431] usb 2-1: no configurations [ 897.845351][T10431] usb 2-1: can't read configurations, error -22 [ 897.845853][T10431] usb usb2-port1: attempt power cycle [ 898.098773][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1377'. [ 898.098794][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1377'. [ 898.146644][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'. [ 898.196469][T10431] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 898.245331][T10431] usb 2-1: Using ep0 maxpacket: 32 [ 898.246136][T10431] usb 2-1: no configurations [ 898.246149][T10431] usb 2-1: can't read configurations, error -22 [ 898.384805][T10431] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 898.405266][T10431] usb 2-1: Using ep0 maxpacket: 32 [ 898.406127][T10431] usb 2-1: no configurations [ 898.406144][T10431] usb 2-1: can't read configurations, error -22 [ 898.406510][T10431] usb usb2-port1: unable to enumerate USB device [ 900.693607][T11721] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1384'. [ 900.914505][ T5874] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 901.101952][ T5874] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 901.101984][ T5874] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.102004][ T5874] usb 7-1: config 0 has no interfaces? [ 901.103059][ T5874] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 901.103085][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.147626][ T5874] usb 7-1: config 0 descriptor?? [ 902.693673][T11729] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 902.965437][ T5874] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 903.144524][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 903.207444][ T5874] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 903.207477][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.239865][ T5874] usb 3-1: config 0 descriptor?? [ 903.314578][ T5882] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 903.323852][ T5874] gspca_main: sunplus-2.14.0 probing 041e:400b [ 903.467870][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 903.467941][ T5882] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 903.467968][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.507833][ T5882] usb 6-1: config 0 descriptor?? [ 903.508998][T11735] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 904.114959][ T5882] hid (null): report_id 2022860571 is invalid [ 904.115001][ T5882] hid (null): invalid report_size 12450 [ 904.147419][ T5882] hid_parser_main: 300 callbacks suppressed [ 904.147446][ T5882] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 904.147479][ T5882] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 904.147508][ T5882] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 904.147535][ T5882] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 904.147562][ T5882] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 904.147590][ T5882] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 904.147781][ T5882] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 904.147991][ T5882] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 904.148020][ T5882] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 904.148048][ T5882] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 904.152633][ T5882] asus 0003:0B05:1ABE.000C: report_id 2022860571 is invalid [ 904.152812][ T5882] asus 0003:0B05:1ABE.000C: item 0 4 1 8 parsing failed [ 904.246489][ T5882] asus 0003:0B05:1ABE.000C: Asus hid parse failed: -22 [ 904.246588][ T5882] asus 0003:0B05:1ABE.000C: probe with driver asus failed with error -22 [ 905.565680][ T5874] gspca_sunplus: reg_w_riv err -110 [ 905.565752][ T5874] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 907.177460][ T9026] usb 6-1: USB disconnect, device number 17 [ 907.204893][ T5941] usb 3-1: USB disconnect, device number 36 [ 907.384571][ T5874] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 907.597259][ T5874] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 907.597290][ T5874] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 907.597311][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.597330][ T5874] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 907.597368][ T5874] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 907.597410][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 908.481120][ T5874] usb 2-1: string descriptor 0 read error: -22 [ 908.481280][ T5874] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 908.481307][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.547712][ T5874] usb 2-1: config 0 descriptor?? [ 908.550151][ T5874] hub 2-1:0.0: bad descriptor, ignoring hub [ 908.550178][ T5874] hub 2-1:0.0: probe with driver hub failed with error -5 [ 909.103636][T11767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.104192][T11767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.107552][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 909.110240][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 909.951482][T10755] usb 7-1: USB disconnect, device number 17 [ 913.197947][ T9026] usb 2-1: USB disconnect, device number 32 [ 917.188355][T11818] random: crng reseeded on system resumption [ 922.393158][T11846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1414'. [ 922.393630][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'. [ 922.904602][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 923.218147][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 923.218181][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 923.218200][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.222438][ T10] usb 3-1: config 0 descriptor?? [ 923.234017][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 923.652701][ T5874] usb 3-1: USB disconnect, device number 37 [ 925.242667][ T5874] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 925.484560][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 925.487189][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 925.487235][ T5874] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 925.487260][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.558470][ T5874] usb 3-1: config 0 descriptor?? [ 926.878357][ T5874] usb 3-1: can't set config #0, error -71 [ 926.882442][ T5874] usb 3-1: USB disconnect, device number 38 [ 931.862267][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.862342][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.268471][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 934.424502][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 934.427000][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.427026][ T10] usb 6-1: config 0 has no interfaces? [ 934.429676][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 934.429704][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.429730][ T10] usb 6-1: Product: syz [ 934.429741][ T10] usb 6-1: Manufacturer: syz [ 934.429752][ T10] usb 6-1: SerialNumber: syz [ 934.433521][ T10] usb 6-1: config 0 descriptor?? [ 936.236413][ T5874] usb 6-1: USB disconnect, device number 18 [ 936.584521][T10755] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 936.714502][T10755] usb 2-1: device descriptor read/64, error -71 [ 936.964735][T10755] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 937.094509][T10755] usb 2-1: device descriptor read/64, error -71 [ 937.644572][T10755] usb usb2-port1: attempt power cycle [ 938.054567][T10755] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 938.077878][T10755] usb 2-1: device descriptor read/8, error -71 [ 938.314541][T10755] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 938.338144][T10755] usb 2-1: device descriptor read/8, error -71 [ 938.445059][T10755] usb usb2-port1: unable to enumerate USB device [ 942.594552][ T10] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 942.765863][ T10] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 942.765897][ T10] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 942.765918][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.765939][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 942.765989][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 942.766029][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 942.769665][ T10] usb 6-1: string descriptor 0 read error: -22 [ 942.769814][ T10] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 942.769840][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.905732][ T10] usb 6-1: config 0 descriptor?? [ 942.910342][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 942.910385][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 948.542662][T12000] mac80211_hwsim hwsim7 ..ãc¤±: renamed from wlan1 (while UP) [ 948.543177][ T37] audit: type=1326 audit(1775622560.699:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11999 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 948.543230][ T37] audit: type=1326 audit(1775622560.699:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11999 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 948.543280][ T37] audit: type=1326 audit(1775622560.699:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11999 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 948.543329][ T37] audit: type=1326 audit(1775622560.699:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11999 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 948.543377][ T37] audit: type=1326 audit(1775622560.699:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11999 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 948.543425][ T37] audit: type=1326 audit(1775622560.699:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11999 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 948.870957][ T37] audit: type=1326 audit(1775622561.039:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11999 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 948.871000][ T37] audit: type=1326 audit(1775622561.039:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11999 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 949.159086][T12006] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1454'. [ 951.175677][ T9026] usb 6-1: USB disconnect, device number 19 [ 957.021852][T12047] input: syz0 as /devices/virtual/input/input9 [ 961.787778][T12064] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1468'. [ 963.243618][T12080] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1471'. [ 963.739310][T12084] input: syz0 as /devices/virtual/input/input10 [ 969.679283][ T37] audit: type=1326 audit(1775622581.839:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12110 comm="syz.1.1482" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa862c8c819 code=0x0 [ 976.408330][ T37] audit: type=1326 audit(1775622588.569:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12151 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 976.418050][ T37] audit: type=1326 audit(1775622588.569:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12151 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 976.418514][ T37] audit: type=1326 audit(1775622588.579:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12151 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 976.418949][ T37] audit: type=1326 audit(1775622588.579:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12151 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 976.454830][ T37] audit: type=1326 audit(1775622588.589:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12151 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 976.506549][ T37] audit: type=1326 audit(1775622588.669:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12151 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 976.629240][ T37] audit: type=1326 audit(1775622588.789:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12151 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 976.629300][ T37] audit: type=1326 audit(1775622588.789:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12151 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 976.684505][ T37] audit: type=1326 audit(1775622588.839:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12151 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 976.684568][ T37] audit: type=1326 audit(1775622588.839:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12151 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 977.461268][T12162] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1494'. [ 978.943888][T12173] random: crng reseeded on system resumption [ 986.573002][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 986.573029][ T37] audit: type=1326 audit(1775622598.729:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12214 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 986.573463][ T37] audit: type=1326 audit(1775622598.729:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12214 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 986.573841][ T37] audit: type=1326 audit(1775622598.729:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12214 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 986.609778][ T37] audit: type=1326 audit(1775622598.729:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12214 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 986.611352][ T37] audit: type=1326 audit(1775622598.769:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12214 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 986.611619][ T37] audit: type=1326 audit(1775622598.769:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12214 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 986.636341][ T37] audit: type=1326 audit(1775622598.799:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12214 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 986.636527][T12216] mac80211_hwsim hwsim3 ..ãc¤±: renamed from wlan1 (while UP) [ 986.783689][ T37] audit: type=1326 audit(1775622598.939:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12214 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 986.784008][ T37] audit: type=1326 audit(1775622598.939:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12214 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 986.900492][ T37] audit: type=1326 audit(1775622599.059:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12214 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0b6724c819 code=0x7ffc0000 [ 987.012189][T12223] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 987.424555][ T9026] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 988.779908][ T9026] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 988.779943][ T9026] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.779964][ T9026] usb 7-1: Product: syz [ 988.779979][ T9026] usb 7-1: Manufacturer: syz [ 988.779994][ T9026] usb 7-1: SerialNumber: syz [ 988.862964][ T9026] usb 7-1: config 0 descriptor?? [ 989.744686][T12274] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1508'. [ 991.380048][T12287] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1512'. [ 993.315213][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.315288][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.482794][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 993.482815][ T37] audit: type=1326 audit(1775622605.639:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12299 comm="syz.4.1518" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7fc778c819 code=0x0 [ 993.572320][ T5874] usb 7-1: USB disconnect, device number 18 [ 1000.188038][ T9026] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1001.114523][ T9026] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1001.114557][ T9026] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.114579][ T9026] usb 7-1: Product: syz [ 1001.114593][ T9026] usb 7-1: Manufacturer: syz [ 1001.114609][ T9026] usb 7-1: SerialNumber: syz [ 1001.197294][ T9026] usb 7-1: config 0 descriptor?? [ 1001.660127][T12386] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1529'. [ 1004.840915][T12414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1540'. [ 1005.731237][ T5874] usb 7-1: USB disconnect, device number 19 [ 1007.631880][ T10] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 1007.813445][ T10] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1007.813477][ T10] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1007.813499][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.813520][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1007.813558][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1007.813598][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 1007.921628][ T10] usb 2-1: string descriptor 0 read error: -22 [ 1007.921782][ T10] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1007.921808][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.000609][ T10] usb 2-1: config 0 descriptor?? [ 1008.017349][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 1008.017391][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1008.164809][ T37] audit: type=1326 audit(1775622620.309:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.6.1548" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb16602c819 code=0x0 [ 1008.603608][T12479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.604212][T12479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.609035][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1546'. [ 1008.636518][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1546'. [ 1011.804532][ T9026] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1011.959021][ T9026] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1011.959044][ T9026] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.959059][ T9026] usb 6-1: Product: syz [ 1011.959070][ T9026] usb 6-1: Manufacturer: syz [ 1011.959080][ T9026] usb 6-1: SerialNumber: syz [ 1012.007766][ T9026] usb 6-1: config 0 descriptor?? [ 1012.395133][ T5874] usb 6-1: USB disconnect, device number 20 [ 1013.064815][T10431] usb 2-1: USB disconnect, device number 37 [ 1014.648091][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1015.954523][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1015.957825][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.957853][ T10] usb 7-1: config 0 has no interfaces? [ 1015.960951][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1015.960982][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.961004][ T10] usb 7-1: Product: syz [ 1015.961019][ T10] usb 7-1: Manufacturer: syz [ 1015.961035][ T10] usb 7-1: SerialNumber: syz [ 1016.036003][ T10] usb 7-1: config 0 descriptor?? [ 1016.764675][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1016.919929][ T10] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1016.919954][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.919968][ T10] usb 6-1: Product: syz [ 1016.919979][ T10] usb 6-1: Manufacturer: syz [ 1016.919989][ T10] usb 6-1: SerialNumber: syz [ 1016.941512][ T10] usb 6-1: config 0 descriptor?? [ 1017.294610][ T10] usb 6-1: USB disconnect, device number 21 [ 1017.843951][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1563'. [ 1019.079881][T12554] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 1019.363294][T12552] bridge0: entered promiscuous mode [ 1019.363334][T12552] bridge0: entered allmulticast mode [ 1019.772939][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1019.946871][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1019.951759][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1019.951812][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1019.951837][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.000945][ T10] usb 2-1: config 0 descriptor?? [ 1020.018975][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1020.697034][ T9026] usb 2-1: USB disconnect, device number 38 [ 1020.744573][T10431] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1020.910802][T10431] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1020.910835][T10431] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.910858][T10431] usb 6-1: Product: syz [ 1020.910868][T10431] usb 6-1: Manufacturer: syz [ 1020.910879][T10431] usb 6-1: SerialNumber: syz [ 1020.983802][T10431] usb 6-1: config 0 descriptor?? [ 1021.212285][T10431] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1021.407188][T10431] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1022.800846][ T9026] usb 6-1: USB disconnect, device number 22 [ 1023.014501][T10755] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1023.368916][T10755] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1023.368940][T10755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.368954][T10755] usb 2-1: Product: syz [ 1023.368965][T10755] usb 2-1: Manufacturer: syz [ 1023.368975][T10755] usb 2-1: SerialNumber: syz [ 1023.417300][T10755] usb 2-1: config 0 descriptor?? [ 1023.840896][T12591] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1580'. [ 1024.064757][T12574] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 1024.088802][ T9026] usb 7-1: USB disconnect, device number 20 [ 1024.236704][T12574] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 1024.236735][T12574] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1024.236756][T12574] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.236776][T12574] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1024.236814][T12574] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1024.236862][T12574] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 1024.244118][T12574] usb 6-1: string descriptor 0 read error: -22 [ 1024.244228][T12574] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1024.244245][T12574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.305386][T12574] usb 6-1: config 0 descriptor?? [ 1024.586100][T12574] hub 6-1:0.0: bad descriptor, ignoring hub [ 1024.586143][T12574] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1024.955296][T10755] usb 6-1: USB disconnect, device number 23 [ 1027.415061][T12618] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1590'. [ 1031.013036][T12638] kvm: kvm [12637]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 1031.050886][T12638] kvm: kvm [12637]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1031.050981][T12638] kvm: kvm [12637]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1031.079110][T12638] kvm: kvm [12637]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1031.079203][T12638] kvm: kvm [12637]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1031.083896][T12638] kvm: kvm [12637]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1031.083960][T12638] kvm: kvm [12637]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1031.495275][T12638] kvm: kvm [12637]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1031.495340][T12638] kvm: kvm [12637]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1031.697208][ T9026] usb 2-1: USB disconnect, device number 39 [ 1031.852882][ T37] audit: type=1326 audit(1775622644.009:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12649 comm="syz.1.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 1031.853202][ T37] audit: type=1326 audit(1775622644.009:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12649 comm="syz.1.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 1031.853637][ T37] audit: type=1326 audit(1775622644.009:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12649 comm="syz.1.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 1031.853981][ T37] audit: type=1326 audit(1775622644.009:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12649 comm="syz.1.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 1031.976724][ T37] audit: type=1326 audit(1775622644.099:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12649 comm="syz.1.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 1031.976896][ T37] audit: type=1326 audit(1775622644.139:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12649 comm="syz.1.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 1031.979058][ T37] audit: type=1326 audit(1775622644.139:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12649 comm="syz.1.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa862c8c819 code=0x7ffc0000 [ 1038.846140][ T5874] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1038.995475][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 1039.072320][ T5874] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.072367][ T5874] usb 6-1: config 0 has no interfaces? [ 1039.301000][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1039.562762][ T10] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1039.562786][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.562801][ T10] usb 3-1: Product: syz [ 1039.562854][ T10] usb 3-1: Manufacturer: syz [ 1039.562866][ T10] usb 3-1: SerialNumber: syz [ 1039.602999][ T10] usb 3-1: config 0 descriptor?? [ 1039.760639][ T5874] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1039.760664][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.760679][ T5874] usb 6-1: Product: syz [ 1039.866920][ T5874] usb 6-1: config 0 descriptor?? [ 1039.867386][ T5874] usb 6-1: can't set config #0, error -71 [ 1039.897578][ T5874] usb 6-1: USB disconnect, device number 24 [ 1040.202484][T12698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1611'. [ 1041.174591][T12711] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1614'. [ 1050.494525][T10431] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1050.514510][ T5881] usb 3-1: USB disconnect, device number 39 [ 1050.664407][T10431] usb 5-1: Using ep0 maxpacket: 16 [ 1050.667798][T10431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.667839][T10431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.667876][T10431] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1050.667933][T10431] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1050.667969][T10431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.741795][T10431] usb 5-1: config 0 descriptor?? [ 1050.813627][T12792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1628'. [ 1051.531763][T10431] usbhid 5-1:0.0: can't add hid device: -71 [ 1051.531861][T10431] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1051.570561][T10431] usb 5-1: USB disconnect, device number 29 [ 1053.936200][T12824] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1054.324532][ T5881] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1054.474473][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 1054.501271][ T5881] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1054.501303][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.529109][ T5881] usb 2-1: config 0 descriptor?? [ 1054.566897][ T5881] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1054.758919][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.758996][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.904442][T12574] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1055.090238][T12574] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1055.090267][T12574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.090286][T12574] usb 6-1: Product: syz [ 1055.090300][T12574] usb 6-1: Manufacturer: syz [ 1055.090313][T12574] usb 6-1: SerialNumber: syz [ 1055.177760][T12574] usb 6-1: config 0 descriptor?? [ 1055.914911][T12835] input: syz0 as /devices/virtual/input/input11 [ 1058.407157][ T5881] gspca_sunplus: reg_w_riv err -110 [ 1058.407233][ T5881] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1058.551506][ T9026] usb 2-1: USB disconnect, device number 40 [ 1058.654689][ T10] usb 6-1: USB disconnect, device number 25 [ 1059.630738][T12849] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1642'. [ 1060.659273][ T9026] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 1060.837271][ T9026] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1060.837294][ T9026] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1060.837309][ T9026] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.837323][ T9026] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1060.837349][ T9026] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1060.837376][ T9026] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 1060.900210][ T9026] usb 3-1: string descriptor 0 read error: -22 [ 1060.900356][ T9026] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1060.900381][ T9026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.920215][ T9026] usb 3-1: config 0 descriptor?? [ 1061.095052][ T9026] hub 3-1:0.0: bad descriptor, ignoring hub [ 1061.095094][ T9026] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1061.727334][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.727905][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.730687][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1646'. [ 1061.750250][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1646'. [ 1064.014492][T12574] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1064.190818][T12574] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1064.190843][T12574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.190857][T12574] usb 6-1: Product: syz [ 1064.190867][T12574] usb 6-1: Manufacturer: syz [ 1064.190878][T12574] usb 6-1: SerialNumber: syz [ 1064.247797][T12574] usb 6-1: config 0 descriptor?? [ 1064.665258][T10755] usb 6-1: USB disconnect, device number 26 [ 1065.714881][ T9026] usb 3-1: USB disconnect, device number 40 [ 1067.321775][ T37] audit: type=1326 audit(1775622679.479:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12902 comm="syz.4.1660" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7fc778c819 code=0x0 [ 1075.820448][T12977] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1679'. [ 1076.048184][T12981] binder: 12979:12981 ioctl c0306201 0 returned -14 [ 1076.767473][T12986] mac80211_hwsim hwsim13 ..ãc¤±: renamed from wlan1 (while UP) [ 1076.770511][ T37] audit: type=1326 audit(1775622688.919:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12985 comm="syz.5.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 1076.770554][ T37] audit: type=1326 audit(1775622688.929:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12985 comm="syz.5.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 1076.770587][ T37] audit: type=1326 audit(1775622688.929:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12985 comm="syz.5.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 1076.770622][ T37] audit: type=1326 audit(1775622688.929:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12985 comm="syz.5.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 1076.770653][ T37] audit: type=1326 audit(1775622688.929:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12985 comm="syz.5.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 1076.770692][ T37] audit: type=1326 audit(1775622688.929:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12985 comm="syz.5.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 1078.935128][T13005] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1688'. [ 1083.207234][T13029] bridge0: port 3(syz_tun) entered blocking state [ 1083.214369][T13029] bridge0: port 3(syz_tun) entered disabled state [ 1083.227673][T13029] syz_tun: entered allmulticast mode [ 1083.273388][T13029] syz_tun: entered promiscuous mode [ 1083.311948][T13029] bridge0: port 3(syz_tun) entered blocking state [ 1083.314038][T13029] bridge0: port 3(syz_tun) entered forwarding state [ 1084.954239][ T37] audit: type=1326 audit(1775622697.109:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13036 comm="syz.4.1699" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7fc778c819 code=0x0 [ 1087.797544][ T37] audit: type=1800 audit(1775622699.959:1468): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1704" name="bus" dev="ramfs" ino=48867 res=0 errno=0 [ 1088.788759][T13079] syz.6.1708 (13079) used greatest stack depth: 18080 bytes left [ 1092.644351][T12574] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1092.827306][T12574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.827365][T12574] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1092.827391][T12574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.285160][T12574] usb 2-1: config 0 descriptor?? [ 1093.507337][T12574] usbhid 2-1:0.0: can't add hid device: -71 [ 1093.507472][T12574] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1093.601319][T12574] usb 2-1: USB disconnect, device number 41 [ 1094.074543][T12574] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1094.234455][T12574] usb 2-1: Using ep0 maxpacket: 32 [ 1094.238294][T12574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.238348][T12574] usb 2-1: New USB device found, idVendor=0f11, idProduct=3321, bcdDevice= 0.40 [ 1094.238373][T12574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.315571][T12574] usb 2-1: config 0 descriptor?? [ 1094.322690][ T37] audit: type=1326 audit(1775622706.479:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13133 comm="syz.5.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 1094.322939][ T37] audit: type=1326 audit(1775622706.479:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13133 comm="syz.5.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 1094.323168][ T37] audit: type=1326 audit(1775622706.479:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13133 comm="syz.5.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 1094.364360][ T37] audit: type=1326 audit(1775622706.519:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13133 comm="syz.5.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 1094.364421][ T37] audit: type=1326 audit(1775622706.519:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13133 comm="syz.5.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 1094.392762][ T37] audit: type=1326 audit(1775622706.549:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13133 comm="syz.5.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a8a10c819 code=0x7ffc0000 [ 1094.729262][T12574] usbhid 2-1:0.0: can't add hid device: -71 [ 1094.729362][T12574] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1094.772456][T12574] usb 2-1: USB disconnect, device number 42 [ 1101.318486][T13172] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1734'. [ 1103.824477][T10755] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1104.769010][T10755] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.769064][T10755] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1104.769089][T10755] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.891205][T10755] usb 6-1: config 0 descriptor?? [ 1105.121035][T10755] usbhid 6-1:0.0: can't add hid device: -71 [ 1105.121133][T10755] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1105.212935][T10755] usb 6-1: USB disconnect, device number 27 [ 1105.814529][T10755] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1105.985552][T10755] usb 6-1: Using ep0 maxpacket: 32 [ 1105.987314][T10755] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.987350][T10755] usb 6-1: New USB device found, idVendor=0f11, idProduct=3321, bcdDevice= 0.40 [ 1105.987367][T10755] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.071536][T10755] usb 6-1: config 0 descriptor?? [ 1106.204433][ T5882] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1106.428420][ T5882] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1106.428454][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.428479][ T5882] usb 7-1: Product: syz [ 1106.428491][ T5882] usb 7-1: Manufacturer: syz [ 1106.428501][ T5882] usb 7-1: SerialNumber: syz [ 1106.480122][ T5882] usb 7-1: config 0 descriptor?? [ 1106.492439][T10755] usbhid 6-1:0.0: can't add hid device: -71 [ 1106.492569][T10755] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1106.553919][T10755] usb 6-1: USB disconnect, device number 28 [ 1106.701502][ T5882] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1106.897842][ T5882] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1106.926089][ T5882] usb 7-1: USB disconnect, device number 21 [ 1116.281931][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.282008][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.534497][T12574] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 1119.686450][T12574] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 1119.686482][T12574] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1119.686504][T12574] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.686526][T12574] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1119.686564][T12574] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1119.686605][T12574] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 1119.691633][T12574] usb 6-1: string descriptor 0 read error: -22 [ 1119.691799][T12574] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1119.691824][T12574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.790416][T12574] usb 6-1: config 0 descriptor?? [ 1119.826962][T12574] hub 6-1:0.0: bad descriptor, ignoring hub [ 1119.827003][T12574] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1120.050115][ T37] audit: type=1326 audit(1775622732.209:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13314 comm="syz.2.1775" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b6724c819 code=0x0 [ 1120.225281][T12574] usb 6-1: USB disconnect, device number 29 [ 1121.085140][T13328] kvm: kvm [13326]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xa5c500000000 [ 1121.085203][T13328] kvm: kvm [13326]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0xa5c500000001 [ 1121.122761][T13328] kvm: kvm [13326]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xf96600000000 [ 1121.122807][T13328] kvm: kvm [13326]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xf96600000001 [ 1123.394950][T13352] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1784'. [ 1126.144576][T10755] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1126.312897][T10755] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1126.312930][T10755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.312952][T10755] usb 3-1: Product: syz [ 1126.312967][T10755] usb 3-1: Manufacturer: syz [ 1126.312983][T10755] usb 3-1: SerialNumber: syz [ 1126.401093][T10755] usb 3-1: config 0 descriptor?? [ 1127.336890][T13382] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1788'. [ 1127.466234][T10755] usb 3-1: Firmware version (0.0) predates our first public release. [ 1127.466256][T10755] usb 3-1: Please update to version 0.2 or newer [ 1129.368742][ T37] audit: type=1326 audit(1775622741.529:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13403 comm="syz.6.1798" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb16602c819 code=0x0 [ 1132.225521][ T5882] usb 3-1: USB disconnect, device number 41 [ 1133.354181][T13441] kvm: kvm [13435]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xda3800000000 [ 1133.354230][T13441] kvm: kvm [13435]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xda3800000001 [ 1133.438327][T13449] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1808'. [ 1134.675096][ T37] audit: type=1326 audit(1775622746.839:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13463 comm="syz.1.1816" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa862c8c819 code=0x0 [ 1135.385174][ T5882] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1136.021291][ T5882] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1136.021325][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.021346][ T5882] usb 5-1: Product: syz [ 1136.021361][ T5882] usb 5-1: Manufacturer: syz [ 1136.021375][ T5882] usb 5-1: SerialNumber: syz [ 1136.065965][ T5882] usb 5-1: config 0 descriptor?? [ 1136.923780][T13487] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1819'. [ 1137.135766][ T5882] usb 5-1: Firmware version (0.0) predates our first public release. [ 1137.135796][ T5882] usb 5-1: Please update to version 0.2 or newer [ 1138.150945][ T5882] usb 5-1: USB disconnect, device number 30 [ 1138.557468][ T10] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 1138.727756][ T10] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1138.727788][ T10] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1138.727809][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.727830][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1138.727867][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1138.727917][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 1138.733534][ T10] usb 2-1: string descriptor 0 read error: -22 [ 1138.733651][ T10] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1138.733672][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.878295][ T10] usb 2-1: config 0 descriptor?? [ 1138.900225][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 1138.900255][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1138.914641][ T5866] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1139.064423][ T5866] usb 6-1: Using ep0 maxpacket: 16 [ 1139.066713][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.066737][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.066754][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1139.066785][ T5866] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1139.066802][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.130369][ T5866] usb 6-1: config 0 descriptor?? [ 1139.418871][T13525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.421558][T13525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.004447][ T5866] usbhid 6-1:0.0: can't add hid device: -71 [ 1140.004633][ T5866] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1140.041728][ T5866] usb 6-1: USB disconnect, device number 30 [ 1140.864435][ T5866] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 1141.062435][ T5866] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 1141.062458][ T5866] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1141.062473][ T5866] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.062493][ T5866] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1141.062519][ T5866] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1141.062546][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 1141.069930][ T5866] usb 6-1: string descriptor 0 read error: -22 [ 1141.070374][ T5866] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1141.070449][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.186107][ T5866] usb 6-1: config 0 descriptor?? [ 1141.233943][ T5866] hub 6-1:0.0: bad descriptor, ignoring hub [ 1141.233986][ T5866] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1141.847907][ T5881] usb 6-1: USB disconnect, device number 31 [ 1143.224861][ T5866] usb 2-1: USB disconnect, device number 43 [ 1143.524772][T10431] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1143.941471][T10431] usb 2-1: Using ep0 maxpacket: 16 [ 1144.031169][T10431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.031206][T10431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.031231][T10431] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1144.031276][T10431] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1144.031301][T10431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.621560][T10431] usb 2-1: config 0 descriptor?? [ 1145.895966][T10431] usbhid 2-1:0.0: can't add hid device: -71 [ 1145.896098][T10431] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1145.900525][T10431] usb 2-1: USB disconnect, device number 44 [ 1147.922139][T13610] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1861'. [ 1150.104484][ T5866] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1150.274676][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 1150.277565][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.277601][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.277625][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1150.277671][ T5866] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1150.277697][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.302808][ T5866] usb 5-1: config 0 descriptor?? [ 1150.847870][ T37] audit: type=1326 audit(1775622763.009:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13634 comm="syz.1.1870" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa862c8c819 code=0x0 [ 1151.200718][ T5866] usbhid 5-1:0.0: can't add hid device: -71 [ 1151.200835][ T5866] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1151.243770][ T5866] usb 5-1: USB disconnect, device number 31 [ 1151.944549][ T5874] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1153.222631][ T5874] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1153.222666][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.222688][ T5874] usb 2-1: Product: syz [ 1153.222703][ T5874] usb 2-1: Manufacturer: syz [ 1153.222717][ T5874] usb 2-1: SerialNumber: syz [ 1153.258178][ T5874] usb 2-1: config 0 descriptor?? [ 1154.084492][T13671] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1875'. [ 1154.348931][ T5874] usb 2-1: Firmware version (0.0) predates our first public release. [ 1154.348953][ T5874] usb 2-1: Please update to version 0.2 or newer [ 1154.688247][T13687] Bluetooth: hci0: invalid len left 7, exp >= 38 [ 1155.934639][T10431] usb 2-1: USB disconnect, device number 45 [ 1159.156318][T10431] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1159.356647][ T37] audit: type=1326 audit(1775622771.519:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13714 comm="syz.4.1892" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7fc778c819 code=0x0 [ 1159.405664][T10431] usb 2-1: Using ep0 maxpacket: 16 [ 1159.411535][T10431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.411572][T10431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.411589][T10431] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1159.411622][T10431] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1159.411639][T10431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.491086][T10431] usb 2-1: config 0 descriptor?? [ 1160.474038][T10431] usbhid 2-1:0.0: can't add hid device: -71 [ 1160.474140][T10431] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1160.606044][T10431] usb 2-1: USB disconnect, device number 46 [ 1161.947219][ T37] audit: type=1326 audit(1775622774.109:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13733 comm="syz.1.1899" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa862c8c819 code=0x0 [ 1163.036444][T13751] bridge0: port 3(syz_tun) entered blocking state [ 1163.036522][T13751] bridge0: port 3(syz_tun) entered disabled state [ 1163.036680][T13751] syz_tun: entered allmulticast mode [ 1163.917707][T13751] syz_tun: entered promiscuous mode [ 1163.918406][T13751] bridge0: port 3(syz_tun) entered blocking state [ 1163.918530][T13751] bridge0: port 3(syz_tun) entered forwarding state [ 1164.470445][T10431] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1164.678699][T10431] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1164.678725][T10431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.678741][T10431] usb 2-1: Product: syz [ 1164.678751][T10431] usb 2-1: Manufacturer: syz [ 1164.678762][T10431] usb 2-1: SerialNumber: syz [ 1164.765310][T10431] usb 2-1: config 0 descriptor?? [ 1165.639153][T13771] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1906'. [ 1165.860914][T10431] usb 2-1: Firmware version (0.0) predates our first public release. [ 1165.860943][T10431] usb 2-1: Please update to version 0.2 or newer [ 1165.928594][T13776] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1167.304431][ T5874] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1167.564942][ T9026] usb 2-1: USB disconnect, device number 47 [ 1167.604467][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 1167.649331][ T5874] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1167.649356][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.695204][ T5874] usb 5-1: config 0 descriptor?? [ 1167.846190][ T5874] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1169.600170][ T5874] gspca_sunplus: reg_r err -110 [ 1169.600277][ T5874] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 1169.919401][ T9026] usb 5-1: USB disconnect, device number 32 [ 1170.502553][ T5874] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 1170.720377][ T5874] usb 7-1: too many configurations: 109, using maximum allowed: 8 [ 1170.747214][ T5874] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1170.747259][ T5874] usb 7-1: can't read configurations, error -61 [ 1170.874454][ T5874] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1171.067309][ T5874] usb 7-1: too many configurations: 109, using maximum allowed: 8 [ 1171.134873][ T5874] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1171.134918][ T5874] usb 7-1: can't read configurations, error -61 [ 1171.135673][ T5874] usb usb7-port1: attempt power cycle [ 1171.477267][ T5874] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1171.496192][ T5874] usb 7-1: too many configurations: 109, using maximum allowed: 8 [ 1171.499671][ T5874] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1171.499701][ T5874] usb 7-1: can't read configurations, error -61 [ 1171.634583][ T5874] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1171.702526][ T5874] usb 7-1: too many configurations: 109, using maximum allowed: 8 [ 1171.714157][ T5874] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1171.714200][ T5874] usb 7-1: can't read configurations, error -61 [ 1171.726588][ T5874] usb usb7-port1: unable to enumerate USB device [ 1175.254493][ T5874] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1176.545821][ T5874] usb 6-1: config 0 has an invalid interface number: 243 but max is 0 [ 1176.545852][ T5874] usb 6-1: config 0 has no interface number 0 [ 1176.545900][ T5874] usb 6-1: config 0 interface 243 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1176.545929][ T5874] usb 6-1: config 0 interface 243 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.545951][ T5874] usb 6-1: config 0 interface 243 has no altsetting 0 [ 1176.545987][ T5874] usb 6-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1176.546011][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.704500][ T5874] usb 6-1: config 0 descriptor?? [ 1177.159842][ T5874] usbhid 6-1:0.243: can't add hid device: -71 [ 1177.159954][ T5874] usbhid 6-1:0.243: probe with driver usbhid failed with error -71 [ 1177.194467][ T5874] usb 6-1: USB disconnect, device number 32 [ 1177.474484][T13846] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1177.621588][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.621668][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.775336][ T5882] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1178.214367][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 1178.217446][ T5882] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1178.217479][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.281218][ T5882] usb 7-1: config 0 descriptor?? [ 1178.326812][ T5882] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1178.734442][ T9026] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1178.940118][ T9026] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1178.940142][ T9026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.940162][ T9026] usb 5-1: Product: syz [ 1178.940432][ T9026] usb 5-1: Manufacturer: syz [ 1178.940445][ T9026] usb 5-1: SerialNumber: syz [ 1179.007578][ T9026] usb 5-1: config 0 descriptor?? [ 1179.925142][T13867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1933'. [ 1179.945111][ T5882] gspca_sunplus: reg_w_riv err -110 [ 1179.945271][ T5882] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1180.116783][ T9026] usb 5-1: Firmware version (0.0) predates our first public release. [ 1180.116812][ T9026] usb 5-1: Please update to version 0.2 or newer [ 1181.713049][ T5882] usb 7-1: USB disconnect, device number 26 [ 1183.244576][ T5881] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1183.394564][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 1183.430286][ T5881] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1183.600920][ T5881] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1183.600945][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.600961][ T5881] usb 2-1: Product: syz [ 1183.600973][ T5881] usb 2-1: Manufacturer: syz [ 1183.600983][ T5881] usb 2-1: SerialNumber: syz [ 1183.673975][ T5881] usb 2-1: config 0 descriptor?? [ 1184.287645][ T9026] usb 5-1: USB disconnect, device number 33 [ 1185.605952][ T9026] usb 2-1: USB disconnect, device number 48 [ 1186.704359][ T9026] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1187.785936][ T9026] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1187.785970][ T9026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.785993][ T9026] usb 5-1: Product: syz [ 1187.786008][ T9026] usb 5-1: Manufacturer: syz [ 1187.786023][ T9026] usb 5-1: SerialNumber: syz [ 1187.796523][ T9026] usb 5-1: config 0 descriptor?? [ 1188.601898][T13959] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1962'. [ 1188.909869][ T9026] usb 5-1: Firmware version (0.0) predates our first public release. [ 1188.909890][ T9026] usb 5-1: Please update to version 0.2 or newer [ 1193.894467][ T5881] usb 5-1: USB disconnect, device number 34 [ 1209.044732][ T5881] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1209.503250][ T5881] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1209.503498][ T5881] usb 7-1: can't read configurations, error -61 [ 1209.814789][ T5881] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1215.057123][ T5881] usb 7-1: device descriptor read/all, error -110 [ 1215.064961][ T5881] usb usb7-port1: attempt power cycle [ 1215.514397][ T5881] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1215.543640][ T5881] usb 7-1: device descriptor read/8, error -32 [ 1216.316367][ T5881] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1216.341998][ T5881] usb 7-1: device descriptor read/8, error -32 [ 1216.654777][ T5881] usb usb7-port1: unable to enumerate USB device [ 1225.583074][T14208] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2042'. [ 1225.914527][ T9771] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1226.123730][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2044'. [ 1226.175816][ T9771] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1226.175858][ T9771] usb 2-1: can't read configurations, error -61 [ 1226.254908][T14219] gretap0: entered promiscuous mode [ 1226.255125][T14219] macvtap1: entered promiscuous mode [ 1226.255286][T14219] macvtap1: entered allmulticast mode [ 1226.255297][T14219] gretap0: entered allmulticast mode [ 1226.314544][ T9771] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1226.788242][ T9771] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1226.788271][ T9771] usb 2-1: can't read configurations, error -61 [ 1226.788646][ T9771] usb usb2-port1: attempt power cycle [ 1227.387910][ T9771] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1232.557461][ T9771] usb 2-1: device descriptor read/8, error -110 [ 1233.564422][ T9771] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1233.584715][ T9771] usb 2-1: device descriptor read/8, error -32 [ 1233.704543][ T9771] usb usb2-port1: unable to enumerate USB device [ 1239.620333][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.620407][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.451143][ T9037] Bluetooth: hci5: Frame reassembly failed (-84) [ 1242.066689][T14317] bridge0: port 3(syz_tun) entered blocking state [ 1242.071317][T14317] bridge0: port 3(syz_tun) entered disabled state [ 1242.076865][T14317] syz_tun: entered allmulticast mode [ 1242.098350][T14317] syz_tun: entered promiscuous mode [ 1242.120278][T14317] bridge0: port 3(syz_tun) entered blocking state [ 1242.120841][T14317] bridge0: port 3(syz_tun) entered forwarding state [ 1243.522062][T14253] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1244.122452][ T9745] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1245.095765][T14335] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2075'. [ 1249.614673][T14253] usb 5-1: device descriptor read/all, error -110 [ 1250.854591][T14253] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1250.984362][T14253] usb 5-1: device descriptor read/64, error -32 [ 1251.094672][T14253] usb usb5-port1: attempt power cycle [ 1251.545481][T14253] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1252.388306][T14253] usb 5-1: device descriptor read/8, error -32 [ 1252.694490][T14253] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1252.714974][T14253] usb 5-1: device descriptor read/8, error -32 [ 1252.827422][T14253] usb usb5-port1: unable to enumerate USB device [ 1252.981366][T14385] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1253.155620][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2090'. [ 1253.164002][T14388] erspan0: entered promiscuous mode [ 1253.164183][T14388] macvtap1: entered promiscuous mode [ 1253.164472][T14388] macvtap1: entered allmulticast mode [ 1253.164484][T14388] erspan0: entered allmulticast mode [ 1253.259239][T14388] macvtap1: left promiscuous mode [ 1253.274661][T14253] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1253.291074][T14388] macvtap1: left allmulticast mode [ 1253.291133][T14388] erspan0: left allmulticast mode [ 1253.444447][T14253] usb 7-1: Using ep0 maxpacket: 32 [ 1253.447603][T14253] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1253.447635][T14253] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.516880][T14253] usb 7-1: config 0 descriptor?? [ 1253.521097][T14253] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1254.169306][T14314] raw-gadget.0 gadget.4: failed to queue disconnect event [ 1255.019340][T14253] gspca_sunplus: reg_w_riv err -110 [ 1255.030989][T14253] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1256.778329][ T5881] usb 7-1: USB disconnect, device number 31 [ 1256.792528][T10431] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1256.959142][T10431] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1256.959175][T10431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.959203][T10431] usb 5-1: Product: syz [ 1256.959214][T10431] usb 5-1: Manufacturer: syz [ 1256.959224][T10431] usb 5-1: SerialNumber: syz [ 1257.016371][T10431] usb 5-1: config 0 descriptor?? [ 1257.481195][T14423] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2097'. [ 1258.191568][T10431] usb 5-1: Firmware version (0.0) predates our first public release. [ 1258.191598][T10431] usb 5-1: Please update to version 0.2 or newer [ 1264.669361][ T5881] usb 5-1: USB disconnect, device number 39 [ 1372.884195][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1372.884220][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5881/2:b..l P149/2:b..l [ 1372.884262][ C1] rcu: (detected by 1, t=10502 jiffies, g=75037, q=992 ncpus=2) [ 1372.884280][ C1] task:kworker/u8:5 state:R running task stack:22336 pid:149 tgid:149 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1372.884331][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1372.884496][ C1] Call Trace: [ 1372.884501][ C1] [ 1372.884511][ C1] __schedule+0x1553/0x5240 [ 1372.884598][ C1] ? __pfx___schedule+0x10/0x10 [ 1372.884626][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1372.884644][ C1] irqentry_exit+0x599/0x620 [ 1372.884672][ C1] ? trace_irq_disable+0x3b/0x150 [ 1372.884723][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1372.884758][ C1] RIP: 0010:lock_release+0x2d7/0x3d0 [ 1372.884787][ C1] Code: c0 ae 10 00 00 00 00 eb b5 e8 35 cc 83 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 a5 79 ae 10 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 0a 8c 87 09 cc 48 8d 3d f2 34 cd [ 1372.884801][ C1] RSP: 0018:ffffc90003a474e0 EFLAGS: 00000282 [ 1372.884814][ C1] RAX: 37a6b34e3ab63900 RBX: 0000000000000202 RCX: 0000000000000046 [ 1372.884825][ C1] RDX: 0000000000000005 RSI: ffffffff8d7c2056 RDI: ffffffff8ba67a80 [ 1372.884836][ C1] RBP: ffff88801f79ab00 R08: ffffc90003a47980 R09: 0000000000000000 [ 1372.884846][ C1] R10: ffffc90003a47638 R11: fffff52000748ec9 R12: 0000000000000005 [ 1372.884870][ C1] R13: 0000000000000005 R14: ffffffff8ddcb980 R15: ffff88801f799e80 [ 1372.884896][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1372.884919][ C1] unwind_next_frame+0x1aaa/0x23c0 [ 1372.884939][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1372.884955][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1372.885038][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1372.885065][ C1] arch_stack_walk+0x11b/0x150 [ 1372.885089][ C1] ? kmem_cache_free+0x185/0x6b0 [ 1372.885129][ C1] stack_trace_save+0xa9/0x100 [ 1372.885151][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1372.885171][ C1] ? __kfree_skb+0x5d/0x210 [ 1372.885235][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1372.885253][ C1] kasan_save_track+0x3e/0x80 [ 1372.885275][ C1] ? kasan_save_track+0x3e/0x80 [ 1372.885296][ C1] ? kasan_save_free_info+0x46/0x50 [ 1372.885325][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1372.885386][ C1] kasan_save_free_info+0x46/0x50 [ 1372.885405][ C1] __kasan_slab_free+0x5c/0x80 [ 1372.885430][ C1] kmem_cache_free+0x185/0x6b0 [ 1372.885444][ C1] ? nsim_dev_trap_report_work+0x7fa/0xbc0 [ 1372.885469][ C1] ? nsim_dev_trap_report_work+0x72e/0xbc0 [ 1372.885495][ C1] nsim_dev_trap_report_work+0x7fa/0xbc0 [ 1372.885531][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 1372.885562][ C1] process_scheduled_works+0xb6e/0x18c0 [ 1372.885607][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1372.885633][ C1] ? assign_work+0x3d5/0x5e0 [ 1372.885658][ C1] worker_thread+0xa53/0xfc0 [ 1372.885701][ C1] kthread+0x388/0x470 [ 1372.885718][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1372.885739][ C1] ? __pfx_kthread+0x10/0x10 [ 1372.885757][ C1] ret_from_fork+0x51e/0xb90 [ 1372.885782][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1372.885803][ C1] ? __switch_to+0xc7d/0x1450 [ 1372.885837][ C1] ? __pfx_kthread+0x10/0x10 [ 1372.885858][ C1] ret_from_fork_asm+0x1a/0x30 [ 1372.885893][ C1] [ 1372.885900][ C1] task:kworker/0:6 state:R running task stack:21256 pid:5881 tgid:5881 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 1372.885947][ C1] Workqueue: usb_hub_wq hub_event [ 1372.885989][ C1] Call Trace: [ 1372.885994][ C1] [ 1372.886002][ C1] __schedule+0x1553/0x5240 [ 1372.886039][ C1] ? __pfx___schedule+0x10/0x10 [ 1372.886053][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1372.886087][ C1] schedule_rtlock+0x30/0x70 [ 1372.886103][ C1] rtlock_slowlock_locked+0x3638/0x3c80 [ 1372.886158][ C1] ? rtlock_slowlock_locked+0x2a8/0x3c80 [ 1372.886188][ C1] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1372.886223][ C1] ? rcu_is_watching+0x15/0xb0 [ 1372.886246][ C1] rt_spin_lock+0x165/0x400 [ 1372.886271][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 1372.886295][ C1] ? preempt_count_add+0x91/0x190 [ 1372.886317][ C1] ? rt_spin_lock+0x2ce/0x400 [ 1372.886342][ C1] ep_poll_callback+0x79/0x800 [ 1372.886423][ C1] __wake_up_common_lock+0x136/0x1e0 [ 1372.886454][ C1] sock_def_readable+0x1ee/0x580 [ 1372.886492][ C1] ? sock_def_readable+0xae/0x580 [ 1372.886516][ C1] netlink_broadcast_filtered+0xc45/0x1010 [ 1372.886599][ C1] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 1372.886622][ C1] ? alloc_uevent_skb+0xeb/0x230 [ 1372.886664][ C1] ? __asan_memcpy+0x40/0x70 [ 1372.886687][ C1] netlink_broadcast+0x37/0x50 [ 1372.886711][ C1] kobject_uevent_net_broadcast+0x4bf/0x560 [ 1372.886739][ C1] kobject_uevent_env+0x55f/0x9e0 [ 1372.886768][ C1] device_del+0x754/0x900 [ 1372.886829][ C1] ? __pfx_device_del+0x10/0x10 [ 1372.886849][ C1] ? netdev_unregister_kobject+0x344/0x450 [ 1372.886918][ C1] unregister_netdevice_many_notify+0x1dfa/0x2360 [ 1372.886979][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1372.887005][ C1] ? __flush_workqueue+0x12d3/0x14f0 [ 1372.887040][ C1] unregister_netdevice_queue+0x31f/0x360 [ 1372.887066][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1372.887087][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1372.887106][ C1] ? mutex_lock_nested+0x152/0x1d0 [ 1372.887128][ C1] ? ieee802154_remove_interfaces+0x33/0x1d0 [ 1372.887195][ C1] ieee802154_remove_interfaces+0x17a/0x1d0 [ 1372.887219][ C1] ieee802154_unregister_hw+0x62/0xe0 [ 1372.887262][ C1] atusb_disconnect+0x14f/0x2a0 [ 1372.887324][ C1] usb_unbind_interface+0x26e/0x910 [ 1372.887361][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1372.887382][ C1] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1372.887404][ C1] device_release_driver_internal+0x4d9/0x870 [ 1372.887448][ C1] bus_remove_device+0x45a/0x570 [ 1372.887469][ C1] ? __pfx_bus_remove_device+0x10/0x10 [ 1372.887484][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1372.887501][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1372.887525][ C1] device_del+0x52b/0x900 [ 1372.887550][ C1] ? __pfx_device_del+0x10/0x10 [ 1372.887578][ C1] usb_disable_device+0x3d4/0x8d0 [ 1372.887604][ C1] usb_disconnect+0x315/0x970 [ 1372.887627][ C1] hub_event+0x1cf9/0x4f60 [ 1372.887682][ C1] ? __pfx_hub_event+0x10/0x10 [ 1372.887709][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 1372.887730][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 1372.887753][ C1] process_scheduled_works+0xb6e/0x18c0 [ 1372.887798][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1372.887825][ C1] ? assign_work+0x3d5/0x5e0 [ 1372.887854][ C1] worker_thread+0xa53/0xfc0 [ 1372.887896][ C1] kthread+0x388/0x470 [ 1372.887913][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1372.887934][ C1] ? __pfx_kthread+0x10/0x10 [ 1372.887951][ C1] ret_from_fork+0x51e/0xb90 [ 1372.887975][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1372.887996][ C1] ? __switch_to+0xc7d/0x1450 [ 1372.888018][ C1] ? __pfx_kthread+0x10/0x10 [ 1372.888036][ C1] ret_from_fork_asm+0x1a/0x30 [ 1372.888062][ C1] [ 1372.888069][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 9476 jiffies! g75037 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1372.888086][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=51688 [ 1372.888094][ C1] rcu: rcu_preempt kthread starved for 9477 jiffies! g75037 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1372.888110][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1372.888118][ C1] rcu: RCU grace-period kthread stack dump: [ 1372.888123][ C1] task:rcu_preempt state:I stack:27080 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1372.888170][ C1] Call Trace: [ 1372.888175][ C1] [ 1372.888183][ C1] __schedule+0x1553/0x5240 [ 1372.888219][ C1] ? __pfx___schedule+0x10/0x10 [ 1372.888241][ C1] ? schedule+0x90/0x360 [ 1372.888259][ C1] schedule+0x164/0x360 [ 1372.888275][ C1] schedule_timeout+0x158/0x2c0 [ 1372.888293][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1372.888309][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1372.888332][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1372.888350][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1372.888378][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1372.888395][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1372.888413][ C1] ? rcu_gp_init+0x1313/0x15b0 [ 1372.888430][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1372.888446][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1372.888459][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1372.888480][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1372.888501][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1372.888518][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1372.888530][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1372.888549][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1372.888573][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1372.888601][ C1] kthread+0x388/0x470 [ 1372.888617][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1372.888630][ C1] ? __pfx_kthread+0x10/0x10 [ 1372.888647][ C1] ret_from_fork+0x51e/0xb90 [ 1372.888671][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1372.888692][ C1] ? __switch_to+0xc7d/0x1450 [ 1372.888714][ C1] ? __pfx_kthread+0x10/0x10 [ 1372.888731][ C1] ret_from_fork_asm+0x1a/0x30 [ 1372.888757][ C1] [ 1372.888762][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1372.888789][ C1] CPU: 1 UID: 0 PID: 14478 Comm: syz.6.2115 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1372.888817][ C1] Tainted: [L]=SOFTLOCKUP [ 1372.888823][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1372.888832][ C1] RIP: 0010:__kasan_check_byte+0x2d/0x40 [ 1372.888847][ C1] Code: d6 41 56 53 48 89 f3 49 89 fe e8 8e 15 00 00 84 c0 75 16 be 01 00 00 00 4c 89 f7 31 d2 48 89 d9 89 c3 e8 06 05 00 00 89 d8 5b <41> 5e c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 1372.888865][ C1] RSP: 0000:ffffc9000da175d8 EFLAGS: 00000202 [ 1372.888878][ C1] RAX: 0000000000000001 RBX: 1ffff92001b42ed0 RCX: 0000000080000001 [ 1372.888888][ C1] RDX: 0000000000000000 RSI: ffffffff8b2681ec RDI: 1ffffffff1bb9730 [ 1372.888899][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1372.888908][ C1] R10: dffffc0000000000 R11: fffffbfff1ed4e97 R12: 0000000000000002 [ 1372.888918][ C1] R13: ffffffff8ddcb980 R14: ffffffff8ddcb980 R15: 0000000000000000 [ 1372.888929][ C1] FS: 00007fb16423c6c0(0000) GS:ffff888126432000(0000) knlGS:0000000000000000 [ 1372.888942][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1372.888953][ C1] CR2: 00007f6acc286038 CR3: 000000006ed62000 CR4: 00000000003526f0 [ 1372.888967][ C1] Call Trace: [ 1372.888972][ C1] [ 1372.888977][ C1] lock_acquire+0x79/0x2e0 [ 1372.888994][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1372.889014][ C1] rt_spin_lock+0x1fc/0x400 [ 1372.889036][ C1] ? rt_spin_lock+0x1e0/0x400 [ 1372.889060][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 1372.889081][ C1] ? rt_spin_unlock+0x14f/0x200 [ 1372.889107][ C1] ? rt_spin_unlock+0x160/0x200 [ 1372.889131][ C1] write_pool_user+0x110/0x2f0 [ 1372.889198][ C1] ? __pfx_write_pool_user+0x10/0x10 [ 1372.889221][ C1] ? __asan_memset+0x22/0x50 [ 1372.889246][ C1] iter_file_splice_write+0x9a6/0x10f0 [ 1372.889331][ C1] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1372.889354][ C1] ? __pfx_copy_splice_read+0x10/0x10 [ 1372.889383][ C1] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1372.889404][ C1] direct_splice_actor+0x104/0x160 [ 1372.889428][ C1] splice_direct_to_actor+0x545/0xc80 [ 1372.889457][ C1] ? __pfx_direct_splice_actor+0x10/0x10 [ 1372.889483][ C1] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1372.889503][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1372.889520][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 1372.889550][ C1] do_splice_direct+0x19b/0x2a0 [ 1372.889572][ C1] ? __pfx_do_splice_direct+0x10/0x10 [ 1372.889593][ C1] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1372.889621][ C1] ? rw_verify_area+0x25b/0x4e0 [ 1372.889677][ C1] do_sendfile+0x547/0x7e0 [ 1372.889702][ C1] ? __pfx_do_sendfile+0x10/0x10 [ 1372.889722][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1372.889738][ C1] ? irqentry_exit+0x59e/0x620 [ 1372.889754][ C1] ? rcu_is_watching+0x15/0xb0 [ 1372.889776][ C1] __se_sys_sendfile64+0x144/0x1a0 [ 1372.889796][ C1] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1372.889817][ C1] ? __x64_sys_sendfile64+0x74/0xb0 [ 1372.889838][ C1] do_syscall_64+0x14d/0xf80 [ 1372.889875][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.889891][ C1] ? clear_bhb_loop+0x40/0x90 [ 1372.889910][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.889925][ C1] RIP: 0033:0x7fb16602c819 [ 1372.889944][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.889956][ C1] RSP: 002b:00007fb16423c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1372.889971][ C1] RAX: ffffffffffffffda RBX: 00007fb1662a6180 RCX: 00007fb16602c819 [ 1372.889982][ C1] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a [ 1372.889991][ C1] RBP: 00007fb1660c2c91 R08: 0000000000000000 R09: 0000000000000000 [ 1372.890000][ C1] R10: 0000004800000009 R11: 0000000000000246 R12: 0000000000000000 [ 1372.890010][ C1] R13: 00007fb1662a6218 R14: 00007fb1662a6180 R15: 00007fff62922178 [ 1372.890034][ C1] [ 1393.014482][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1393.015751][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1393.518663][ T9745] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1393.653027][ T9745] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1393.706890][ T9745] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1393.715458][ T9745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1393.719921][ T9745] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1395.432304][ T5800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1395.448933][ T5800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1395.453793][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1395.467691][ T5800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1395.476613][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1395.484364][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1395.544662][ T5800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1395.544825][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1395.554540][ T5800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1395.570077][T14506] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1395.885637][T14471] bridge0: port 3(syz_tun) entered disabled state [ 1396.240458][T14471] syz_tun (unregistering): left allmulticast mode [ 1396.240491][T14471] syz_tun (unregistering): left promiscuous mode [ 1396.240595][T14471] bridge0: port 3(syz_tun) entered disabled state [ 1396.434435][ T9745] Bluetooth: hci5: command tx timeout [ 1397.228733][ T5798] bridge0: port 3(syz_tun) entered disabled state [ 1397.380462][ T5798] syz_tun (unregistering): left allmulticast mode [ 1397.380496][ T5798] syz_tun (unregistering): left promiscuous mode [ 1397.380632][ T5798] bridge0: port 3(syz_tun) entered disabled state [ 1397.694462][ T9745] Bluetooth: hci6: command tx timeout [ 1398.011217][ T5803] bridge0: port 3(syz_tun) entered disabled state [ 1398.098118][ T5803] syz_tun (unregistering): left allmulticast mode [ 1398.098142][ T5803] syz_tun (unregistering): left promiscuous mode [ 1398.098207][ T5803] bridge0: port 3(syz_tun) entered disabled state [ 1398.409727][ T9038] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.659530][ T9038] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.882004][ T9038] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.200528][ T9038] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.785114][ T9038] bridge_slave_1: left allmulticast mode [ 1399.785137][ T9038] bridge_slave_1: left promiscuous mode [ 1399.785334][ T9038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.865824][ T9038] bridge_slave_0: left allmulticast mode [ 1399.865858][ T9038] bridge_slave_0: left promiscuous mode [ 1399.866136][ T9038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.705399][ T9038] gretap0 (unregistering): left allmulticast mode [ 1401.045176][ T9038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1401.145306][ T9038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1401.191786][ T9038] bond0 (unregistering): Released all slaves [ 1402.734509][ T9038] hsr_slave_0: left promiscuous mode [ 1402.764819][ T9038] hsr_slave_1: left promiscuous mode [ 1402.765767][ T9038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1402.765791][ T9038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.795842][ T9038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1402.795871][ T9038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.868273][ T9038] veth1_macvtap: left promiscuous mode [ 1402.868353][ T9038] veth0_macvtap: left promiscuous mode [ 1402.868529][ T9038] veth1_vlan: left promiscuous mode [ 1402.868638][ T9038] veth0_vlan: left promiscuous mode