last executing test programs: 3m6.856536378s ago: executing program 2 (id=164): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x10}}, 0x0) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x40000000000000, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) r2 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) openat(r3, &(0x7f0000000300)='./file1\x00', 0x105843, 0x8) (async) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) 3m6.458388856s ago: executing program 2 (id=166): r0 = socket$inet_dccp(0x2, 0x6, 0x0) recvmsg(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e25, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x1}, 0x1c) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100000000000fddbdf25120000000800030059829535de683b400a7304f3c66f7978c8f7d4ef424570f35bed636cca8b2c3324d631e4e87b7115ef384d9f7ba507eef6f2befd54b4aca05ec671998ada16253384ce87f6319a535d8b5fb165346541d0fef368569934ab9778614ce3029ec3740968be0ef6a87e96d8c99dd585d385226fb1", @ANYRES32=0x0, @ANYBLOB="0a000600080211000001000004008100"], 0x2c}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x100, 0x0, 'queue1\x00', 0x7}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) dup2(r6, r5) r7 = creat(0x0, 0x0) close(r7) socket$inet6(0xa, 0x400000000001, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r8, &(0x7f0000000240)=[{&(0x7f0000000180)="5d4ea742bdcf04350cd928aef7e33f86b9cc23c5419e9a153a4b440221c292bb80d6f8f4aff61e00"/53, 0x35}], 0x1) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @empty, 0x200}, 0x1c) shutdown(0xffffffffffffffff, 0x0) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) socket(0x10, 0x3, 0x0) 3m6.141956576s ago: executing program 2 (id=167): io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x9, 0x8, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc}]) socket(0x2b, 0x4, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000200)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x4000000000000000}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000000367fe4aab8892c48b6321ee470163de90000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 3m5.056858465s ago: executing program 2 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100000ede84205a08090047a30102030109022d0001000000000904eb00027916fd000905010800040704970904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="0823004e15"]) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @rand_addr=0x64010102}}, 0x0, 0x0, 0x0, 0x3, 0x563}, 0x9c) syz_io_uring_setup(0x5325, &(0x7f0000000400)={0x0, 0x4f4d, 0x200, 0x0, 0x13e}, &(0x7f0000000280), &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r6, &(0x7f0000000440)="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", 0xfdb7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r5, 0x1}, &(0x7f00000001c0)=0x8) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f00000000c0)='./file0/file0\x00', 0x224) 3m0.622986737s ago: executing program 2 (id=187): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000040)={0x98f907, 0x8, "6a3ce4ba4a0f1d05005e02c75ec18cfcdbf4000000000500"}) r3 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r3, @ANYBLOB, @ANYRESHEX=r1]) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r4, 0x34, 0x1, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000140)=[0x0], 0x0}, 0x40) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map=r8, r4, 0x2e, 0x3f, r5, @void, @void, @void, @value, r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r4}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 2m57.614092466s ago: executing program 2 (id=193): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a1", 0xa0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={{}, {0x0, 0xffffffffffffffff}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) 2m56.773586154s ago: executing program 32 (id=193): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a1", 0xa0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={{}, {0x0, 0xffffffffffffffff}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) 14.538475723s ago: executing program 3 (id=714): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xe) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0xfffe, 0x60}, 'syz0\x00', 0x19}) ioctl$UI_DEV_CREATE(r2, 0x5501) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffff, r1, &(0x7f0000000040)="8e18", 0x2, 0x7fffffffffffffff}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, r1, 0x0, 0x0, 0x80000001}]) 14.202556635s ago: executing program 3 (id=716): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000000000003e030000000000010902240001000000000904000005030000000921ffff0001220500090581031000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) 13.810715721s ago: executing program 4 (id=720): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x5) (async) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'geneve0\x00', @local}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4) (async) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) gettid() (async) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002c00010026bd7000fcdbdf2504000000080017"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) preadv(r1, &(0x7f0000000000), 0x0, 0xffff, 0xffffffff) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x6, 0x9, 0x2, 0x0, 0x2, 0x8}) 13.034938071s ago: executing program 4 (id=724): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x3c}}, 0x20044051) 12.842516386s ago: executing program 4 (id=728): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf252100000008000300", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 11.302506908s ago: executing program 4 (id=731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000000c0)=""/74, 0x2a) getdents64(r1, 0x0, 0x44) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) close(r2) socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300010062726f6164636173fd6def9e6e6b000014000780080001000e00000008000200c00000001300010062726f6164636173742d6c696e6b"], 0x1ac}}, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0xad34e000) splice(r8, 0x0, r7, &(0x7f0000000140), 0x4, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000020500000000000000020001eefbe6ab07045452fabde6000073797a3100000000050001000600000011000300686173b9fc495f683a6e65742c248382e000000000e0e79af65ccecf96871c8cf53dd200"/101], 0x44}}, 0x0) 10.070254943s ago: executing program 3 (id=736): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f00000003c0)) syz_io_uring_setup(0x1911, &(0x7f00000004c0)={0x0, 0x3960, 0x200, 0x0, 0xfffffffd}, 0x0, &(0x7f0000000280)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x228200, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x11, 0x0, r1, 0x0, &(0x7f0000000380)='./file0\x00', 0x148, 0x101801, 0x23456}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$loop(&(0x7f0000000240), 0x95, 0x8000) socket$l2tp6(0xa, 0x2, 0x73) socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/566, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x239) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x885, 0x121301) ioctl$USBDEVFS_CONNECTINFO(r4, 0x80045505, &(0x7f0000002a40)) io_uring_setup(0x2fcb, &(0x7f0000000440)={0x0, 0x4da1, 0x1000, 0x1, 0x264}) madvise(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x64) r5 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05003eb4d9597bff04b126a741b7b90f6500000000000071114200000000008510000002000000010000000500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 9.210229337s ago: executing program 0 (id=738): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tlb_flush\x00', r0}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x422100) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r2], 0x40}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000940)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800002, 0x14) 8.362800733s ago: executing program 0 (id=739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x35) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x60, 0x5, 0x0, 0x469a}]}) 7.131845229s ago: executing program 3 (id=741): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 6.926858097s ago: executing program 1 (id=742): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) dup(r6) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000009080080f1000040"]) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000845, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) socket$netlink(0x10, 0x3, 0x10) 6.92257779s ago: executing program 0 (id=743): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) 6.850738148s ago: executing program 4 (id=744): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="eaff0000000000000400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000021cf1f7418110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES8=r2, @ANYRESDEC=0x0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r5, 0x10, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) 6.618670146s ago: executing program 0 (id=745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x48, r1, 0xe0ccf0f2d388eeeb, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.817723147s ago: executing program 1 (id=746): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0xa, [{0x6}, {0xffff, 0x4}, {0xffffff7f, 0x7f}, {0x1000, 0x1}, {0x7ff, 0xfffffffc}, {0xc7, 0xf}, {0x9ab6, 0x2}, {0x9, 0x2}, {0x401, 0x83}, {0x7f, 0x8001}]}}) 5.506680839s ago: executing program 0 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{}, 0x0, 0x0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x203, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r4}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b703000000000000850000"], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x1a, &(0x7f0000000180)=""/26, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) 5.254052281s ago: executing program 5 (id=748): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x1ff, 0x2, 0x4, 0x20, 0x5, {0x0, 0xea60}, {0x2, 0xc, 0x56, 0xa, 0x0, 0xe, "ba8135f1"}, 0xffff, 0x4, {}, 0x4, 0x0, r1}) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x80000001, 0x50565559, 0x1, @discrete={0x200, 0x12}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x400200, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}, {0x1, @local}, 0x10, {0x2, 0x4e22, @private=0xa010100}, 'veth1_to_batadv\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x17, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @call={0x85, 0x0, 0x0, 0x27}, @jmp={0x5, 0x0, 0x0, 0x6, 0x4, 0x50, 0xffffffffffffffff}, @ldst={0x3, 0x1, 0x0, 0x6, 0x4, 0x2, 0xfffffffffffffffc}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x8, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff], 0x0, 0x10, 0x3, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000340)='svcrdma_no_rwctx_err\x00', r3, 0x0, 0x9}, 0x18) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000640)={0x7, {0x4c35, 0x7, 0x8, 0x80}}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000008c0)={0x0, 0x1, &(0x7f00000006c0)=""/196, &(0x7f00000007c0)=""/173, &(0x7f0000000880)=""/59, 0xdddd1000}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940), 0x6241, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), r6) r7 = socket(0xa, 0x6, 0x9) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000980)={0x280, 0x140, 0x356, 0x10, 0x1, 0xa, 0x0, 0x0, {0x5b, 0xfffffffa, 0x1}, {0xf, 0x1}, {0x200, 0x9}, {0x3}, 0x2, 0x110, 0x6, 0x4, 0x1, 0x8001, 0x401, 0x1, 0x0, 0x10001, 0xa, 0x0, 0x22, 0x0, 0x2}) r8 = getpid() read$FUSE(r6, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000002a80)={0x8, 0x7ff, {r8}, {r9}, 0xffffffffffffffff, 0xaf}) ptrace$ARCH_SHSTK_ENABLE(0x1e, r10, 0x4292224f19152a59, 0x5001) r11 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000002ac0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0x59, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x10, 0x7, 0x1, {0x22, 0xb27}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x3, 0x3a}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x81, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000002c00)={0xa, &(0x7f0000002b00)={0xa, 0x6, 0x110, 0x3, 0x5, 0x5, 0x8, 0xb}, 0x18, &(0x7f0000002b40)={0x5, 0xf, 0x18, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x5c, 0x1, 0x8, 0x0, 0x3, [0xff3f00]}]}, 0x2, [{0x4, &(0x7f0000002b80)=@lang_id={0x4, 0x3, 0xc56}}, {0x4, &(0x7f0000002bc0)=@lang_id={0x4, 0x3, 0x41f}}]}) syz_usb_control_io$hid(r11, &(0x7f0000002e00)={0x24, &(0x7f0000002c40)={0x0, 0xe, 0x8d, {0x8d, 0x22, "6c2334bd9ab1d2a2f38972eb847e9d05c36245785169c63def2f9bfe886d8f9630ed53033a25303062c4bcf9c6cd5c562da18d2de5d95faddbe316843f32694fc3d8db2b29e16b6d8254ffbe732e179df6e5c745ce64040367461a60a239946801fefd2ec1c750fc0c988c87f125974920690c7616807253a07f6fadc887fa0c51742404264b74b9373617"}}, &(0x7f0000002d00)={0x0, 0x3, 0x42, @string={0x42, 0x3, "c9862766fcdc0e3428c0e066fb7266ed72e5bcf8f7e6c93dfa7cd34c00d37cd041e04b5023d039dbc51dd7532e80a6b0dafb72e2b9913aebd90af91a1630115e"}}, &(0x7f0000002d80)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x3, "8674a4dc"}, @local=@item_012={0x0, 0x2, 0x7}, @global=@item_012={0x1, 0x1, 0xa, "e2"}, @global=@item_012={0x2, 0x1, 0xa, "1a7b"}, @local=@item_4={0x3, 0x2, 0xa, "efa2fc07"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x2, 0x0, 0xa, "79f4"}]}}, &(0x7f0000002dc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0x4f5}}}}, &(0x7f0000002fc0)={0x2c, &(0x7f0000002e40)={0x20, 0x14, 0x22, "907eb8f1a0ac6d0e6dbc81abbc5de3368c016a6c4d1d138ffdd7186f8824160eed3d"}, &(0x7f0000002e80)={0x0, 0xa, 0x1}, &(0x7f0000002ec0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000002f00)={0x20, 0x1, 0x54, "17d143cdaba62dd7cc0dfc9287d7398c644005fbcf184bbc1355e7ea44e4723b220245797f2bc6a2077298772e8a33c92882a2200494cec496e6156974f76e28e6795dafa22faf327a844afa076fd5853dfebec5"}, &(0x7f0000002f80)={0x20, 0x3, 0x1, 0x40}}) getpid() getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000030c0)={0x0, 0x9c, &(0x7f0000003000)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e23, 0x8, @empty, 0x7f}, @in6={0xa, 0x4e24, 0xe0b, @mcast2, 0x1}, @in6={0xa, 0x4e20, 0x9, @empty, 0x7}, @in6={0xa, 0x4e20, 0x1, @loopback, 0x7}, @in6={0xa, 0x4e21, 0xfff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x4f8}]}, &(0x7f0000003100)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000003140)={r12, 0x8, 0x20, 0x0, 0xdfdb}, &(0x7f0000003180)=0x18) syz_usb_control_io$hid(r11, &(0x7f0000003380)={0x24, &(0x7f00000031c0)={0x20, 0x9, 0xe4, {0xe4, 0x4, "70ba0d4c553ae660ad0aacfb5b600cbdad7615a87c89a5b2a1e9eb8678a29a9b33042d1ed7bc38c945f086fbccb456f9b1b3d0a8e1c2318eeb82667751ffd83e75afe6ee9070520f4d7fd7aa5ebbf19605c7ba67602cd6cd52ecabf456a9ae6b2b765462ea8311b297946126de89517343e6ef13276b8663bfa311793a32b1284f62e3d5b22d5899886baf1e0885e205927c9f5e6a6d8158f40ad40b9c818b0fbf7126dc5c0f182aa737851ba241a57d5a304965c5ec671db1e50b7c3cc77d4dce9379839550eb698adaec912bedcbcb60c73311f9a16f304af6c269d435ca724dc9"}}, &(0x7f00000032c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f0000003300)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x1, "10ac"}]}}, &(0x7f0000003340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0x1c6}}}}, &(0x7f00000036c0)={0x2c, &(0x7f00000033c0)={0x40, 0x11, 0xfc, "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"}, &(0x7f0000003500)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000003540)={0x0, 0x8, 0x1, 0x28}, &(0x7f0000003580)={0x20, 0x1, 0xc3, "57d1a81cbabff7a61daeb937bc1f80fe431287a5ab4122e81f5efd028b96e8a994c9675b05d7d5050912548dd5bc80c3616c6c521ff509fe214c0bd7bbbdc0a0d4fce4e956336fdd1130322ca1464d062c153b2f58d1d5b53b80e47e76f5b7272145e0ad2dd5ebb2d1f843bbe0c900541a7634495951a60a68c511d7f2e2a9106d35f9bba00ae997de7e3ce50c0ed225306e63f4dc34dfef8b65e28330b2c596a4c41a9221e39c6c3ee243166a8cdc30089f7a525bed55d23d9cda913ff47b63471ab7"}, &(0x7f0000003680)={0x20, 0x3, 0x1, 0x8}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003700)) syz_open_dev$tty1(0xc, 0x4, 0x3) add_key(&(0x7f0000003740)='.request_key_auth\x00', &(0x7f0000003780)={'syz', 0x1}, &(0x7f00000037c0)="1105ec5b25a6ddd965a1e3865e25f4dd88e2575da2a44fac52bc2c9587983ece4accbf813c2746295cd31f05ba155c2e28f01371220cf1eaf34b0c35f513567b8d71b975b81ea877d55fb1987807d293ac9672d3111d3a28a218da99e181c9a05e850025591d7909bc1b2da0351b1ea9783f04b45e53c24a613672047f620824a3ea7f8ad499bd5ce8aa69b282c474b90af474976ce75cafd2d116240c62109a1597120e3fb06e45ebe70a36f2441d6e0f1c10c52326558e714bb74bab24e0cd77e8836335a0bca10649321b33460b6fa429fdf658bfc5f59f94a91608c7d76a987d9d3dbd6212eb0276132a51e0", 0xee, 0xfffffffffffffffd) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000038c0)=@ccm_128={{0x303}, "f66d617dc6dbb8bf", "ae763cf3f4785eb063a292f0e016082d", "51fb5c20", "652631cf5d39d775"}, 0x28) 5.163767973s ago: executing program 4 (id=749): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x25, &(0x7f0000000000), 0x20000010) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x27, 0x27, 0x2, [@enum={0x6}, @ptr={0xa, 0x0, 0x0, 0x2, 0x2}, @datasec={0xe, 0x0, 0x0, 0xf, 0x3, [], "9581f2"}]}}, 0x0, 0x42, 0x0, 0x0, 0x80000000, 0x0, @void, @value}, 0x28) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x5000}], 0x2, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = io_uring_setup(0x495, &(0x7f0000000380)={0x0, 0x2b7, 0x8, 0x0, 0x256, 0x0, r3}) io_uring_register$IORING_UNREGISTER_RING_FDS(r7, 0x15, &(0x7f00000004c0)=[{0x3, 0x1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/95, 0x5f}, {&(0x7f0000000580)=""/150, 0x96}, {&(0x7f00000001c0)=""/41, 0x29}], &(0x7f0000000480)=[0x0, 0xfffffffffffffc01, 0x3, 0x1d, 0x1, 0x6]}], 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) fsetxattr(r9, &(0x7f00000004c0)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000680)={0x0, 0x4, 0x1, 0x7}, 0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001200010000000000000f00000000000a14000000000a0102000000000000000007000000140000001000010000000000000000000084000a"], 0x3c}}, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r10, 0xae78, &(0x7f0000000640)=0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.860482206s ago: executing program 1 (id=750): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a990dd2034120200cc87010203010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2c020600) r0 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT], 0x2000, 0x800) msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x27, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',grou', @ANYRESDEC=0x0]) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) utimes(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) msgctl$IPC_RMID(r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x2, 0x6, [0x4, 0x7, 0x0, 0x3, 0x0, 0xe774]}, &(0x7f0000000080)=0x14) syz_emit_ethernet(0x68, &(0x7f0000005a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd6575e70000323a00fe800000000000000000000000000000ff0200000000000000000001040090780000000060a3579e00002c00fe880000000000000000000000000001fe8000000000000000000000000000bb6be200000000"], 0x0) lsetxattr$smack_xattr_label(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64EXEC\x00', &(0x7f0000000180)={'#! '}, 0x4, 0x2) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@int=0x6, 0x4) getsockopt$bt_BT_SECURITY(r4, 0x10e, 0xc, 0x0, 0xfffffffffffffe6c) 4.859672341s ago: executing program 0 (id=751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000040, &(0x7f0000000040)={0x11, 0xf6, 0x0, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[], 0x11d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) syz_io_uring_setup(0x17ae, &(0x7f0000000380)={0x0, 0x0, 0x13290}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f00000006c0)="a8ab78c623ac03f8a615275ab866ffa86f9c1523763307a9fe584a4472da94426ab53b6de9f83bf3f02c524eb8c38af724c9029cdf9ac1db0792f74bf219519d26cd0c88ec5aaea26722a5a0d49145a1255852a99d8aec0d162e889cc8ee48290033d16d22a3997829e274278e265d414392e3a84796fa7e686a4f47c2f5a180613bc8157ad874a164f5b66ea4b4a78258b45b7e057231deda50cb2d792934880569ccfea1fb028e8f2b", 0xaa) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getchain={0x34, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff3, 0x4}, {0x0, 0x1b}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}]}, 0x34}}, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r9, 0x4008af60, &(0x7f0000000400)={@my=0x0}) r10 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) r11 = syz_usb_connect(0x1, 0x1df, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa5, 0xe8, 0xe8, 0x8, 0x55f, 0xc650, 0x6c0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1cd, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6f, 0x0, 0x5, 0xff, 0x39, 0xdf, 0x0, [], [{{0x9, 0x5, 0xe, 0x1, 0x40, 0x0, 0x2, 0x84, [@generic={0x7c, 0x22, "8625996b34246c6019aa23d54937233f9ba303a85645967bb15e6e77573efb523a89a11a8c50972f823932e28592dc2dea38655081f49b43159fdce4b1f9ed0bdb5106ffcf4beab56267707841335aa94a2860415f41e9eb76fc327190f12d4ee6d66ba2b717f1a89a52d2ab1e7768d681461be5b40f338c3e68"}, @generic={0xa2, 0x11, "25a032ab0ee2fcad23853d4419908832519f75203680b8d90ad445aa80f1230a0a2b08bc8be76ebcaa080fe92e221b63732d22586c2d5053f0d3a93d353bb7d57dce32741c374f154669d86acf288067d6a4a6a62deae6e934a8b4924df8a92d1130a9425c0a35d7ea92cb1bb7ffbcd75a8b3b4c0c0913bfe35d445b43a4ea125c3c7dd6722c040dc434e97e33663080576c9730a3082ff1fae3be64ab8f9f96"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xe5, 0x9, 0xbb}}, {{0x9, 0x5, 0x9, 0x6, 0x400, 0x7, 0x7f, 0xa}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0x7, 0x6, 0x5, [@generic={0x70, 0x22, "66375341fb351e6460ce5676963c11cc30d3c2a8a364f111913dc543fd32e868576aad29bd6d1dd98ea71b01a4fedcc18e65412e64329528e92095efc62a7a059aab10b0df021e26120389f60273a9bf4db5bf251d05bdc47918843db53d6e27ce78c13d0381d0ea16ca8f1d96e2"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x81, 0x6, 0x8}}]}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12011003000000ff2505a8a440000102030109022400010102000409040034020701015209050102100081e2670397ed0fea14080905"], &(0x7f0000000480)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x6, 0x9, 0x8, 0x20, 0x40}, 0x1a, &(0x7f0000000280)={0x5, 0xf, 0x1a, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x90402d2f6e1e855c, 0x0, 0x7f, 0x9, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x9, 0x6}]}, 0x4, [{0x62, &(0x7f00000002c0)=@string={0x62, 0x3, "d46dd8aa40197e43b216c34373f8a1b366bc3574a7b37212a6d95c8d1d96a533a389462d5b7c835920093fcc979778a8a011a31095af79c9cc06353d9f175dbc193cedfafd1f71a9b08e1d37d6b2a0d6515ece1b680973373a2ddcfc3d6c2d2f"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x80a}}, {0xad, &(0x7f0000000380)=@string={0xad, 0x3, "30bf7a304343c7cf8cb8aaefff8d5e3f906d49aaed0d2fe1b20e4d2ec8ffcdd92a94b8381555311d559b0f31e8c4bb9d033704db1a77d9d41bb71d385d6ebe27adb92cff4a9e7cc832515890bf990031a11297a3181cae9a4e63013f50be71a648383c9aae116abc2d2150c6bf676df7a8915651f03c60278a0542513a4af96eb7e06e22536ee8c9a8a173649694e5f5d44ae3aa30a6868e988f4a8747bf8898a95e2de60ab36f18e95a1f"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x20ac}}]}) syz_usb_ep_read(r11, 0x84, 0x9a, &(0x7f0000000500)=""/154) 4.066636401s ago: executing program 5 (id=752): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@upd={0xe8, 0x12, 0x9175d1cc76b41d65, 0x70bd2a, 0x25dfdbfd, {{'drbg_nopr_hmac_sha384\x00'}, '\x00', '\x00', 0x0, 0x2400}, [{0x8, 0x1, 0x2}]}, 0xe8}, 0x1, 0x0, 0x0, 0x14}, 0x800) syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x102300) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0xfffe, {0x5, 0x1}, {0x45, 0x8}, @rumble={0x44, 0xbb7}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0xfff, 0x4, @private0, @private2, 0x7800, 0x40, 0x4, 0xf}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000c00)=@delchain={0xffffffffffffff2a, 0x65, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xb}, {0x0, 0x4}}}, 0xf8}, 0x1, 0x0, 0x0, 0x91}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000300)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) ppoll(&(0x7f0000000000)=[{r3, 0x8084}], 0x1, &(0x7f0000000040), &(0x7f0000000080)={[0x4]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000480)={0xb, 0x30, 0x2, 0x84800}) bind$can_raw(r3, &(0x7f0000000100)={0x1d, r4}, 0x10) 3.606662151s ago: executing program 3 (id=753): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='neigh_update\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) poll(&(0x7f0000000200)=[{r3, 0x210}], 0x1, 0x80) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x1, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004800) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x49, &(0x7f0000000000)=0x8, 0x4) (async) setsockopt$inet6_int(r5, 0x29, 0x49, &(0x7f0000000000)=0x8, 0x4) listen(r5, 0x0) (async) listen(r5, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000200)=0xe3e, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000200)=0xe3e, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01002900000000000000240000002400000002000000000000000000000400000003000000000100000604000000001600030000000d020021000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2, 0x0, 0x0, @void, @value}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3.548986787s ago: executing program 5 (id=754): setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0xfffffffffffffffc, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f0000000000)='omfs\x00', 0x8004, 0x0) 3.460646023s ago: executing program 1 (id=755): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) 3.446492327s ago: executing program 5 (id=756): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) dup(r6) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000009080080f2000040"]) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000845, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) socket$netlink(0x10, 0x3, 0x10) 3.25975703s ago: executing program 1 (id=757): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffff, r1, &(0x7f0000000040)="8e18", 0x2, 0x7fffffffffffffff}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, r1, 0x0, 0x0, 0x80000001}]) 2.493420095s ago: executing program 1 (id=758): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140643000000000e000a001000000086419820dd618929d4", 0x31}, {&(0x7f0000000080)="30d214cfc52a5002d1f3badc7285031b42e6f4aa9c1f2c6033587a3cdf663fbdd96ef7e0820225610bb113c11ca21d5a56ba1b313c68fa43fced648f43c736bd0c7738debe996b29c5dd8729a528eb998c2227996d4c12a5864e167d554ec3a9015e03ca9291dcd43db3eb5160c63077e268c3f8049f200ae8647f820c61cb5456b2eddc7778104dcaff2160166afd33868084e55a694c11069feefb9a1e5a967f3639f6b7c47b8f995a24744d66ce81ca35dab06f3335eca48c3247f19b14dc4eae", 0xc2}, {&(0x7f0000000240)="a7fb584244f0cfbd16a92df1b1b4bd1536076f1aa1ca5eea39d4449309e2828d02aef9f3a58a095eb7f23e39d916f0426631874dc248d8365fb5a8d9410ae82303f2bcf2d554980cf9944ddc25732d73bd0074783f676ac6786437714b7a181e9f4fbabf7ea6a3c36f9e223d28424b71fa0b38c5bc11e1c17a26743679c3822a7d506edced7d69f4d47ef55083cded7c4feca40baf3f036f125ffdb6f9099a4f49b64d68ee1c4d", 0xa7}, {&(0x7f0000000300)="28543696b8ff334e1c40b20e4c06ceecf3fa1dcf6f35ccf24babfcc503e9fe462fdc26a6dda671c19f94b60f2f4afd0a41d2cd6ed6dd3227e8a4993cb1d0309c7fa831623c2351e79eddd02ce33d5e8f35e8b3bc305bbc3e3c70b8faf9a674cafbd9256c923db84ebfd010a00286124aaacf30ce9a3c82d6fc0f71615d67f2043066f7cdd82b97fb5c924f0acd50888167a27d39c58f4d5b34", 0x99}], 0x4}, 0x4006884) 2.306757924s ago: executing program 5 (id=759): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000400000004a23c000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000400000004a23c000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) (async) 322.621936ms ago: executing program 3 (id=760): r0 = socket(0x2a, 0x2, 0x0) (async, rerun: 32) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0xfffffeff, 0x3, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x100, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80000001, 0x0, 0x0, 0x0, 0x40000000000000}) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="12010300a6ff0540cdabeecdb905000000010902220001000000000904000001010351000905f6fefffffff000072501"], 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0xd0, 0x2c, 0xd27, 0x0, 0x1, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xa4, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0x1f, 0x8, 0x4, 0x2, 0xfd7a, 0x2, 0x13c1, [{0x0, 0x2, 0x7, 0xd}, {0x6f9, 0x4, 0x9, 0x8}, {0xfffffffa, 0x10, 0x1000, 0x2}, {0x94c1f255, 0x7, 0x7, 0xb17}, {0x16a1c393, 0xd42b, 0x9, 0xbb2}, {0x8, 0x9, 0x400, 0x8}, {0x0, 0x101, 0x8, 0x4345}, {0x6, 0x4, 0x2, 0x5}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0x9}}, @TCA_U32_POLICE={0x4}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40050}, 0x34048051) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_usb_connect(0x4, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xe0, 0x96, 0xd8, 0x20, 0x582, 0x75, 0x5153, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xd2, 0x80, 0xc9}}]}}]}}, 0x0) 0s ago: executing program 5 (id=761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01010000000000f5ff00010000000900010073797a30000000000900030073797a3100000000080007006e61550014000480080001400000000008000240"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): [ 99.448955][ T6343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.485427][ T5870] usb 5-1: device descriptor read/64, error -71 [ 99.613439][ T5870] usb usb5-port1: attempt power cycle [ 99.752767][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.774911][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 99.792182][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 99.802730][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 99.824354][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 99.837583][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 99.860654][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 99.954393][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 99.973541][ T5870] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 100.008344][ T5870] usb 5-1: device descriptor read/8, error -71 [ 100.075698][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 100.091702][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 100.113707][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 100.126904][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 100.139640][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 100.147108][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 100.156550][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 100.173436][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 100.183605][ T5897] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.196110][ T9] pwc: Registered as video103. [ 100.203705][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 100.225934][ T8] IPVS: starting estimator thread 0... [ 100.230535][ T6371] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 100.245557][ T9] usb 2-1: USB disconnect, device number 9 [ 100.263816][ T5870] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 100.298274][ T5870] usb 5-1: device descriptor read/8, error -71 [ 100.304852][ T5866] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 100.333578][ T6373] IPVS: using max 29 ests per chain, 69600 per kthread [ 100.369946][ T5897] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.380662][ T5897] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 100.390166][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.403390][ T5897] usb 1-1: config 0 descriptor?? [ 100.411512][ T5897] pwc: Askey VC010 type 2 USB webcam detected. [ 100.430186][ T5870] usb usb5-port1: unable to enumerate USB device [ 100.475877][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 100.483161][ T5866] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.500867][ T5866] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.512042][ T5866] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.529357][ T5866] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.549612][ T5866] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.559221][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.782244][ T5866] usb 4-1: GET_CAPABILITIES returned 0 [ 100.795818][ T5866] usbtmc 4-1:16.0: can't read capabilities [ 100.834553][ T5897] pwc: recv_control_msg error -32 req 02 val 2b00 [ 100.842214][ T5897] pwc: recv_control_msg error -32 req 02 val 2700 [ 100.860620][ T5897] pwc: recv_control_msg error -32 req 02 val 2c00 [ 100.878497][ T5897] pwc: recv_control_msg error -32 req 04 val 1000 [ 100.886952][ T5897] pwc: recv_control_msg error -32 req 04 val 1300 [ 100.917232][ T5897] pwc: recv_control_msg error -32 req 04 val 1400 [ 100.932259][ T5897] pwc: recv_control_msg error -32 req 02 val 2000 [ 100.952602][ T5897] pwc: recv_control_msg error -32 req 02 val 2100 [ 100.966986][ T5897] pwc: recv_control_msg error -32 req 04 val 1500 [ 100.991906][ T5897] pwc: recv_control_msg error -32 req 02 val 2500 [ 101.011733][ T9] usb 4-1: USB disconnect, device number 11 [ 101.037215][ T5897] pwc: recv_control_msg error -32 req 02 val 2400 [ 101.048552][ T5897] pwc: recv_control_msg error -32 req 02 val 2600 [ 101.069621][ T5897] pwc: recv_control_msg error -32 req 02 val 2900 [ 101.081717][ T5897] pwc: recv_control_msg error -32 req 02 val 2800 [ 101.294921][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.314023][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.324653][ T5897] pwc: recv_control_msg error -71 req 04 val 1200 [ 101.337271][ T5897] pwc: Registered as video103. [ 101.354451][ T5867] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.367582][ T5897] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 101.389920][ T5897] usb 1-1: USB disconnect, device number 6 [ 101.533393][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 101.583680][ T5867] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.606741][ T5867] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.616695][ T5867] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 101.629360][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.664997][ T6400] team0: entered promiscuous mode [ 101.670158][ T6400] team_slave_0: entered promiscuous mode [ 101.685913][ T5867] usb 3-1: config 0 descriptor?? [ 101.694514][ T6400] team_slave_1: entered promiscuous mode [ 102.696707][ T6414] binder_alloc: binder_alloc_mmap_handler: 6410 20ffd000-21000000 already mapped failed -16 [ 102.732597][ T6414] binder: BINDER_SET_CONTEXT_MGR already set [ 102.759354][ T6414] binder: 6410:6414 ioctl 4018620d 20004a80 returned -16 [ 103.040243][ T6418] vlan2: entered promiscuous mode [ 103.049057][ T6418] hsr0: entered promiscuous mode [ 103.076855][ T6418] vlan2: entered allmulticast mode [ 103.077376][ T5867] logitech 0003:046D:C29C.0002: unknown global tag 0xe [ 103.082021][ T6418] hsr0: entered allmulticast mode [ 103.088994][ T5867] logitech 0003:046D:C29C.0002: item 0 0 1 14 parsing failed [ 103.089899][ T5867] logitech 0003:046D:C29C.0002: parse failed [ 103.108681][ T5867] logitech 0003:046D:C29C.0002: probe with driver logitech failed with error -22 [ 103.131573][ T6418] hsr_slave_0: entered allmulticast mode [ 103.150303][ T6418] hsr_slave_1: entered allmulticast mode [ 103.179855][ T6418] hsr0: left allmulticast mode [ 103.190455][ T6418] hsr_slave_0: left allmulticast mode [ 103.211567][ T6418] hsr_slave_1: left allmulticast mode [ 103.217745][ T6418] hsr0: left promiscuous mode [ 103.283680][ T6402] team0: left promiscuous mode [ 103.288976][ T6402] team_slave_0: left promiscuous mode [ 103.300133][ T6402] team_slave_1: left promiscuous mode [ 103.362728][ T6423] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 103.375867][ T6422] netlink: 'syz.0.137': attribute type 1 has an invalid length. [ 103.401878][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.409455][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.409550][ T5866] usb 3-1: USB disconnect, device number 2 [ 103.435804][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.443036][ T6423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.450525][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.458201][ T6423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.502476][ T6423] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 103.754400][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'. [ 104.033567][ T5866] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 104.321065][ T6456] trusted_key: encrypted_key: insufficient parameters specified [ 104.342142][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 104.376721][ T5866] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 104.406396][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 104.543881][ T5866] usb 5-1: Product: syz [ 104.553648][ T5866] usb 5-1: Manufacturer: syz [ 104.558365][ T5866] usb 5-1: SerialNumber: syz [ 104.567820][ T5866] usb 5-1: config 0 descriptor?? [ 104.967015][ T5866] usb 5-1: USB disconnect, device number 13 [ 105.922976][ T6478] kernel profiling enabled (shift: 9) [ 105.931181][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 106.413801][ T5954] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 106.566169][ T5954] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.581957][ T5954] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.583416][ T5866] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 106.595898][ T5954] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.608444][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.622902][ T5954] usb 1-1: Product: syz [ 106.632095][ T5954] usb 1-1: Manufacturer: syz [ 106.646499][ T5954] usb 1-1: SerialNumber: syz [ 106.871779][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.909616][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.935079][ T5866] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 106.945507][ T5866] usb 2-1: config 0 has no interface number 0 [ 106.951650][ T5866] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 106.962686][ T5866] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 106.975423][ T5866] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 106.990618][ T5866] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 107.044888][ T6499] syz.3.153: attempt to access beyond end of device [ 107.044888][ T6499] loop7: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 107.058554][ T6499] gfs2: error -5 reading superblock [ 107.091561][ T5866] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.138810][ T5866] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 107.428076][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.637481][ T5866] usb 2-1: config 0 descriptor?? [ 107.676735][ T6490] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 107.709557][ T6485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.724337][ T5866] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 108.134428][ T6512] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.149203][ T25] usb 2-1: USB disconnect, device number 10 [ 108.153374][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 108.162588][ T25] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 108.962532][ T6485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.214143][ T5867] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 109.425778][ T5867] usb 4-1: unable to get BOS descriptor or descriptor too short [ 109.587214][ T6525] netlink: 48 bytes leftover after parsing attributes in process `syz.4.160'. [ 109.592204][ T5867] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 109.607144][ T5867] usb 4-1: config 6 has no interface number 0 [ 109.615068][ T5867] usb 4-1: config 6 interface 200 has no altsetting 0 [ 109.623512][ T6526] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 109.641172][ T5867] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 109.661139][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.669342][ T5867] usb 4-1: Product: syz [ 109.673840][ T6526] netlink: 240 bytes leftover after parsing attributes in process `syz.4.160'. [ 109.682924][ T6526] NCSI netlink: No device for ifindex 0 [ 109.689463][ T5867] usb 4-1: Manufacturer: syz [ 109.697780][ T5867] usb 4-1: SerialNumber: syz [ 109.778542][ T6485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.790700][ T6528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.161'. [ 109.906010][ T6485] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.979740][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.990128][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.582091][ T6485] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.615899][ T6485] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.640178][ T6485] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.645846][ T6538] capability: warning: `syz.2.164' uses deprecated v2 capabilities in a way that may be insecure [ 110.657907][ T6485] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.741052][ T5954] usb 1-1: 0:2 : does not exist [ 110.761078][ T5954] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 110.806358][ T5954] usb 1-1: USB disconnect, device number 7 [ 110.998049][ T6542] netlink: 18 bytes leftover after parsing attributes in process `syz.0.165'. [ 111.025912][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.141639][ T6545] btrfs: Unknown parameter '\^' [ 111.813844][ T5954] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.048558][ T5954] usb 1-1: too many configurations: 43, using maximum allowed: 8 [ 112.164388][ T5954] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 112.310599][ T5954] usb 1-1: can't read configurations, error -22 [ 112.387017][ T5867] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 112.396102][ T5867] dvb-usb: bulk message failed: -71 (3/0) [ 112.440325][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 112.449981][ T5954] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 112.466836][ T5867] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 112.494490][ T5867] usb 4-1: media controller created [ 112.558617][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.614833][ T5954] usb 1-1: too many configurations: 43, using maximum allowed: 8 [ 112.623373][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.645763][ T5954] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 112.646078][ T6558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.171'. [ 112.655517][ T5867] dvb-usb: bulk message failed: -71 (6/0) [ 112.673495][ T5954] usb 1-1: can't read configurations, error -22 [ 112.681295][ T5954] usb usb1-port1: attempt power cycle [ 112.696785][ T5867] dvb-usb: bulk message failed: -71 (6/0) [ 112.700294][ T30] audit: type=1326 audit(1736120292.428:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6557 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7e185d29 code=0x7ffc0000 [ 112.713035][ T5867] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 112.736646][ T5867] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 112.778783][ T5867] dvb-usb: schedule remote query interval to 150 msecs. [ 112.783351][ T30] audit: type=1326 audit(1736120292.438:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6557 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7e185d29 code=0x7ffc0000 [ 112.793744][ T5867] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 112.818698][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 112.853867][ T9] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 112.871504][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.914739][ T5867] usb 4-1: USB disconnect, device number 12 [ 112.923846][ T9] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 112.973831][ T9] usb 3-1: config 0 has no interface number 1 [ 113.005827][ T9] usb 3-1: config 0 interface 235 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 113.043955][ T5954] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 113.054082][ T5867] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 113.066925][ T9] usb 3-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.087864][ T9] usb 3-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 113.098310][ T5954] usb 1-1: too many configurations: 43, using maximum allowed: 8 [ 113.107728][ T5954] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 113.120597][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.133534][ T5954] usb 1-1: can't read configurations, error -22 [ 113.151046][ T9] usb 3-1: Product: syz [ 113.160023][ T9] usb 3-1: Manufacturer: syz [ 113.168726][ T9] usb 3-1: SerialNumber: syz [ 113.181578][ T9] usb 3-1: config 0 descriptor?? [ 113.273453][ T5954] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 113.314133][ T5954] usb 1-1: too many configurations: 43, using maximum allowed: 8 [ 113.340958][ T5954] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 113.357981][ T6574] overlayfs: failed to clone upperpath [ 113.364184][ T5954] usb 1-1: can't read configurations, error -22 [ 113.381620][ T5954] usb usb1-port1: unable to enumerate USB device [ 113.408809][ T9] kaweth 3-1:0.235: Firmware present in device. [ 113.594895][ T6553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.604177][ T6553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.622282][ T6553] ======================================================= [ 113.622282][ T6553] WARNING: The mand mount option has been deprecated and [ 113.622282][ T6553] and is ignored by this kernel. Remove the mand [ 113.622282][ T6553] option from the mount to silence this warning. [ 113.622282][ T6553] ======================================================= [ 113.974013][ T6585] netlink: 'syz.3.178': attribute type 9 has an invalid length. [ 113.981774][ T6585] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.178'. [ 114.186437][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 114.922166][ T6592] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 114.953724][ T25] usb 5-1: device descriptor read/64, error -71 [ 115.193524][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 115.473514][ T25] usb 5-1: device descriptor read/64, error -71 [ 115.759996][ T25] usb usb5-port1: attempt power cycle [ 116.383377][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 116.444234][ T25] usb 5-1: device descriptor read/8, error -71 [ 116.744978][ T9] kaweth 3-1:0.235: Error reading configuration (-71), no net device created [ 116.757633][ T9] kaweth 3-1:0.235: probe with driver kaweth failed with error -5 [ 117.776342][ T9] kaweth 3-1:0.0: Firmware present in device. [ 117.783889][ T9] kaweth 3-1:0.0: Error reading configuration (-71), no net device created [ 117.795833][ T9] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 117.808866][ T9] usb 3-1: USB disconnect, device number 3 [ 119.435739][ T6628] nfs4: Unknown parameter '' [ 119.513468][ T5867] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 119.666816][ T5867] usb 1-1: config 0 has an invalid interface number: 136 but max is 0 [ 119.680542][ T5867] usb 1-1: config 0 has no interface number 0 [ 119.688811][ T5867] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 119.705809][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.738198][ T5867] usb 1-1: config 0 descriptor?? [ 119.768230][ T5867] keyspan 1-1:0.136: Keyspan 2 port adapter converter detected [ 119.778460][ T5867] keyspan 1-1:0.136: found no endpoint descriptor for endpoint 81 [ 119.787329][ T5867] keyspan 1-1:0.136: found no endpoint descriptor for endpoint 1 [ 120.069991][ T6638] 9pnet_fd: Insufficient options for proto=fd [ 120.253824][ T6636] sp0: Synchronizing with TNC [ 120.275880][ T6637] sp0: Found TNC [ 120.420761][ T5867] keyspan 1-1:0.136: found no endpoint descriptor for endpoint 84 [ 120.428806][ T5867] keyspan 1-1:0.136: found no endpoint descriptor for endpoint 2 [ 120.429126][ T6633] [U] è` [ 120.437728][ T5867] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 120.449860][ T5867] keyspan 1-1:0.136: found no endpoint descriptor for endpoint 88 [ 120.457830][ T5867] keyspan 1-1:0.136: found no endpoint descriptor for endpoint 6 [ 120.512839][ T6612] bridge1: entered promiscuous mode [ 120.523223][ T6612] bridge1: entered allmulticast mode [ 120.593604][ T5867] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 120.869322][ T6270] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.878580][ T6654] xt_TCPMSS: Only works on TCP SYN packets [ 120.911639][ T8] usb 1-1: USB disconnect, device number 12 [ 120.928514][ T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 120.963061][ T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 120.980709][ T8] keyspan 1-1:0.136: device disconnected [ 120.986626][ T5867] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 121.003039][ T6270] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.084561][ T6270] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.129125][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.142602][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.143478][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 121.169259][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.170719][ T5867] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 121.189651][ T6270] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.200277][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.200301][ T5867] usb 4-1: config 4 has no interface number 0 [ 121.214496][ T5867] usb 4-1: config 4 interface 51 has no altsetting 0 [ 121.223599][ T5827] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 121.224731][ T5867] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=c4.ee [ 121.240110][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.251434][ T5867] usb 4-1: Product: syz [ 121.251496][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 121.255825][ T5867] usb 4-1: Manufacturer: syz [ 121.255848][ T5867] usb 4-1: SerialNumber: syz [ 121.292400][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.300580][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.325785][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.338742][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.350604][ T5825] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 121.363779][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 121.539764][ T6270] bridge_slave_1: left allmulticast mode [ 121.600628][ T6270] bridge_slave_1: left promiscuous mode [ 121.624703][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.695119][ T6270] bridge_slave_0: left allmulticast mode [ 121.700832][ T6270] bridge_slave_0: left promiscuous mode [ 121.720296][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.468720][ T5825] Bluetooth: hci3: command tx timeout [ 124.821714][ T6270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.834299][ T6270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.845420][ T6270] bond0 (unregistering): Released all slaves [ 124.874841][ T5867] peak_usb 4-1:4.51 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 124.883839][ T6670] netlink: 288 bytes leftover after parsing attributes in process `syz.4.201'. [ 124.913719][ T5867] peak_usb 4-1:4.51: unable to read PCAN-USB serial number (err -22) [ 125.044993][ T5867] peak_usb 4-1:4.51: probe with driver peak_usb failed with error -22 [ 125.081116][ T5867] usb 4-1: USB disconnect, device number 13 [ 125.510684][ T6715] input: syz0 as /devices/virtual/input/input10 [ 125.518139][ T6715] input: failed to attach handler leds to device input10, error: -6 [ 125.534576][ T5825] Bluetooth: hci3: command tx timeout [ 126.513502][ T6655] chnl_net:caif_netlink_parms(): no params data found [ 126.644651][ T6719] sch_tbf: burst 141 is lower than device ip6tnl0 mtu (1452) ! [ 126.745487][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.760377][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.626180][ T5825] Bluetooth: hci3: command tx timeout [ 127.659641][ T5869] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 127.690062][ T6270] hsr_slave_0: left promiscuous mode [ 127.713913][ T6270] hsr_slave_1: left promiscuous mode [ 127.729856][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.737565][ T6270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.748494][ T6745] netlink: 76 bytes leftover after parsing attributes in process `syz.1.215'. [ 127.785447][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.793083][ T6270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.823542][ T5869] usb 1-1: device descriptor read/64, error -71 [ 127.875013][ T6270] veth1_macvtap: left promiscuous mode [ 127.881098][ T6270] veth0_macvtap: left promiscuous mode [ 127.898269][ T6270] veth1_vlan: left promiscuous mode [ 127.904295][ T6270] veth0_vlan: left promiscuous mode [ 128.073463][ T5869] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 128.224152][ T5869] usb 1-1: device descriptor read/64, error -71 [ 128.473392][ T5869] usb usb1-port1: attempt power cycle [ 128.884144][ T5869] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 128.928279][ T5869] usb 1-1: device descriptor read/8, error -71 [ 129.184748][ T5869] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 129.207049][ T5869] usb 1-1: device descriptor read/8, error -71 [ 129.326511][ T5869] usb usb1-port1: unable to enumerate USB device [ 129.695166][ T5825] Bluetooth: hci3: command tx timeout [ 129.917020][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.024409][ T6772] overlayfs: failed to clone upperpath [ 130.142953][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.173472][ T6655] bridge_slave_0: entered allmulticast mode [ 130.921409][ T30] audit: type=1326 audit(1736120310.378:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6770 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7e185d29 code=0x7ffc0000 [ 130.991764][ T5869] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 131.045473][ T6655] bridge_slave_0: entered promiscuous mode [ 132.014789][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 132.032068][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.043410][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.050559][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.063382][ T30] audit: type=1326 audit(1736120310.388:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6770 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7e185d29 code=0x7ffc0000 [ 132.205672][ T6655] bridge_slave_1: entered allmulticast mode [ 132.336386][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.346388][ T5869] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 132.354430][ T6655] bridge_slave_1: entered promiscuous mode [ 132.355687][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.403509][ T30] audit: type=1326 audit(1736120310.408:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6770 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7b7e185d29 code=0x7ffc0000 [ 132.435562][ T5869] usb 1-1: config 0 descriptor?? [ 132.497313][ T30] audit: type=1326 audit(1736120310.408:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6770 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7e185d29 code=0x7ffc0000 [ 132.530608][ T30] audit: type=1326 audit(1736120310.408:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6770 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7e185d29 code=0x7ffc0000 [ 132.552296][ T30] audit: type=1326 audit(1736120310.418:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6770 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b7e185d29 code=0x7ffc0000 [ 132.574419][ T30] audit: type=1326 audit(1736120310.428:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6770 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7e185d29 code=0x7ffc0000 [ 132.596670][ T30] audit: type=1326 audit(1736120310.428:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6770 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7e185d29 code=0x7ffc0000 [ 132.618937][ T30] audit: type=1326 audit(1736120310.448:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6770 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b7e185d29 code=0x7ffc0000 [ 132.640643][ T30] audit: type=1326 audit(1736120310.458:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6770 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7e185d29 code=0x7ffc0000 [ 132.691787][ T6655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.755259][ T6655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.878693][ T6655] team0: Port device team_slave_0 added [ 132.941029][ T6655] team0: Port device team_slave_1 added [ 133.053937][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 133.259795][ T5869] ntrig 0003:1B96:0008.0003: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.0-1/input0 [ 133.283615][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 133.404647][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.411694][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.499613][ T25] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 133.618018][ T5869] usb 1-1: USB disconnect, device number 17 [ 133.624133][ T25] usb 4-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 133.632860][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.667994][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 133.684899][ T25] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 133.695884][ T25] usb 4-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 133.708415][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.724001][ T25] usb 4-1: Product: syz [ 133.734656][ T25] usb 4-1: Manufacturer: syz [ 133.740283][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.754643][ T25] usb 4-1: config 0 descriptor?? [ 133.848747][ T6655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.859815][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'. [ 133.920332][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.930613][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 133.937461][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.991473][ T6655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.054975][ T6270] IPVS: stop unused estimator thread 0... [ 134.243820][ T5869] usb 4-1: USB disconnect, device number 14 [ 134.384537][ T6655] hsr_slave_0: entered promiscuous mode [ 134.526552][ T6655] hsr_slave_1: entered promiscuous mode [ 134.709500][ T6655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.726209][ T6655] Cannot create hsr debugfs directory [ 134.727197][ T6822] netlink: 76 bytes leftover after parsing attributes in process `syz.3.228'. [ 135.129153][ T6820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.228'. [ 135.465382][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 136.459377][ T6655] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.606148][ T6655] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.547532][ T6655] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.626924][ T6655] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.815132][ T6655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.831369][ T6655] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.851026][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.858235][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.968643][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.975862][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.097757][ T6655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.296028][ T6890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.242'. [ 138.433427][ T6890] netlink: 76 bytes leftover after parsing attributes in process `syz.0.242'. [ 139.075366][ T6902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.246'. [ 139.200093][ T5954] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 139.253383][ T46] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 139.360956][ T5954] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.373369][ T5954] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 139.399169][ T6655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.853501][ T5827] Bluetooth: hci3: command 0x0405 tx timeout [ 139.969617][ T5954] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.978890][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.015641][ T6893] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.027239][ T5954] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.074301][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.083731][ T46] usb 1-1: config 38 has an invalid interface number: 216 but max is 1 [ 140.112748][ T46] usb 1-1: config 38 has an invalid interface number: 6 but max is 1 [ 140.153833][ T46] usb 1-1: config 38 has no interface number 0 [ 140.178964][ T46] usb 1-1: config 38 has no interface number 1 [ 140.193435][ T46] usb 1-1: config 38 interface 216 altsetting 33 endpoint 0xC has invalid maxpacket 520, setting to 64 [ 140.210901][ T46] usb 1-1: config 38 interface 216 altsetting 33 bulk endpoint 0x4 has invalid maxpacket 16 [ 140.225638][ T46] usb 1-1: config 38 interface 216 altsetting 33 endpoint 0x7 has an invalid bInterval 243, changing to 11 [ 140.237306][ T46] usb 1-1: config 38 interface 216 has no altsetting 0 [ 140.453109][ T46] usb 1-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=ed.59 [ 140.462770][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.471524][ T46] usb 1-1: Product: syz [ 140.476420][ T46] usb 1-1: Manufacturer: syz [ 140.481144][ T46] usb 1-1: SerialNumber: syz [ 140.506048][ T6899] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 140.606972][ T5869] usb 4-1: USB disconnect, device number 15 [ 140.761228][ T46] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.809071][ T46] usb 1-1: invalid MIDI in EP 0 [ 140.831157][ T46] snd-usb-audio 1-1:38.216: probe with driver snd-usb-audio failed with error -22 [ 140.893053][ T46] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.999381][ T46] snd-usb-audio 1-1:38.6: probe with driver snd-usb-audio failed with error -2 [ 141.039414][ T6655] veth0_vlan: entered promiscuous mode [ 141.062147][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:38.6/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.087160][ T46] usb 1-1: USB disconnect, device number 18 [ 141.102254][ T6655] veth1_vlan: entered promiscuous mode [ 141.188854][ T6655] veth0_macvtap: entered promiscuous mode [ 141.211660][ T6655] veth1_macvtap: entered promiscuous mode [ 141.255367][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.281224][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.315339][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.383356][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.413628][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.443086][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.480273][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.529907][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.579560][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.607971][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.653429][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.678603][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.739080][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.760634][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.798787][ T6655] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.818232][ T6655] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.850072][ T6655] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.877221][ T6655] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.941945][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.254'. [ 142.002952][ T6959] netlink: 76 bytes leftover after parsing attributes in process `syz.3.254'. [ 142.149735][ T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 142.174981][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.234760][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.333553][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 142.363033][ T25] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 142.403579][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.415866][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.453795][ T25] usb 5-1: Product: syz [ 142.458517][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.475194][ T25] usb 5-1: Manufacturer: syz [ 142.501554][ T25] usb 5-1: SerialNumber: syz [ 142.519480][ T25] usb 5-1: config 0 descriptor?? [ 142.852688][ T25] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 145.365066][ T6999] netlink: 'syz.3.260': attribute type 21 has an invalid length. [ 145.411057][ T7001] netlink: 512 bytes leftover after parsing attributes in process `syz.5.261'. [ 145.434073][ T6999] netlink: 132 bytes leftover after parsing attributes in process `syz.3.260'. [ 145.497738][ T25] usb write operation failed. (-71) [ 145.579106][ T25] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 145.590586][ T25] dvbdev: DVB: registering new adapter (Terratec H7) [ 145.592929][ T5827] Bluetooth: hci5: sending frame failed (-49) [ 145.597988][ T25] usb 5-1: media controller created [ 145.608561][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 145.610030][ T25] usb read operation failed. (-71) [ 145.621183][ T25] usb write operation failed. (-71) [ 145.629874][ T25] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 145.641728][ T25] usb 5-1: USB disconnect, device number 18 [ 145.655202][ T6998] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 147.843401][ T5825] Bluetooth: hci1: command tx timeout [ 148.321803][ T7016] warning: `syz.3.263' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 148.338183][ T7016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.263'. [ 148.546269][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'. [ 150.125232][ T46] IPVS: starting estimator thread 0... [ 150.213497][ T7025] IPVS: using max 26 ests per chain, 62400 per kthread [ 150.228167][ T7031] xt_cgroup: invalid path, errno=-2 [ 150.272087][ T7038] ip6gretap1: entered promiscuous mode [ 150.318375][ T7038] ip6gretap1: entered allmulticast mode [ 151.274040][ T7047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.267'. [ 151.353485][ T7047] netlink: 76 bytes leftover after parsing attributes in process `syz.0.267'. [ 151.724434][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 151.724454][ T30] audit: type=1326 audit(1736120331.438:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7048 comm="syz.1.271" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1993785d29 code=0x0 [ 151.847385][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'. [ 152.533554][ T7040] veth0_macvtap: left promiscuous mode [ 153.035274][ T7079] netlink: 'syz.3.278': attribute type 1 has an invalid length. [ 153.083518][ T7079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.426407][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 154.883468][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 154.897679][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.282'. [ 154.903774][ T25] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 154.922827][ T25] usb 4-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 154.993830][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 155.147977][ T25] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 155.159519][ T25] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 155.202125][ T25] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 155.260561][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.271831][ T25] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 155.288297][ T25] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 155.297254][ T25] usb 4-1: Product: syz [ 155.301540][ T25] usb 4-1: Manufacturer: syz [ 155.311848][ T25] usb 4-1: SerialNumber: syz [ 155.554155][ T25] usb 4-1: config 0 descriptor?? [ 155.561588][ T7095] netlink: 76 bytes leftover after parsing attributes in process `syz.0.282'. [ 155.594969][ T25] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 155.632652][ T25] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 155.879486][ T8] usb 4-1: USB disconnect, device number 16 [ 155.907940][ T8] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 156.825944][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 157.500803][ T7141] netlink: zone id is out of range [ 157.506130][ T7141] netlink: zone id is out of range [ 157.511267][ T7141] netlink: zone id is out of range [ 157.516482][ T7141] netlink: zone id is out of range [ 157.521604][ T7141] netlink: zone id is out of range [ 157.526756][ T7141] netlink: zone id is out of range [ 157.531873][ T7141] netlink: zone id is out of range [ 157.537331][ T7141] netlink: zone id is out of range [ 157.542460][ T7141] netlink: zone id is out of range [ 157.547663][ T7141] netlink: zone id is out of range [ 158.394172][ T7134] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 158.401041][ T7134] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 158.413509][ T7134] vhci_hcd vhci_hcd.0: Device attached [ 158.463402][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 159.457263][ T7118] syz_tun: entered promiscuous mode [ 159.753485][ T5866] vhci_hcd: vhci_device speed not set [ 159.815877][ T7138] vhci_hcd: connection closed [ 159.823478][ T5866] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 159.859092][ T7118] syz_tun: left promiscuous mode [ 159.868161][ T12] vhci_hcd: stop threads [ 159.873906][ T12] vhci_hcd: release socket [ 159.879256][ T12] vhci_hcd: disconnect device [ 160.183575][ T8] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 160.465587][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 160.480568][ T8] usb 1-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.40 [ 160.697466][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.706134][ T8] usb 1-1: Product: syz [ 160.710346][ T8] usb 1-1: SerialNumber: syz [ 160.744583][ T8] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 161.125432][ T7177] fuse: Bad value for 'fd' [ 161.528794][ T8] usb 1-1: USB disconnect, device number 19 [ 161.613126][ T30] audit: type=1326 audit(1736120341.298:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7159 comm="syz.3.293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b7e185d29 code=0x0 [ 162.048093][ T7188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.622276][ T25] usb 6-1: device descriptor read/all, error -110 [ 163.783528][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 164.003676][ T25] usb 6-1: device descriptor read/64, error -32 [ 164.243404][ T5869] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 164.254044][ T25] usb usb6-port1: attempt power cycle [ 164.419464][ T7213] autofs: Bad value for 'fd' [ 164.448409][ T5869] usb 4-1: config 0 has an invalid interface number: 100 but max is 0 [ 164.457324][ T5869] usb 4-1: config 0 has no interface number 0 [ 164.473182][ T5869] usb 4-1: config 0 interface 100 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 164.486122][ T5869] usb 4-1: config 0 interface 100 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 164.519874][ T7215] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 164.543958][ T5869] usb 4-1: config 0 interface 100 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.583604][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'. [ 164.618733][ T5869] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad [ 164.832234][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.841880][ T5869] usb 4-1: Product: syz [ 164.846338][ T5869] usb 4-1: Manufacturer: syz [ 164.851832][ T5869] usb 4-1: SerialNumber: syz [ 164.859204][ T5869] usb 4-1: config 0 descriptor?? [ 164.866347][ T7200] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.884604][ T5869] port100 4-1:0.100: NFC: Could not find bulk-in or bulk-out endpoint [ 165.303600][ T5866] vhci_hcd: vhci_device speed not set [ 165.395947][ T8] usb 4-1: USB disconnect, device number 17 [ 165.894526][ T7242] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.244015][ T5897] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 168.273545][ T25] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 172.467434][ T7250] syz.0.313 (7250): attempted to duplicate a private mapping with mremap. This is not supported. [ 172.533645][ T5897] usb 6-1: device descriptor read/64, error -110 [ 172.671442][ T7260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.316'. [ 172.799584][ T7271] program syz.5.319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.936055][ T7300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.629455][ T7298] x_tables: duplicate underflow at hook 3 [ 175.643706][ T5954] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 175.851921][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 175.875058][ T5954] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 175.914064][ T7308] syz.3.326 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 175.925659][ T5954] usb 1-1: config 0 has no interface number 0 [ 175.942110][ T5954] usb 1-1: config 0 interface 68 has no altsetting 0 [ 175.986670][ T5954] usb 1-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice=a8.06 [ 176.003334][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.038780][ T5954] usb 1-1: Product: syz [ 176.054022][ T5954] usb 1-1: Manufacturer: syz [ 176.065670][ T5954] usb 1-1: SerialNumber: syz [ 176.089840][ T5954] usb 1-1: config 0 descriptor?? [ 176.241146][ T30] audit: type=1326 audit(1736120355.968:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 176.267730][ T30] audit: type=1326 audit(1736120355.968:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 176.298829][ T7326] overlayfs: failed to clone upperpath [ 176.301748][ T30] audit: type=1326 audit(1736120356.018:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 176.336612][ T30] audit: type=1326 audit(1736120356.018:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 176.349417][ T5954] sisusb 1-1:0.68: Invalid USB2VGA device [ 176.371156][ T30] audit: type=1326 audit(1736120356.018:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 176.421115][ T5954] sisusb 1-1:0.68: probe with driver sisusb failed with error -22 [ 176.453157][ T30] audit: type=1326 audit(1736120356.028:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 176.473628][ T5954] usb 1-1: USB disconnect, device number 20 [ 176.629508][ T30] audit: type=1326 audit(1736120356.028:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 176.919432][ T30] audit: type=1326 audit(1736120356.028:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 176.952492][ T30] audit: type=1326 audit(1736120356.028:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 177.014479][ T30] audit: type=1326 audit(1736120356.028:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 177.506534][ T7347] netlink: 'syz.0.333': attribute type 2 has an invalid length. [ 177.613660][ T7347] netlink: 244 bytes leftover after parsing attributes in process `syz.0.333'. [ 179.795600][ T7371] x_tables: duplicate underflow at hook 1 [ 180.034379][ T5867] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 180.185821][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 180.206893][ T5867] usb 6-1: too many configurations: 65, using maximum allowed: 8 [ 180.238182][ T5867] usb 6-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 180.257760][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.281536][ T5867] usb 6-1: Product: syz [ 180.290765][ T5867] usb 6-1: Manufacturer: syz [ 180.296766][ T5867] usb 6-1: SerialNumber: syz [ 180.324461][ T5867] usb 6-1: config 0 descriptor?? [ 180.340541][ T5867] usb 6-1: bad CDC descriptors [ 180.542565][ T5866] usb 6-1: USB disconnect, device number 7 [ 180.636361][ T7401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.342'. [ 180.662704][ T7401] netlink: 76 bytes leftover after parsing attributes in process `syz.4.342'. [ 180.866397][ T7407] netlink: 'syz.0.344': attribute type 19 has an invalid length. [ 183.000806][ T7433] netlink: 40 bytes leftover after parsing attributes in process `syz.1.350'. [ 183.051073][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 183.051092][ T30] audit: type=1326 audit(1736120362.768:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7432 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 183.081515][ T30] audit: type=1326 audit(1736120362.768:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7432 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 183.104930][ T30] audit: type=1326 audit(1736120362.768:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7432 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 183.126897][ T30] audit: type=1326 audit(1736120362.768:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7432 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 183.148638][ T30] audit: type=1326 audit(1736120362.768:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7432 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 183.170332][ T30] audit: type=1326 audit(1736120362.768:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7432 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 183.193400][ T30] audit: type=1326 audit(1736120362.768:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7432 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 183.215046][ T30] audit: type=1326 audit(1736120362.768:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7432 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 183.236779][ T30] audit: type=1326 audit(1736120362.768:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7432 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 183.258440][ T30] audit: type=1326 audit(1736120362.768:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7432 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 184.920814][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.357'. [ 185.073361][ T46] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 185.243955][ T46] usb 6-1: Using ep0 maxpacket: 8 [ 185.272402][ T46] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 185.304121][ T46] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 185.333578][ T5866] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 185.365385][ T46] usb 6-1: config 8 has no interface number 0 [ 185.373900][ T46] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 185.437641][ T46] usb 6-1: config 8 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 185.503424][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 185.524461][ T46] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 185.533890][ T5866] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 185.542615][ T5866] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.585785][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.622357][ T46] usb 6-1: Product: syz [ 185.658173][ T5866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.668787][ T46] usb 6-1: Manufacturer: syz [ 185.687080][ T46] usb 6-1: SerialNumber: syz [ 185.705818][ T5866] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.737328][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.760364][ T5866] usb 1-1: Product: syz [ 185.801869][ T5866] usb 1-1: Manufacturer: syz [ 185.837401][ T5866] usb 1-1: SerialNumber: syz [ 186.203579][ T7473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.359727][ T7473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.700578][ T46] vmk80xx 6-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 186.700758][ T7509] input: syz0 as /devices/virtual/input/input11 [ 186.731583][ T46] usb 6-1: USB disconnect, device number 8 [ 187.120139][ T5866] usb 1-1: 0:2 : does not exist [ 187.733021][ T7480] netlink: 10 bytes leftover after parsing attributes in process `syz.0.359'. [ 187.775434][ T5866] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 188.584833][ T5866] usb 1-1: USB disconnect, device number 21 [ 188.906594][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.371'. [ 188.939861][ T7558] netlink: 76 bytes leftover after parsing attributes in process `syz.4.371'. [ 188.955140][ T7253] udevd[7253]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.074505][ T5870] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 189.347389][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 189.505959][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.732940][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.961040][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.985411][ T5870] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 189.996515][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.046511][ T5870] usb 6-1: config 0 descriptor?? [ 190.275218][ T7556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.289755][ T7556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.525725][ T5870] microsoft 0003:045E:07DA.0004: item 0 4 0 8 parsing failed [ 190.559636][ T5870] microsoft 0003:045E:07DA.0004: parse failed [ 190.579743][ T5870] microsoft 0003:045E:07DA.0004: probe with driver microsoft failed with error -22 [ 192.103431][ T5867] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 192.256732][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 192.359059][ T5867] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 192.537738][ T5867] usb 1-1: config 0 has no interface number 0 [ 192.659535][ T5867] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 192.865020][ T5867] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 192.896037][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.927795][ T5897] usb 6-1: USB disconnect, device number 9 [ 192.972379][ T5867] usb 1-1: Product: syz [ 192.997540][ T5867] usb 1-1: Manufacturer: syz [ 193.023646][ T5867] usb 1-1: SerialNumber: syz [ 193.076309][ T5867] usb 1-1: config 0 descriptor?? [ 193.109521][ T7606] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 193.334733][ T5867] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 193.334779][ T5867] em28xx 1-1:0.132: Video interface 132 found: bulk [ 194.381398][ T5867] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 194.437728][ T5867] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 194.437817][ T5867] em28xx 1-1:0.132: board has no eeprom [ 194.569586][ T7616] tty tty30: ldisc open failed (-12), clearing slot 29 [ 194.676312][ T5867] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 194.684830][ T5867] em28xx 1-1:0.132: analog set to bulk mode. [ 194.691214][ T8] em28xx 1-1:0.132: Registering V4L2 extension [ 194.704361][ T5867] usb 1-1: USB disconnect, device number 22 [ 194.711075][ T5867] em28xx 1-1:0.132: Disconnecting em28xx [ 195.486425][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.492829][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.609596][ T8] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 196.617107][ T8] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 196.624309][ T8] em28xx 1-1:0.132: No AC97 audio processor [ 196.642665][ T8] usb 1-1: Decoder not found [ 196.647508][ T8] em28xx 1-1:0.132: failed to create media graph [ 196.653933][ T8] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 196.664572][ T8] em28xx 1-1:0.132: Remote control support is not available for this card. [ 196.687154][ T5867] em28xx 1-1:0.132: Closing input extension [ 196.799175][ T5867] em28xx 1-1:0.132: Freeing device [ 197.133770][ T5867] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 197.319856][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 197.374107][ T5867] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.402250][ T5867] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.412325][ T5867] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.426102][ T5867] usb 1-1: config 0 interface 0 has no altsetting 0 [ 197.446849][ T5867] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 197.456162][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.481029][ T5867] usb 1-1: config 0 descriptor?? [ 197.814026][ T5867] usbhid 1-1:0.0: can't add hid device: -71 [ 197.821141][ T5867] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 197.867737][ T5867] usb 1-1: USB disconnect, device number 23 [ 197.994573][ T7676] net_ratelimit: 20 callbacks suppressed [ 197.994587][ T7676] dccp_invalid_packet: P.Data Offset(4) too small [ 199.218636][ T7685] fuse: Unknown parameter 'E/cš#Û'' [ 200.093389][ T5866] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 200.333543][ T5866] usb 1-1: device descriptor read/64, error -71 [ 200.696200][ T5866] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 200.863394][ T5866] usb 1-1: device descriptor read/64, error -71 [ 200.984559][ T5866] usb usb1-port1: attempt power cycle [ 201.154298][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.410'. [ 201.182349][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.410'. [ 201.206786][ T7719] securityfs: Unknown parameter 'usrquotaÀ' [ 201.343576][ T5866] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 201.528134][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 201.528152][ T30] audit: type=1326 audit(1736120381.258:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7726 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 201.564528][ T5866] usb 1-1: device descriptor read/8, error -71 [ 201.565012][ T30] audit: type=1326 audit(1736120381.298:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7726 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 201.685652][ T30] audit: type=1326 audit(1736120381.328:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7726 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 201.780741][ T30] audit: type=1326 audit(1736120381.328:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7726 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 201.802600][ T30] audit: type=1326 audit(1736120381.328:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7726 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 201.824807][ T30] audit: type=1326 audit(1736120381.328:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7726 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 201.846852][ T30] audit: type=1326 audit(1736120381.328:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7726 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1993784690 code=0x7ffc0000 [ 201.869062][ T30] audit: type=1326 audit(1736120381.328:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7726 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 202.410618][ T7732] netlink: 'syz.3.416': attribute type 10 has an invalid length. [ 202.436131][ T5866] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 202.466867][ T5866] usb 1-1: device descriptor read/8, error -71 [ 202.574242][ T5866] usb usb1-port1: unable to enumerate USB device [ 202.612460][ T7732] lo: entered promiscuous mode [ 202.620930][ T7732] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 202.929080][ T7740] netlink: 72 bytes leftover after parsing attributes in process `syz.5.418'. [ 203.393864][ T7740] cgroup: fork rejected by pids controller in /syz5 [ 205.203378][ T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 205.383420][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 205.402143][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 205.420284][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 205.462885][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.513614][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 205.542986][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.580001][ T8] usb 4-1: Product: syz [ 205.590836][ T8] usb 4-1: Manufacturer: syz [ 205.610263][ T8] usb 4-1: SerialNumber: syz [ 205.617579][ T7801] nullb0: AHDI p1 p3 p4 [ 205.641364][ T7800] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 205.801586][ T7801] nullb0: p1 size 2739478287 extends beyond EOD, truncated [ 205.802342][ T8] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 205.853592][ T5954] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 205.904952][ T8] usbtest 4-1:1.0: Linux user mode ISO test driver [ 205.912183][ T8] usbtest 4-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 206.103494][ T5954] usb 6-1: Using ep0 maxpacket: 16 [ 206.174504][ T5954] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 206.186298][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 206.199668][ T5954] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 206.368572][ T7801] nullb0: p4 size 2395519696 extends beyond EOD, truncated [ 206.383990][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.396947][ T7744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.419'. [ 206.409265][ T5954] usb 6-1: Product: syz [ 206.431065][ T5954] usb 6-1: Manufacturer: syz [ 206.435501][ T7744] netlink: 'syz.4.419': attribute type 7 has an invalid length. [ 206.445536][ T5954] usb 6-1: SerialNumber: syz [ 206.472869][ T5954] usb 6-1: config 0 descriptor?? [ 206.508535][ T5954] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 206.513265][ T7744] netlink: 'syz.4.419': attribute type 8 has an invalid length. [ 206.537262][ T5954] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 206.584235][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 207.817959][ T5954] em28xx 6-1:0.0: unknown em28xx chip ID (130) [ 208.084723][ T5897] usb 4-1: USB disconnect, device number 18 [ 208.094324][ T5954] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 208.874452][ T46] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 208.963575][ T5954] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 208.970715][ T5954] em28xx 6-1:0.0: No AC97 audio processor [ 208.998028][ T5954] usb 6-1: USB disconnect, device number 10 [ 209.006545][ T5954] em28xx 6-1:0.0: Disconnecting em28xx [ 209.020949][ T5954] em28xx 6-1:0.0: Freeing device [ 209.723463][ T46] usb 5-1: device descriptor read/64, error -71 [ 209.782241][ T7846] Cannot find set identified by id 0 to match [ 209.866712][ T30] audit: type=1326 audit(1736120389.598:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.1.437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x0 [ 209.963885][ T5866] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 210.023487][ T46] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 210.120103][ T5866] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 210.133474][ T5866] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 210.153377][ T46] usb 5-1: device descriptor read/64, error -71 [ 210.181394][ T5866] usb 1-1: config 0 has no interface number 0 [ 210.200360][ T5866] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.233299][ T5866] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 210.273854][ T46] usb usb5-port1: attempt power cycle [ 210.282020][ T5866] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.310880][ T5866] usb 1-1: config 0 interface 52 has no altsetting 0 [ 210.331668][ T5866] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 210.463375][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 210.471822][ T5866] usb 1-1: Product: syz [ 210.476223][ T5866] usb 1-1: SerialNumber: syz [ 210.504845][ T5866] usb 1-1: config 0 descriptor?? [ 210.773585][ T46] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 210.807636][ T46] usb 5-1: device descriptor read/8, error -71 [ 210.963862][ T5866] input: syz (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input12 [ 211.203638][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.352117][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.483063][ T5866] usb 1-1: USB disconnect, device number 28 [ 211.654013][ T5179] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 211.793633][ T5870] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 211.933666][ T46] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 211.973602][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 212.036859][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 212.049045][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 24941, setting to 64 [ 212.072315][ T5870] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 212.083745][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.102260][ T46] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 212.119333][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.128646][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.151496][ T46] usb 5-1: config 0 descriptor?? [ 212.161357][ T5870] usb 6-1: Product: syz [ 212.183824][ T5870] usb 6-1: Manufacturer: syz [ 212.188587][ T5870] usb 6-1: SerialNumber: syz [ 212.235536][ T5870] usb 6-1: config 0 descriptor?? [ 212.255721][ T5870] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 212.834135][ T5897] usb 6-1: USB disconnect, device number 11 [ 212.863549][ T8] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 213.057371][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 213.165893][ T46] wacom 0003:056A:0094.0005: unknown main item tag 0x1 [ 213.174556][ T46] wacom 0003:056A:0094.0005: Using device in hidraw-only mode [ 213.183666][ T46] wacom 0003:056A:0094.0005: hidraw0: USB HID v0.04 Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 213.212224][ T8] usb 4-1: New USB device found, idVendor=f90a, idProduct=1653, bcdDevice=5e.a7 [ 213.252305][ T8] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 213.285589][ T8] usb 4-1: Product: syz [ 213.289810][ T8] usb 4-1: Manufacturer: syz [ 213.309136][ T8] usb 4-1: SerialNumber: syz [ 213.344694][ T8] usb 4-1: config 0 descriptor?? [ 213.399554][ T8] usb 5-1: USB disconnect, device number 23 [ 213.434396][ T7893] netlink: 56 bytes leftover after parsing attributes in process `syz.0.449'. [ 213.763364][ T5867] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 213.841668][ T7902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.452'. [ 213.934749][ T5867] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.953534][ T5867] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 213.982828][ T5867] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.003500][ T5867] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.013672][ T5867] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 214.022699][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.037945][ T5867] hub 6-1:1.0: bad descriptor, ignoring hub [ 214.050769][ T5867] hub 6-1:1.0: probe with driver hub failed with error -5 [ 214.072694][ T5867] cdc_wdm 6-1:1.0: skipping garbage [ 214.102893][ T5867] cdc_wdm 6-1:1.0: skipping garbage [ 214.141171][ T5867] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 214.180253][ T5867] cdc_wdm 6-1:1.0: Unknown control protocol [ 214.261809][ T5867] usb 6-1: USB disconnect, device number 12 [ 214.338696][ T7915] netlink: 'syz.3.446': attribute type 11 has an invalid length. [ 214.373534][ T5870] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 214.817403][ T5827] Bluetooth: hci3: command 0x0405 tx timeout [ 214.959526][ T5870] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 214.968269][ T5870] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 214.982296][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 214.991827][ T5870] usb 5-1: config 1 has no interface number 0 [ 215.005440][ T5870] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 215.022264][ T5870] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 215.023334][ T8] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 215.048736][ T5870] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 215.061790][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.081964][ T5870] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 215.103404][ T5867] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 215.198147][ T8] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 215.213389][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.222405][ T8] usb 1-1: Product: syz [ 215.226746][ T8] usb 1-1: Manufacturer: syz [ 215.231601][ T8] usb 1-1: SerialNumber: syz [ 215.238804][ T8] usb 1-1: config 0 descriptor?? [ 215.253360][ T5867] usb 6-1: device descriptor read/64, error -71 [ 215.309167][ T5870] snd_usb_pod 5-1:1.1: set_interface failed [ 215.320801][ T5870] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 215.330863][ T5870] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 215.349721][ T5870] usb 5-1: USB disconnect, device number 24 [ 215.493455][ T5867] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 215.569359][ T30] audit: type=1326 audit(1736120395.298:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 215.602312][ T8] hso 1-1:0.0: Can't find BULK IN endpoint [ 215.611387][ T8] usb-storage 1-1:0.0: USB Mass Storage device detected [ 215.619017][ T30] audit: type=1326 audit(1736120395.328:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 215.643039][ T30] audit: type=1326 audit(1736120395.328:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 215.670918][ T5867] usb 6-1: device descriptor read/64, error -71 [ 215.725700][ T30] audit: type=1326 audit(1736120395.328:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 215.761450][ T30] audit: type=1326 audit(1736120395.328:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 215.783010][ T30] audit: type=1326 audit(1736120395.328:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 215.805814][ T30] audit: type=1326 audit(1736120395.328:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 215.829152][ T30] audit: type=1326 audit(1736120395.328:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 215.850988][ T30] audit: type=1326 audit(1736120395.328:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 215.873044][ T30] audit: type=1326 audit(1736120395.328:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 215.893287][ T5870] usb 4-1: USB disconnect, device number 19 [ 215.912674][ T5867] usb usb6-port1: attempt power cycle [ 215.972493][ T5897] usb 1-1: USB disconnect, device number 29 [ 216.058241][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 216.076871][ T7947] unsupported nla_type 47 [ 216.263447][ T5867] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 216.287723][ T5867] usb 6-1: device descriptor read/8, error -71 [ 216.443522][ T46] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 216.538771][ T5867] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 216.603638][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 216.614471][ T46] usb 4-1: config 157 interface 0 has no altsetting 0 [ 216.627616][ T46] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 216.641664][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.650122][ T46] usb 4-1: Product: syz [ 216.663735][ T46] usb 4-1: Manufacturer: syz [ 216.668600][ T46] usb 4-1: SerialNumber: syz [ 216.779499][ T5867] usb 6-1: device not accepting address 16, error -71 [ 216.787932][ T5867] usb usb6-port1: unable to enumerate USB device [ 217.239127][ T7989] hsr0: entered promiscuous mode [ 217.320844][ T46] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 217.494192][ T46] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 217.579865][ T46] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 217.783328][ T5867] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 217.786398][ T46] usb 4-1: media controller created [ 217.901805][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.926389][ T46] zl10353_read_register: readreg error (reg=127, ret==-71) [ 217.956139][ T46] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 217.984545][ T46] usb 4-1: USB disconnect, device number 20 [ 218.113414][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 218.125150][ T5867] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 218.138120][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.159416][ T7998] netlink: 80 bytes leftover after parsing attributes in process `syz.1.476'. [ 218.562614][ T5867] usb 6-1: config 0 descriptor?? [ 218.692220][ T5867] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 218.720999][ T5827] Bluetooth: hci3: link tx timeout [ 218.728749][ T5827] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 218.754934][ T5827] Bluetooth: hci3: link tx timeout [ 218.760292][ T5827] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 218.769417][ T5827] Bluetooth: hci3: link tx timeout [ 218.774880][ T5827] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 219.303760][ T5867] gspca_nw80x: reg_r err -110 [ 219.308601][ T5867] nw80x 6-1:0.0: probe with driver nw80x failed with error -110 [ 219.657569][ T8025] xt_bpf: check failed: parse error [ 220.651180][ T46] usb 6-1: USB disconnect, device number 17 [ 220.663304][ T5897] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 220.813393][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 220.813944][ T5827] Bluetooth: hci3: command 0x0405 tx timeout [ 220.852754][ T5897] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 220.867283][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.878866][ T5897] usb 4-1: config 0 descriptor?? [ 220.889878][ T5897] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 221.395845][ T5897] gspca_sonixj: reg_r err -71 [ 221.400635][ T5897] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 221.458384][ T5897] usb 4-1: USB disconnect, device number 21 [ 222.143454][ T8101] usb usb8: usbfs: process 8101 (syz.3.490) did not claim interface 0 before use [ 222.183545][ T5897] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 222.362025][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 222.393554][ T5867] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 223.132375][ T5897] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 223.141659][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.153409][ T5897] usb 6-1: Product: syz [ 223.157632][ T5897] usb 6-1: Manufacturer: syz [ 223.168081][ T5897] usb 6-1: SerialNumber: syz [ 223.203426][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 223.216263][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 223.227460][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 223.261806][ T5897] usb 6-1: config 0 descriptor?? [ 223.274862][ T8126] tipc: Started in network mode [ 223.280207][ T8126] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 223.284839][ T5867] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 223.290002][ T8126] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0000 [ 223.303494][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.308218][ T8126] tipc: Enabled bearer , priority 10 [ 223.440207][ T5867] usb 1-1: Product: syz [ 223.445376][ T5867] usb 1-1: Manufacturer: syz [ 223.453424][ T5867] usb 1-1: SerialNumber: syz [ 223.471789][ T5867] usb 1-1: config 0 descriptor?? [ 223.628613][ T5867] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 223.686328][ T5897] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input14 [ 223.908887][ T25] usb 6-1: USB disconnect, device number 18 [ 224.003186][ T8107] syz.0.492: attempt to access beyond end of device [ 224.003186][ T8107] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 224.033654][ T8107] XFS (loop0): SB validate failed with error -5. [ 224.112297][ T5870] usb 1-1: USB disconnect, device number 30 [ 224.257135][ T46] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 224.305892][ T5870] tipc: Node number set to 1 [ 225.440681][ T46] usb 5-1: config index 0 descriptor too short (expected 63506, got 18) [ 225.919282][ T46] usb 5-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 225.933478][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.941511][ T46] usb 5-1: Product: syz [ 226.066461][ T46] usb 5-1: Manufacturer: syz [ 226.102660][ T46] usb 5-1: SerialNumber: syz [ 227.075405][ T8168] binder: BINDER_SET_CONTEXT_MGR already set [ 227.081551][ T8168] binder: 8167:8168 ioctl 4018620d 20004a80 returned -16 [ 227.092182][ T8168] binder: 8167:8168 ioctl c028aa05 20000040 returned -22 [ 227.112893][ T8166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.505'. [ 227.222708][ T46] usb 5-1: palm_os_4_probe - error -71 getting connection info [ 227.236711][ T46] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 227.248020][ T8171] fuse: Unknown parameter 'f‹¢¨Þ¨hÓgaªžyîÄIoÖè' [ 227.276289][ T46] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 227.295625][ T46] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 227.316738][ T46] usb 5-1: USB disconnect, device number 25 [ 227.327792][ T46] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 227.354707][ T46] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 227.364674][ T46] visor 5-1:1.0: device disconnected [ 227.473500][ T5866] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 227.612513][ T8187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.514'. [ 227.638052][ T8187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.514'. [ 227.654648][ T5866] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 227.663962][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.691892][ T5866] usb 1-1: config 0 descriptor?? [ 228.355993][ T5866] usb 1-1: string descriptor 0 read error: -71 [ 228.368912][ T5866] usb 1-1: USB disconnect, device number 31 [ 229.503471][ T46] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 230.411544][ T46] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 230.423263][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.455424][ T46] usb 6-1: config 0 descriptor?? [ 230.469940][ T46] cp210x 6-1:0.0: cp210x converter detected [ 230.506588][ T5867] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 230.673468][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 230.684941][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.704396][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.723450][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.736657][ T5867] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 230.745843][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.766831][ T5867] usb 4-1: config 0 descriptor?? [ 231.080359][ T46] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 231.080839][ T8230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.093001][ T46] cp210x 6-1:0.0: GPIO initialisation failed: -121 [ 231.113451][ T5954] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 231.122004][ T46] usb 6-1: cp210x converter now attached to ttyUSB0 [ 231.144132][ T8230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.179431][ T5897] usb 6-1: USB disconnect, device number 19 [ 231.188623][ T5897] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 231.212527][ T5897] cp210x 6-1:0.0: device disconnected [ 231.296142][ T5954] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.310279][ T5954] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.322785][ T5954] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 231.342796][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 231.363125][ T8237] sctp: [Deprecated]: syz.5.528 (pid 8237) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.363125][ T8237] Use struct sctp_sack_info instead [ 231.380441][ T5954] usb 5-1: SerialNumber: syz [ 231.509441][ T8243] netlink: 'syz.0.529': attribute type 1 has an invalid length. [ 231.517368][ T8243] netlink: 224 bytes leftover after parsing attributes in process `syz.0.529'. [ 231.535328][ T8243] binder: BINDER_SET_CONTEXT_MGR already set [ 231.541466][ T8243] binder: 8242:8243 ioctl 4018620d 20000040 returned -16 [ 231.695767][ T5954] usb 5-1: 0:2 : does not exist [ 231.837585][ T5867] usbhid 4-1:0.0: can't add hid device: -71 [ 231.865578][ T5867] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 232.599124][ T5954] usb 5-1: USB disconnect, device number 26 [ 232.612752][ T5867] usb 4-1: USB disconnect, device number 22 [ 232.825667][ T7253] udevd[7253]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.183920][ T8267] netlink: 32 bytes leftover after parsing attributes in process `syz.4.536'. [ 233.383885][ T46] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 233.588195][ T46] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.612664][ T46] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 233.677582][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.839573][ T46] usb 6-1: config 0 descriptor?? [ 235.999805][ T46] usb 6-1: USB disconnect, device number 20 [ 236.137328][ T8313] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.222678][ T8313] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.292391][ T8313] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.381038][ T8313] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.446413][ T5954] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 236.462147][ T8313] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.491466][ T8313] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.509319][ T8313] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.574788][ T8313] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.755927][ T5954] usb 1-1: unable to get BOS descriptor or descriptor too short [ 236.784372][ T5954] usb 1-1: config 8 has no interfaces? [ 237.477780][ T5954] usb 1-1: New USB device found, idVendor=dab5, idProduct=f2c9, bcdDevice=7d.34 [ 237.486925][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.528251][ T5954] usb 1-1: Product: syz [ 237.540801][ T5954] usb 1-1: Manufacturer: syz [ 237.555783][ T5954] usb 1-1: SerialNumber: syz [ 237.941859][ T5870] usb 1-1: USB disconnect, device number 32 [ 243.027655][ T5866] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 243.037208][ T8408] openvswitch: netlink: EtherType 0 is less than min 600 [ 243.193584][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 243.250498][ T5866] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 243.262506][ T5866] usb 4-1: can't read configurations, error -61 [ 243.353366][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 243.413633][ T5866] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 243.423603][ T5825] Bluetooth: hci3: command 0x0405 tx timeout [ 243.735532][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 243.761539][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 11 [ 244.483399][ T25] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= a.3c [ 244.513340][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 244.518554][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.536862][ T25] usb 5-1: Product: syz [ 244.541086][ T25] usb 5-1: Manufacturer: syz [ 244.559649][ T25] usb 5-1: SerialNumber: syz [ 244.659629][ T25] usb 5-1: config 0 descriptor?? [ 244.709186][ T25] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 244.722733][ T5866] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 244.733723][ T5866] usb 4-1: can't read configurations, error -71 [ 244.741857][ T5866] usb usb4-port1: attempt power cycle [ 244.748881][ T25] ftdi_sio ttyUSB0: unknown device type: 0xa3c [ 244.937655][ T25] usb 5-1: USB disconnect, device number 27 [ 244.970355][ T25] ftdi_sio 5-1:0.0: device disconnected [ 245.053535][ T5867] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 245.233629][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 245.243603][ T5867] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.263736][ T5867] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 245.278348][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.290461][ T5867] usb 6-1: Product: syz [ 245.298459][ T5867] usb 6-1: Manufacturer: syz [ 245.306099][ T5867] usb 6-1: SerialNumber: syz [ 245.316902][ T5867] usb 6-1: config 0 descriptor?? [ 245.331593][ T5867] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 245.530784][ T8439] netlink: 100 bytes leftover after parsing attributes in process `syz.5.579'. [ 245.543598][ T8439] netlink: 24 bytes leftover after parsing attributes in process `syz.5.579'. [ 245.773324][ T5825] Bluetooth: hci3: command 0x0405 tx timeout [ 245.944083][ T8479] netlink: 'syz.1.583': attribute type 1 has an invalid length. [ 245.951812][ T8479] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.583'. [ 245.966923][ T5867] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 245.979704][ T5867] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 246.150521][ T5867] usb 6-1: USB disconnect, device number 21 [ 247.592289][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 247.789320][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 247.799193][ T8522] ip6_tunnel: non-ECT from fe88:0000:0008:0000:0000:0000:0000:0001 with DS=0xe [ 247.854962][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 248.104160][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 249.256271][ T8560] 9pnet_fd: Insufficient options for proto=fd [ 251.194424][ T8565] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 251.613493][ T25] page_pool_release_retry() stalled pool shutdown: id 31, 1 inflight 60 sec [ 252.003330][ T5954] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 252.030576][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 252.175903][ T5954] usb 5-1: Using ep0 maxpacket: 16 [ 252.198858][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.218737][ T8587] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 252.287313][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.297414][ T5954] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 252.307054][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.439067][ T5954] usb 5-1: config 0 descriptor?? [ 252.478263][ T5954] usb 5-1: can't set config #0, error -71 [ 252.492161][ T5954] usb 5-1: USB disconnect, device number 28 [ 253.703362][ T5897] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 254.196211][ T8607] syz.3.603 (8607): drop_caches: 2 [ 254.538632][ T5897] usb 6-1: config 0 has an invalid interface number: 23 but max is 0 [ 254.548025][ T5897] usb 6-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 254.568519][ T5897] usb 6-1: config 0 has no interface number 0 [ 254.583299][ T5897] usb 6-1: config 0 interface 23 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 254.600305][ T5897] usb 6-1: config 0 interface 23 altsetting 0 endpoint 0x85 has an invalid bInterval 64, changing to 4 [ 254.611431][ T5897] usb 6-1: config 0 interface 23 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 254.633075][ T5897] usb 6-1: New USB device found, idVendor=19d2, idProduct=ffa0, bcdDevice=38.0e [ 254.643500][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.651627][ T5897] usb 6-1: Product: syz [ 254.656560][ T5897] usb 6-1: Manufacturer: syz [ 254.670683][ T5897] usb 6-1: SerialNumber: syz [ 254.688944][ T5897] usb 6-1: config 0 descriptor?? [ 254.709930][ T5897] option 6-1:0.23: GSM modem (1-port) converter detected [ 254.912535][ T8603] netlink: 'syz.5.604': attribute type 10 has an invalid length. [ 254.985214][ T8603] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 255.125559][ T5866] usb 6-1: USB disconnect, device number 22 [ 255.166907][ T5866] option 6-1:0.23: device disconnected [ 255.880849][ T25] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 256.053502][ T25] usb 1-1: device descriptor read/64, error -71 [ 256.314167][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.320933][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.455637][ T25] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 256.610937][ T25] usb 1-1: device descriptor read/64, error -71 [ 256.622816][ T8677] x_tables: ip_tables: osf match: only valid for protocol 6 [ 256.822598][ T25] usb usb1-port1: attempt power cycle [ 257.183582][ T25] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 257.310775][ T25] usb 1-1: device descriptor read/8, error -71 [ 257.823358][ T25] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 257.874893][ T25] usb 1-1: device descriptor read/8, error -71 [ 257.925393][ T8687] Illegal XDP return value 4294967294 on prog (id 189) dev N/A, expect packet loss! [ 257.983866][ T25] usb usb1-port1: unable to enumerate USB device [ 258.213371][ T5866] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 258.221159][ T5821] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 258.373707][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 258.379234][ T5821] usb 6-1: Using ep0 maxpacket: 32 [ 258.392272][ T5866] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.427182][ T5866] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.453351][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 258.463416][ T5866] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 258.483885][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.506561][ T5866] usb 5-1: config 0 descriptor?? [ 258.618696][ T5821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 258.646593][ T5821] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 258.654615][ T5821] usb 6-1: can't read configurations, error -71 [ 258.693535][ T25] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 258.845519][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 258.861704][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 258.872555][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.906306][ T25] usb 4-1: config 0 descriptor?? [ 258.920702][ T8694] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 258.936980][ T5866] usbhid 5-1:0.0: can't add hid device: -71 [ 258.953813][ T5866] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 258.975920][ T5866] usb 5-1: USB disconnect, device number 29 [ 259.432927][ T8708] netlink: 76 bytes leftover after parsing attributes in process `syz.0.630'. [ 259.657425][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 259.664676][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 259.733791][ T25] usb 4-1: USB disconnect, device number 26 [ 261.523341][ T25] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 261.863339][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 261.871309][ T25] usb 6-1: config 8 has an invalid interface number: 64 but max is 0 [ 261.880893][ T25] usb 6-1: config 8 has no interface number 0 [ 261.895558][ T25] usb 6-1: New USB device found, idVendor=0ac8, idProduct=305b, bcdDevice=94.1e [ 261.904858][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.913727][ T25] usb 6-1: Product: syz [ 261.917934][ T25] usb 6-1: Manufacturer: syz [ 261.922558][ T25] usb 6-1: SerialNumber: syz [ 261.953552][ T25] gspca_main: gspca_zc3xx-2.14.0 probing 0ac8:305b [ 262.177541][ T8760] netlink: 76 bytes leftover after parsing attributes in process `syz.1.644'. [ 262.413884][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.932322][ T25] gspca_zc3xx: reg_w_i err -110 [ 262.989688][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.234638][ T8768] netlink: 'syz.4.646': attribute type 21 has an invalid length. [ 264.223317][ T25] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 264.229685][ T25] gspca_zc3xx 6-1:8.64: probe with driver gspca_zc3xx failed with error -110 [ 264.249569][ T8768] netlink: 'syz.4.646': attribute type 6 has an invalid length. [ 265.183797][ T8768] netlink: 132 bytes leftover after parsing attributes in process `syz.4.646'. [ 265.230954][ T25] usb 6-1: USB disconnect, device number 25 [ 265.254061][ T8764] netlink: 'syz.1.645': attribute type 10 has an invalid length. [ 265.314303][ T8771] netlink: 'syz.1.645': attribute type 10 has an invalid length. [ 265.322086][ T8771] netlink: 2 bytes leftover after parsing attributes in process `syz.1.645'. [ 265.883403][ T8] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 266.046933][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.080715][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.093538][ T5954] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 266.121737][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.134503][ T8764] batman_adv: batadv0: Adding interface: team0 [ 266.140674][ T8764] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.165848][ T8764] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 266.176246][ T8771] team0: entered promiscuous mode [ 266.183516][ T8771] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.190782][ T8771] batman_adv: batadv0: Interface activated: team0 [ 266.197304][ T8771] batman_adv: batadv0: Interface deactivated: team0 [ 266.203968][ T8771] batman_adv: batadv0: Removing interface: team0 [ 266.253508][ T8] usb 5-1: Product: syz [ 266.257726][ T8] usb 5-1: Manufacturer: syz [ 266.269824][ T8771] bridge0: port 1(team0) entered blocking state [ 266.276285][ T8771] bridge0: port 1(team0) entered disabled state [ 266.282676][ T8771] team0: entered allmulticast mode [ 266.373264][ T5954] usb 4-1: config index 0 descriptor too short (expected 4114, got 18) [ 266.392038][ T8] usb 5-1: SerialNumber: syz [ 266.402940][ T5954] usb 4-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 266.443275][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.452439][ T5954] usb 4-1: Product: syz [ 266.465887][ T5954] usb 4-1: Manufacturer: syz [ 266.479390][ T5954] usb 4-1: SerialNumber: syz [ 266.514496][ T5954] usb 4-1: config 0 descriptor?? [ 266.730674][ T25] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 266.923448][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 266.985663][ T25] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 267.005588][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.053371][ T25] usb 6-1: Product: syz [ 267.057607][ T25] usb 6-1: Manufacturer: syz [ 267.062241][ T25] usb 6-1: SerialNumber: syz [ 267.074609][ T8] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 267.099527][ T8] cdc_ncm 5-1:1.0: bind() failure [ 267.117189][ T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 267.142236][ T8] cdc_ncm 5-1:1.1: bind() failure [ 267.160098][ T25] r8152-cfgselector 6-1: Unknown version 0x0000 [ 267.166567][ T25] r8152-cfgselector 6-1: config 0 descriptor?? [ 267.283371][ T5867] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 267.373460][ T5954] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 267.442235][ T5867] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.493423][ T5867] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.552614][ T5867] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.572119][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.590307][ T5867] usb 1-1: Product: syz [ 267.614599][ T5867] usb 1-1: Manufacturer: syz [ 267.632617][ T5867] usb 1-1: SerialNumber: syz [ 267.822913][ T8796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.894141][ T8796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.948103][ T25] r8152-cfgselector 6-1: USB disconnect, device number 26 [ 268.164497][ T8791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.701044][ T5867] usb 1-1: 0:2 : does not exist [ 268.710764][ T5867] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 268.733735][ T5867] usb 1-1: USB disconnect, device number 37 [ 268.747873][ T25] usb 5-1: USB disconnect, device number 30 [ 268.893844][ T5954] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 269.093723][ T8802] netlink: 76 bytes leftover after parsing attributes in process `syz.4.655'. [ 269.126512][ T5954] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 269.138586][ T5954] asix 4-1:0.0: probe with driver asix failed with error -71 [ 269.502637][ T5954] usb 4-1: USB disconnect, device number 27 [ 269.633630][ T7253] udevd[7253]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.762237][ T25] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 271.034220][ T25] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 271.043494][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.074788][ T25] usb 6-1: config 0 descriptor?? [ 271.085919][ T25] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 271.296536][ T25] gp8psk: usb in 128 operation failed. [ 271.319310][ T25] gp8psk: usb in 137 operation failed. [ 271.334697][ T8812] gtp0: entered allmulticast mode [ 271.396231][ T25] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 271.414384][ T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 271.817448][ T8830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.863812][ T8830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.967600][ T8839] trusted_key: encrypted_key: insufficient parameters specified [ 272.363138][ T8841] cgroup: Invalid name [ 272.696542][ T8] usb 6-1: USB disconnect, device number 27 [ 272.757931][ T8850] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 272.803714][ T5827] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 272.835870][ T8848] 9pnet_fd: Insufficient options for proto=fd [ 273.191524][ T8858] netlink: 76 bytes leftover after parsing attributes in process `syz.1.671'. [ 274.912739][ T25] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 275.092529][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 275.100458][ T25] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 275.112619][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.141337][ T25] usb 1-1: config 0 has no interface number 0 [ 275.157230][ T25] usb 1-1: New USB device found, idVendor=05c6, idProduct=90fa, bcdDevice=60.fb [ 275.171240][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.179885][ T25] usb 1-1: Product: syz [ 275.185438][ T25] usb 1-1: Manufacturer: syz [ 275.194727][ T25] usb 1-1: SerialNumber: syz [ 275.373233][ T25] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 275.382073][ T25] usb 1-1: no configuration chosen from 1 choice [ 276.200637][ T25] usb 1-1: USB disconnect, device number 38 [ 276.977075][ T8910] netlink: 76 bytes leftover after parsing attributes in process `syz.4.684'. [ 277.582026][ T8920] input: syz0 as /devices/virtual/input/input15 [ 277.640015][ T8920] input: failed to attach handler leds to device input15, error: -6 [ 278.052943][ T25] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 278.260286][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.293363][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.320088][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.344145][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.362757][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.384214][ T25] usb 4-1: config 0 descriptor?? [ 279.064107][ T25] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 279.518573][ T25] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 279.536781][ T25] usb 4-1: USB disconnect, device number 28 [ 279.556992][ T8947] netlink: 11 bytes leftover after parsing attributes in process `syz.5.694'. [ 279.589826][ T8947] netlink: 28 bytes leftover after parsing attributes in process `syz.5.694'. [ 279.749633][ T8957] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.860636][ T5869] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 280.042093][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 280.087196][ T5869] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 280.149940][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.338537][ T5869] usb 6-1: Product: syz [ 280.349477][ T5869] usb 6-1: Manufacturer: syz [ 280.356469][ T5869] usb 6-1: SerialNumber: syz [ 280.364363][ T5869] usb 6-1: config 0 descriptor?? [ 280.455425][ T8963] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 280.569115][ T8963] netlink: 'syz.1.698': attribute type 2 has an invalid length. [ 280.600324][ T5869] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 280.611709][ T8965] netlink: 76 bytes leftover after parsing attributes in process `syz.0.699'. [ 281.102787][ T5869] usb write operation failed. (-71) [ 281.111590][ T5869] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.122592][ T5869] dvbdev: DVB: registering new adapter (Terratec H7) [ 281.129338][ T5869] usb 6-1: media controller created [ 281.143328][ T5869] usb read operation failed. (-71) [ 281.151014][ T5869] usb write operation failed. (-71) [ 281.164671][ T5869] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 281.190248][ T5869] usb 6-1: USB disconnect, device number 28 [ 281.676729][ T5867] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 281.746590][ T8982] Invalid ELF header magic: != ELF [ 281.764992][ T8982] ntfs3(nullb0): Primary boot signature is not NTFS. [ 281.772901][ T8982] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 281.881625][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 281.962185][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.124685][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 282.319591][ T5867] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 282.443103][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.453535][ T5867] usb 5-1: config 0 descriptor?? [ 282.594165][ T8991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.731421][ T8998] netlink: 76 bytes leftover after parsing attributes in process `syz.1.711'. [ 282.829686][ T9002] input: syz0 as /devices/virtual/input/input16 [ 282.847081][ T9002] input: failed to attach handler leds to device input16, error: -6 [ 282.897958][ T5867] usbhid 5-1:0.0: can't add hid device: -71 [ 282.904113][ T5867] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 282.920930][ T5867] usb 5-1: USB disconnect, device number 31 [ 282.959579][ T8] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 283.120040][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 283.134989][ T8] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 283.149583][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.158473][ T8] usb 1-1: Product: syz [ 283.163509][ T8] usb 1-1: Manufacturer: syz [ 283.168797][ T8] usb 1-1: SerialNumber: syz [ 283.179974][ T8] usb 1-1: config 0 descriptor?? [ 283.190244][ T8] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 283.423979][ T8] gspca_sn9c2028: read1 error -32 [ 283.441733][ T8] gspca_sn9c2028: read1 error -32 [ 283.463964][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 283.463981][ T30] audit: type=1326 audit(1736120462.399:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9014 comm="syz.5.719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f916e385d29 code=0x0 [ 283.493688][ T5867] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 283.686638][ T5867] usb 4-1: device descriptor read/64, error -71 [ 284.287195][ T9030] netlink: 76 bytes leftover after parsing attributes in process `syz.1.723'. [ 284.409584][ T5954] usb 1-1: USB disconnect, device number 39 [ 284.415904][ T5867] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 284.657734][ T5867] usb 4-1: device descriptor read/64, error -71 [ 284.778630][ T5867] usb usb4-port1: attempt power cycle [ 285.272921][ T5867] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 285.905452][ T5867] usb 4-1: device descriptor read/8, error -71 [ 286.164548][ T9057] dvmrp0: entered allmulticast mode [ 286.170078][ T5867] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 286.210192][ T5867] usb 4-1: device descriptor read/8, error -71 [ 286.339321][ T5867] usb usb4-port1: unable to enumerate USB device [ 286.364625][ T9062] pimreg: entered allmulticast mode [ 286.384472][ T9062] batadv_slave_1: entered promiscuous mode [ 286.391457][ T5897] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 286.733725][ T9068] netlink: 4568 bytes leftover after parsing attributes in process `syz.0.734'. [ 286.742918][ T9068] netlink: 4568 bytes leftover after parsing attributes in process `syz.0.734'. [ 286.752094][ T9068] netlink: 69 bytes leftover after parsing attributes in process `syz.0.734'. [ 287.328161][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 287.341908][ T5897] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.374760][ T5897] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.384534][ T5897] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.400036][ T5897] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.413894][ T5897] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 287.423396][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.658489][ T9075] netlink: 76 bytes leftover after parsing attributes in process `syz.0.735'. [ 288.207206][ T5897] usb 5-1: GET_CAPABILITIES returned 0 [ 288.213024][ T5897] usbtmc 5-1:16.0: can't read capabilities [ 288.910608][ T9055] netlink: 248 bytes leftover after parsing attributes in process `syz.4.731'. [ 288.937786][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 289.106364][ T5867] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 289.412661][ T5867] usb 6-1: device descriptor read/64, error -71 [ 289.694969][ T5867] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 290.271949][ T5867] usb 6-1: device descriptor read/64, error -71 [ 290.397619][ T5867] usb usb6-port1: attempt power cycle [ 290.436590][ T8] usb 5-1: USB disconnect, device number 32 [ 290.779002][ T5867] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 290.884314][ T5867] usb 6-1: device descriptor read/8, error -71 [ 291.950364][ T5867] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 292.089600][ T5867] usb 6-1: device descriptor read/8, error -71 [ 292.386669][ T5867] usb usb6-port1: unable to enumerate USB device [ 292.880234][ T9126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.751'. [ 292.907317][ T9116] netlink: 36 bytes leftover after parsing attributes in process `syz.3.741'. [ 293.137360][ T30] audit: type=1326 audit(1736120471.444:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9118 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 293.172021][ T9120] fuse: Unknown parameter '0x0000000000000005' [ 293.178303][ T30] audit: type=1326 audit(1736120471.463:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9118 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 293.224221][ T30] audit: type=1326 audit(1736120471.463:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9118 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 293.263582][ T30] audit: type=1326 audit(1736120471.463:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9118 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 293.325348][ T30] audit: type=1326 audit(1736120471.463:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9118 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 293.356575][ T30] audit: type=1326 audit(1736120471.463:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9118 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 293.388219][ T8] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 293.414551][ T30] audit: type=1326 audit(1736120471.463:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9118 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 293.436710][ T30] audit: type=1326 audit(1736120471.463:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9118 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 293.459119][ T30] audit: type=1326 audit(1736120471.463:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9118 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 293.483389][ T30] audit: type=1326 audit(1736120471.463:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9118 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1993785d29 code=0x7ffc0000 [ 293.582415][ T8] usb 1-1: config 0 has an invalid interface number: 111 but max is 0 [ 293.591234][ T8] usb 1-1: config 0 has no interface number 0 [ 293.597932][ T8] usb 1-1: config 0 interface 111 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 4 [ 293.610709][ T8] usb 1-1: config 0 interface 111 altsetting 0 endpoint 0xE has invalid maxpacket 64, setting to 0 [ 293.657113][ T8] usb 1-1: config 0 interface 111 altsetting 0 endpoint 0xB has invalid maxpacket 16, setting to 8 [ 293.668512][ T8] usb 1-1: config 0 interface 111 altsetting 0 endpoint 0x9 is Bulk; changing to Interrupt [ 293.680709][ T8] usb 1-1: config 0 interface 111 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 8 [ 294.908920][ T9156] netlink: 'syz.1.758': attribute type 10 has an invalid length. [ 295.825269][ T8] usb 1-1: New USB device found, idVendor=055f, idProduct=c650, bcdDevice=6c.0d [ 295.836845][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.849895][ T8] usb 1-1: config 0 descriptor?? [ 295.855534][ T8] usb 1-1: can't set config #0, error -71 [ 295.868287][ T8] usb 1-1: USB disconnect, device number 40 [ 297.017576][ T9156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.025711][ T9156] batadv0: entered promiscuous mode [ 297.031265][ T9156] batadv0: entered allmulticast mode [ 297.037802][ T9156] team0: Port device batadv0 added [ 297.059129][ T9158] sit0: entered promiscuous mode [ 297.092294][ T9158] netlink: 'syz.5.759': attribute type 1 has an invalid length. [ 297.108125][ T9158] netlink: 1 bytes leftover after parsing attributes in process `syz.5.759'. [ 409.397322][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 409.404393][ C0] rcu: 1-...!: (1 GPs behind) idle=6a7c/1/0x4000000000000000 softirq=28942/28943 fqs=1 [ 409.415622][ C0] rcu: (detected by 0, t=10505 jiffies, g=25921, q=520 ncpus=2) [ 409.423382][ C0] Sending NMI from CPU 0 to CPUs 1: [ 409.423427][ C1] NMI backtrace for cpu 1 [ 409.423446][ C1] CPU: 1 UID: 0 PID: 9163 Comm: syz.3.760 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 409.423464][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 409.423480][ C1] RIP: 0010:__this_cpu_preempt_check+0x0/0x20 [ 409.423520][ C1] Code: 09 46 f5 e8 a2 a3 48 f5 eb a8 e8 ab e0 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 89 fe 48 c7 c7 60 dd 5e 8c e9 bd fe ff ff 66 2e 0f [ 409.423533][ C1] RSP: 0018:ffffc90000a18c20 EFLAGS: 00000046 [ 409.423547][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff88801cb45a00 [ 409.423558][ C1] RDX: ffff88801cb45a00 RSI: ffff88807d4f4300 RDI: ffffffff8c0aaae0 [ 409.423571][ C1] RBP: 0000000000000000 R08: ffffffff89c5e301 R09: fffff5200014317c [ 409.423584][ C1] R10: dffffc0000000000 R11: fffff5200014317c R12: 0000000000000046 [ 409.423596][ C1] R13: ffff88801cb45a00 R14: 00000000ffffffff R15: ffff88807d4f4300 [ 409.423608][ C1] FS: 00007f7b7f0986c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 409.423622][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.423633][ C1] CR2: 00007f7b7e169160 CR3: 000000003048e000 CR4: 00000000003526f0 [ 409.423648][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 409.423657][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 409.423668][ C1] Call Trace: [ 409.423675][ C1] [ 409.423683][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 409.423720][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 409.423759][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 409.423813][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 409.423859][ C1] ? nmi_handle+0x14f/0x5a0 [ 409.423896][ C1] ? nmi_handle+0x2a/0x5a0 [ 409.423933][ C1] ? __pfx___this_cpu_preempt_check+0x10/0x10 [ 409.423982][ C1] ? default_do_nmi+0x63/0x160 [ 409.424019][ C1] ? exc_nmi+0x123/0x1f0 [ 409.424054][ C1] ? end_repeat_nmi+0xf/0x53 [ 409.424091][ C1] ? advance_sched+0x131/0xca0 [ 409.424132][ C1] ? __pfx___this_cpu_preempt_check+0x10/0x10 [ 409.424152][ C1] ? __pfx___this_cpu_preempt_check+0x10/0x10 [ 409.424172][ C1] ? __pfx___this_cpu_preempt_check+0x10/0x10 [ 409.424192][ C1] [ 409.424197][ C1] [ 409.424202][ C1] lock_is_held_type+0x101/0x190 [ 409.424221][ C1] ? __pfx_advance_sched+0x10/0x10 [ 409.424237][ C1] advance_sched+0x148/0xca0 [ 409.424255][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 409.424273][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 409.424293][ C1] ? __pfx_advance_sched+0x10/0x10 [ 409.424309][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 409.424335][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 409.424351][ C1] ? handle_softirqs+0x7e0/0x9b0 [ 409.424370][ C1] ? read_tsc+0x9/0x20 [ 409.424388][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 409.424407][ C1] hrtimer_interrupt+0x403/0xa40 [ 409.424433][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 409.424451][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 409.424469][ C1] [ 409.424475][ C1] [ 409.424480][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 409.424500][ C1] RIP: 0010:do_syscall_64+0xbc/0x230 [ 409.424520][ C1] Code: ed 00 00 00 48 8b 7d 08 e8 41 65 00 00 0f 1f 44 00 00 0f 1f 44 00 00 90 e8 21 b7 e6 f5 90 90 e8 ca b6 e6 f5 fb 49 8b 54 24 08 c2 3f 74 0e 4c 89 f7 4c 89 fe e8 a4 bc c8 f5 49 89 c7 90 90 41 [ 409.424532][ C1] RSP: 0018:ffffc9000be1ff10 EFLAGS: 00000282 [ 409.424545][ C1] RAX: 58321a41351d2b00 RBX: ffffc9000be1ff10 RCX: ffffffff9a378903 [ 409.424557][ C1] RDX: 0000000000000000 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5edd60 [ 409.424568][ C1] RBP: ffffc9000be1ff48 R08: ffffffff901856b7 R09: 1ffffffff2030ad6 [ 409.424580][ C1] R10: dffffc0000000000 R11: fffffbfff2030ad7 R12: ffff88801cb45a00 [ 409.424591][ C1] R13: 0000000000000000 R14: ffffc9000be1ff58 R15: 0000000000000029 [ 409.424609][ C1] ? clear_bhb_loop+0x35/0x90 [ 409.424624][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.424643][ C1] RIP: 0033:0x7f7b7e185d29 [ 409.424665][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.424677][ C1] RSP: 002b:00007f7b7f098038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 409.424692][ C1] RAX: ffffffffffffffda RBX: 00007f7b7e375fa0 RCX: 00007f7b7e185d29 [ 409.424704][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 409.424713][ C1] RBP: 00007f7b7e201b08 R08: 0000000000000000 R09: 0000000000000000 [ 409.424723][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.424733][ C1] R13: 0000000000000001 R14: 00007f7b7e375fa0 R15: 00007ffd2d118378 [ 409.424750][ C1] [ 409.425415][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g25921 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 409.904409][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 409.914477][ C0] rcu: RCU grace-period kthread stack dump: [ 409.920370][ C0] task:rcu_preempt state:R running task stack:25360 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 409.932152][ C0] Call Trace: [ 409.935441][ C0] [ 409.938385][ C0] __schedule+0x17fb/0x4be0 [ 409.942927][ C0] ? __pfx___schedule+0x10/0x10 [ 409.947796][ C0] ? __pfx_lock_release+0x10/0x10 [ 409.952841][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 409.959181][ C0] ? schedule+0x90/0x320 [ 409.963438][ C0] schedule+0x14b/0x320 [ 409.967609][ C0] schedule_timeout+0x15a/0x290 [ 409.972469][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 409.977852][ C0] ? __pfx_process_timeout+0x10/0x10 [ 409.983158][ C0] ? prepare_to_swait_event+0x330/0x350 [ 409.988718][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 409.993576][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 409.998796][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 410.004704][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 410.009998][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 410.015919][ C0] ? finish_swait+0xd4/0x1e0 [ 410.020524][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 410.025146][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 410.030354][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 410.036264][ C0] ? __kthread_parkme+0x169/0x1d0 [ 410.041311][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 410.046525][ C0] kthread+0x2f0/0x390 [ 410.050607][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 410.055820][ C0] ? __pfx_kthread+0x10/0x10 [ 410.060424][ C0] ret_from_fork+0x4b/0x80 [ 410.064847][ C0] ? __pfx_kthread+0x10/0x10 [ 410.069453][ C0] ret_from_fork_asm+0x1a/0x30 [ 410.074244][ C0] [ 410.077294][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 410.083627][ C0] CPU: 0 UID: 0 PID: 9107 Comm: syz.4.749 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 410.094234][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 410.104317][ C0] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60 [ 410.111107][ C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 e5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 e4 [ 410.130727][ C0] RSP: 0018:ffffc90004b07740 EFLAGS: 00000293 [ 410.136811][ C0] RAX: ffffffff81938eeb RBX: 1ffff110170e88b9 RCX: ffff88802f019e00 [ 410.144798][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 410.152777][ C0] RBP: ffffc90004b07940 R08: ffffffff81938eba R09: 1ffffffff284e310 [ 410.160761][ C0] R10: dffffc0000000000 R11: fffffbfff284e311 R12: dffffc0000000000 [ 410.168745][ C0] R13: ffff8880b87445c8 R14: ffff8880b863f940 R15: 0000000000000001 [ 410.176726][ C0] FS: 0000555568e17500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 410.185680][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.192270][ C0] CR2: 00007ffda2141fa8 CR3: 0000000060456000 CR4: 00000000003526f0 [ 410.200255][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 410.208232][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 410.216212][ C0] Call Trace: [ 410.219499][ C0] [ 410.222356][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 410.228703][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 410.234360][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 410.240177][ C0] ? cgroup_rstat_updated+0x13b/0xc30 [ 410.245573][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 410.251836][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 410.257228][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 410.262881][ C0] ? update_process_times+0x242/0x2f0 [ 410.268264][ C0] ? tick_nohz_handler+0x37c/0x500 [ 410.273395][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 410.278869][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 410.284272][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 410.290024][ C0] ? sched_clock+0x4a/0x70 [ 410.294478][ C0] ? read_tsc+0x9/0x20 [ 410.298563][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 410.304647][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 410.309795][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 410.315961][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 410.321777][ C0] [ 410.324713][ C0] [ 410.327651][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 410.333823][ C0] ? smp_call_function_many_cond+0x19da/0x2c60 [ 410.339989][ C0] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 410.346181][ C0] ? smp_call_function_many_cond+0x19f3/0x2c60 [ 410.352357][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 410.357405][ C0] ? __pfx___text_poke+0x10/0x10 [ 410.362363][ C0] ? __pfx___might_resched+0x10/0x10 [ 410.367663][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 410.374009][ C0] ? __pfx___might_resched+0x10/0x10 [ 410.379321][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 410.384357][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 410.389485][ C0] text_poke_bp_batch+0x352/0xb30 [ 410.394520][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 410.400518][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 410.405555][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 410.411120][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 410.417381][ C0] ? __jump_label_update+0x379/0x3a0 [ 410.422685][ C0] text_poke_finish+0x30/0x50 [ 410.427379][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 410.433371][ C0] __static_key_slow_dec_cpuslocked+0xc4/0x110 [ 410.439540][ C0] static_key_slow_dec+0x51/0xa0 [ 410.444486][ C0] kvm_arch_vcpu_destroy+0x101/0x240 [ 410.449792][ C0] kvm_destroy_vcpus+0xf7/0x280 [ 410.454667][ C0] ? __pfx_kvm_destroy_vcpus+0x10/0x10 [ 410.460135][ C0] ? _raw_spin_unlock+0x28/0x50 [ 410.464997][ C0] ? kvm_ioapic_destroy+0xac/0xc0 [ 410.470046][ C0] kvm_arch_destroy_vm+0x344/0x430 [ 410.475185][ C0] ? __pfx_kvm_arch_destroy_vm+0x10/0x10 [ 410.480833][ C0] ? mmu_notifier_unregister+0x33c/0x3d0 [ 410.486478][ C0] ? mmu_notifier_unregister+0xae/0x3d0 [ 410.492045][ C0] kvm_put_kvm+0xb75/0xf60 [ 410.496476][ C0] kvm_vm_release+0x43/0x50 [ 410.500988][ C0] ? __pfx_kvm_vm_release+0x10/0x10 [ 410.506198][ C0] __fput+0x23c/0xa50 [ 410.510202][ C0] task_work_run+0x24f/0x310 [ 410.514800][ C0] ? _raw_spin_unlock+0x28/0x50 [ 410.519669][ C0] ? __pfx_task_work_run+0x10/0x10 [ 410.524794][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 410.530530][ C0] syscall_exit_to_user_mode+0x13f/0x340 [ 410.536175][ C0] do_syscall_64+0x100/0x230 [ 410.540780][ C0] ? clear_bhb_loop+0x35/0x90 [ 410.545468][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.551372][ C0] RIP: 0033:0x7fdc63b85d29 [ 410.555795][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.575415][ C0] RSP: 002b:00007ffc1eb39078 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 410.583844][ C0] RAX: 0000000000000000 RBX: 00007fdc63d77ba0 RCX: 00007fdc63b85d29 [ 410.591831][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 410.599806][ C0] RBP: 00007fdc63d77ba0 R08: 00000000000001fc R09: 00007ffc1eb3936f [ 410.607787][ C0] R10: 00007fdc63d77ac0 R11: 0000000000000246 R12: 00000000000473ff [ 410.615766][ C0] R13: 00007fdc63d76080 R14: 0000000000000032 R15: ffffffffffffffff [ 410.623762][ C0]