last executing test programs: 2m21.247565816s ago: executing program 1 (id=819): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x56fa9599}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0xeda7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r3, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/32, 0x30}], 0x1}, 0x7}], 0x1, 0x40000182, 0x0) close(r4) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x20004884}, 0x20004814) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0x9, 0x200000000000403, 0x70dd0436, 0x0, 0x8], 0xd000, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 2m20.613756596s ago: executing program 1 (id=824): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m20.427832784s ago: executing program 1 (id=825): socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) eventfd(0x5f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa6d9d000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0x0, 0x300000, 0x8}) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b7070000000002006a0102000000000007000000000000009500000000000201561cf53109c66825d874b16b2cba"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 2m17.784144878s ago: executing program 1 (id=838): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) close(0x3) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0xd, 0x3}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x4400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000280)={r2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000040)=[r7], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r4], &(0x7f0000000200), &(0x7f0000000580)=[r5], &(0x7f0000000040)}) r8 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_mreqn(r8, 0x0, 0x24, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_settime(0x0, 0x0, 0x0, 0x0) 2m13.68759113s ago: executing program 1 (id=847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c43, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)=0xa96) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000100)={r5, 0x8, 0x7, 0x81, 0x3, [0x0, 0x0, 0x0, 0x0], [0x3fd86826, 0xfffffffd, 0x0, 0xdeba], [0x0, 0x7, 0x9], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) r8 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000100)=0x1f, 0x4) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000240)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r6, 0x0, 0x0, r7], [0x3], [0x0, 0x4], [0x0, 0x0, 0x1, 0x4]}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ustat(0x207f, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) r13 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r13) 2m10.92839532s ago: executing program 1 (id=852): r0 = socket(0x2b, 0x80801, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r1 = epoll_create(0x8) r2 = socket(0x10, 0x803, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) preadv(r4, 0x0, 0x0, 0x80000000, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty}, 0xc) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) r6 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdbe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048080}, 0x8094) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x9000001c}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) listen(r0, 0x10001) socket$nl_route(0x10, 0x3, 0x0) 1m52.938956756s ago: executing program 32 (id=852): r0 = socket(0x2b, 0x80801, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r1 = epoll_create(0x8) r2 = socket(0x10, 0x803, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) preadv(r4, 0x0, 0x0, 0x80000000, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty}, 0xc) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) r6 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdbe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048080}, 0x8094) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x9000001c}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) listen(r0, 0x10001) socket$nl_route(0x10, 0x3, 0x0) 32.26643315s ago: executing program 4 (id=998): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004000001000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x115, &(0x7f0000002600)=""/4069, 0x40f00, 0x44, '\x00', 0x0, 0x201}, 0x94) 31.899343829s ago: executing program 4 (id=999): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = socket$kcm(0x1e, 0x4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) (async) r3 = socket(0x2, 0x805, 0x0) (async) r4 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x8000, 0x5, 0x7, 0x100, 0x2, 0x6, 0xc, 0x2, r5}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 31.414197166s ago: executing program 4 (id=1002): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x1d, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 30.642983365s ago: executing program 4 (id=1005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000140001800500020005"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 30.183666429s ago: executing program 4 (id=1008): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x183301, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4048810) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000380)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x100, 0x7}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "0200be", 0x4c, 0x2f, 0xff, @empty, @mcast2, {[@dstopts={0x3b}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x82) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10160, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0xf497, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) 29.585426911s ago: executing program 2 (id=1011): socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) eventfd(0x5f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa6d9d000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0x0, 0x300000, 0x8}) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b7070000000002006a010200000000000700000000000000950000000000ffb0561cf53109c66825d874b16b2cba"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 21.131246487s ago: executing program 2 (id=1012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 20.640735748s ago: executing program 4 (id=1014): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x8b, 0x0, 0xf9}]}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x2, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x10, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000094b850006000000"], &(0x7f00000004c0)='GPL\x00', 0xb, 0xba, &(0x7f00000005c0)=""/186, 0x41100, 0x40, '\x00', r6, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x3, 0x5, 0x10001, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000006c0)=[{0x1, 0x3, 0x3, 0xa}, {0x5, 0x1, 0x8, 0x7}, {0x1, 0x5, 0xf, 0x7}, {0x5, 0x5, 0x2}, {0x3, 0x5, 0x4, 0x3}, {0x4, 0x1, 0x2, 0x8}, {0x1, 0x5, 0x1, 0xa}], 0x10, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ff0700"/19, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0100000000000000000000000100"/28], 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[], 0x118) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f00000002c0)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 19.851354495s ago: executing program 2 (id=1015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000031e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) close(0x3) r2 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000540), 0x40000, 0x0) openat$cgroup_int(r2, &(0x7f0000000580)='cpu.idle\x00', 0x2, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r4, 0x10000000) process_vm_writev(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 18.804448252s ago: executing program 3 (id=1016): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300030c00000027bd700000000000020009001000000001d70000000000000300060000000000020000ffef000000000000000000000002000100000000000000031800000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x10) 18.727798213s ago: executing program 2 (id=1017): ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000100)={[0xfffff801]}, 0x8) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7ffd, 0x100) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000140)={0x1, 0x0, {0x5, 0xb, 0x1, 0x90e3}}) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') pread64(r2, &(0x7f0000000200)=""/87, 0x57, 0x8) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) unshare(0x6a040000) 18.272291584s ago: executing program 3 (id=1018): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc7b}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="d5", 0x1}], 0x1}}], 0x2, 0x20000800) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) listen(r0, 0x10001) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@loopback, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@private0, 0x23, r2}) accept4$packet(r0, 0x0, 0x0, 0x80800) 17.810116416s ago: executing program 0 (id=1019): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000006080), 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4b564d05, 0x0, 0x168}]}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) unshare(0x22020600) open_tree(r4, &(0x7f0000000640)='\x00', 0x81101) 12.610806133s ago: executing program 0 (id=1020): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000010000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000100", 0x58}], 0x1) 10.377386801s ago: executing program 3 (id=1021): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @empty, 0xffffffff}, 0x1c) listen(r0, 0x7fff) r1 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000180)=0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd\x00') fchdir(r3) exit(0x3) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file2\x00', 0xc06c, 0x0, 0x31, 0x0, 0x0) syz_open_procfs$userns(r2, &(0x7f0000000300)) r4 = syz_clone3(&(0x7f0000000240)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(r5, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/75, 0x4b}], 0x1) r6 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x4, 0x0) r7 = socket(0x23, 0x3, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r7) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000a00)={0x0, 0x3}, 0x4) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x20, 0x9]}, 0x8, 0x6a17452cd8bcec55) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000002500090122bd7008f9ffffff0200000024003d8020002280fe3906e05da7e2283682fbc43377a9e38fce308d28090fb1ec0800030047000000"], 0x40}, 0x1, 0x0, 0x0, 0x10004957}, 0x20000040) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x2}, 0x4) sched_getparam(r6, &(0x7f0000000140)) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f00000001c0)={{0x3a, @multicast1, 0x4e24, 0x2, 'wrr\x00', 0xc, 0x6d7, 0x7d}, {@multicast2, 0x4e20, 0x0, 0x4, 0x3, 0xc}}, 0x44) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0x0, 0xbc7000, 0x3, r10, 0x0, &(0x7f00000000c0)={0x9909d4, 0x2, '\x00', @value64=0xa}}) 8.338028813s ago: executing program 0 (id=1022): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc7b}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="d5", 0x1}], 0x1}}], 0x2, 0x20000800) shutdown(r1, 0x1) listen(r0, 0x10001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@loopback, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@private0, 0x23, r3}) accept4$packet(r0, 0x0, 0x0, 0x80800) 7.427090937s ago: executing program 0 (id=1023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05fffffffffffffff4000100fffc0900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d6174636800000024000280080003000000000008000240000000000e000100636f6e6e6c6162656c0000000900010073797a30"], 0xd4}}, 0x0) 6.966216166s ago: executing program 2 (id=1024): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000f80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x10, 0x3f2, 0x10, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x10) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="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", 0xa96}], 0x1, 0x0, 0x102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/16], 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd04, 0x24dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r2, 0xc0805841, &(0x7f0000000d80)={0xfff, 0x8, 0x3, 0xd3, 0x81}) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r9, 0x3b72, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) fcntl$lock(r9, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000e00)=ANY=[@ANYBLOB="df0000000000000000000000d1da5f8feeada597645fab82e04c02d8116bf085eb1e0d921ad2e130c1486b167b89641be455f25778626e7fe8261022acb4a1739b27bd2b8371a10cddb27456b8263dfb36d6b45231601a76bbcb80a33d1d80f35a6bf2da321dfd30a0250a18074fb11aaa7fb312f95d81056e451839fe62089a7174825b0653778f76b8f3781ca91bbf05a463e24522de7deaa7814788c5efece95fada1dbcf0f0e60f9bb249d0000907c847f641206dbb08bc14b8509e3a26a47afcb92da11615f99e81a284ae7e6d54d8482eddee1f1c8c4136e0eea2d7a11c3f8c1bf761548526f03f3"]) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0x4800) r10 = open(&(0x7f0000000180)='./file0\x00', 0x6440, 0x81) sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x70, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x13, r10, 0xd000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x11, r10, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, r7, 0x25, 0x0, @void}, 0x10) r11 = io_uring_setup(0xbfa, &(0x7f0000000000)={0x0, 0xdc15, 0x40, 0x2, 0x2b2}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r11, 0x25, &(0x7f0000000d40)="01", 0x1) 6.701232821s ago: executing program 0 (id=1025): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x56fa9599}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0xeda7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r4, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/32, 0x30}], 0x1}, 0x7}], 0x1, 0x40000182, 0x0) close(r5) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x20004884}, 0x20004814) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r3) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0x9, 0x200000000000403, 0x70dd0436, 0x0, 0x8], 0xd000, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.669008878s ago: executing program 3 (id=1026): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000068a00800000020104000000cb2004001001000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x115, &(0x7f0000002600)=""/4069, 0x40f00, 0x44}, 0x94) 6.461762168s ago: executing program 3 (id=1027): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120110013c0c30085e04840210320102030109021b000100004005090489010193147100090511", @ANYRES64], 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x6, 0x3, 0x19}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xff, 0x80, 0x9}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x1, 0x0, 0x4, 0x10}, 0x4c, &(0x7f00000000c0)={0x5, 0xf, 0x4c, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x9, 0x4}, @generic={0x3d, 0x10, 0xb, "05c58f873b1adf5b94b5954a1035138527b4eac32eb3cd8dbc14e124f046cae4b973946c8a73f4e7e873d5af6dd45edb3c74a4117569798db6b3"}]}, 0x7, [{0x7a, &(0x7f0000000140)=@string={0x7a, 0x3, "857b74ddaded5bec4faae6947a90d9aabf251f19f4ceeb1ca6a2a5543e129068fdc7792d2d4b9702ce6af18a615390781bc788dc0944202569b99e71eeb4726f052bec44a22d5200d131bd2d53a78c156785e51b6d962729ff31d2b4b06b0b8f5361e701347996f369318c47bdada87f91e0b844d300c17e"}}, {0x7f, &(0x7f00000001c0)=@string={0x7f, 0x3, "5205318b41d89a57ff866e3159f90c9159193bbc0b40538765cc14649e6ed2e71b4d105322ef59f5aa915f899e6d1e0d71cc057cfb41142cd68efc2f691bc4d65c6fb9fefbe36605acab9a2a57a8b141678cf44460521ba826f74a4bc31c3c2df0e7d58f0700481bd1d8f54d221232ac9bfd6965eb5123c58f58ae3ac2"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x445}}, {0x9b, &(0x7f00000002c0)=@string={0x9b, 0x3, "8ac62e6e38e822ca6ebe7ddadd5076acda15f4d343114ee7c5336b89edb77b16f9797373a5857ded0900fa608238dd99cc1f19534388bd00f2140ed6b36100e9642de16c421d5fa306f3c7552133d0906705792753731f0ac66aef6f1f42f0875f2d70c74e647471ee783a3cecf18f32af026636ccca3581c40c30f5b0648cb977d6a304978121e35ba7f83bcce5dd2c1f992059e354eac13e"}}, {0x5b, &(0x7f0000000380)=@string={0x5b, 0x3, "a401177c15b325943bb157741258113b38fd3425df42a4c99160628b86cb154a3ba34a36731232cb0ea91162afaf8f0d87ca48396085d53d12007c164ac450b83a2d56615b8f9b7758383accdfc18ea68be4ebcdd9d1e74a84"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc1a}}]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f00000004c0)={0x9, 0x38, 0x1}) 4.590945586s ago: executing program 33 (id=1014): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x8b, 0x0, 0xf9}]}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x2, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x10, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000094b850006000000"], &(0x7f00000004c0)='GPL\x00', 0xb, 0xba, &(0x7f00000005c0)=""/186, 0x41100, 0x40, '\x00', r6, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x3, 0x5, 0x10001, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000006c0)=[{0x1, 0x3, 0x3, 0xa}, {0x5, 0x1, 0x8, 0x7}, {0x1, 0x5, 0xf, 0x7}, {0x5, 0x5, 0x2}, {0x3, 0x5, 0x4, 0x3}, {0x4, 0x1, 0x2, 0x8}, {0x1, 0x5, 0x1, 0xa}], 0x10, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ff0700"/19, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0100000000000000000000000100"/28], 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[], 0x118) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f00000002c0)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 4.35789046s ago: executing program 2 (id=1029): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x56fa9599}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0xeda7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r4, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/32, 0x30}], 0x1}, 0x7}], 0x1, 0x40000182, 0x0) close(r5) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x20004884}, 0x20004814) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0x9, 0x200000000000403, 0x70dd0436, 0x0, 0x8], 0xd000, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.253534498s ago: executing program 0 (id=1030): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r5, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c4601040202be05000000000000020006000400000019000000380000005e020000d30a00000400200001"], 0x758) close(r5) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0xa1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x40000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0x8, 0x7, 0x41}, 0x8) r7 = socket$qrtr(0x2a, 0x2, 0x0) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x10000000000000a0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180800b64e0000002415c676a0c3ed5aff110000a6237eb3737783e753820ec8af7a0000000015d78bba65790843a36800000069c1458f7e12c5ba1104b263998c40ee4221e5b375d168d28c0f6658a5a9b640e3ec962301f3446013fa72b29f98e6cb8b71fe2e16b789aae99de138d6225ba150364af27c6ed1d585fc6e892b106c2a27361ace09ecc85545f8503ca9e40c0c05e32cabd9b50ccb26ecbb99247fde8609dd14b91d6d732feac0", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r8], 0x0}, 0x94) ioprio_set$pid(0x1, 0x0, 0x0) 0s ago: executing program 3 (id=1031): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x200}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xef7ab6f359d7b58a}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket(0x28, 0x801, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x4c040) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffd, 0xc, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x200, 0x45c5, 0xc591, 0x7, 0x2, 0x1, 0x0, 0x80000004000000, 0x5], 0x8000000, 0x1000}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_io_uring_setup(0x27f0, &(0x7f0000000c80)={0x0, 0xb94, 0x10100, 0xd, 0x3bd}, &(0x7f0000000280), &(0x7f0000000100), &(0x7f0000000000)) kernel console output (not intermixed with test programs): 01 DVB-T USB2.0' in warm state [ 148.953556][ T7303] No such timeout policy "syz0" [ 148.966659][ T5689] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 148.987697][ T5689] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 149.010415][ T5689] usb 3-1: media controller created [ 149.077896][ T5689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.081318][ T5711] usb 4-1: 0:1 : does not exist [ 149.103823][ T5711] usb 4-1: BAAD SPEAKER p_chmask mismatch [ 149.114620][ T5719] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 149.227059][ T7307] netlink: 'syz.1.516': attribute type 3 has an invalid length. [ 149.257341][ T5711] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 149.273071][ T5711] usb 4-1: USB disconnect, device number 12 [ 149.292957][ T5719] usb 5-1: Using ep0 maxpacket: 32 [ 149.304802][ T5719] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 149.334064][ T5719] usb 5-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config [ 149.351833][ T5689] zl10353_read_register: readreg error (reg=127, ret==-32) [ 149.361006][ T5719] usb 5-1: config 0 has no interface number 0 [ 149.369355][ T5719] usb 5-1: too many endpoints for config 0 interface 51 altsetting 0: 197, using maximum allowed: 30 [ 149.381866][ T6069] udevd[6069]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.416351][ T5719] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 197 [ 149.485249][ T5719] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 149.495904][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.504884][ T5719] usb 5-1: Product: syz [ 149.509188][ T5719] usb 5-1: Manufacturer: syz [ 149.516466][ T7313] __nla_validate_parse: 3 callbacks suppressed [ 149.516483][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.515'. [ 149.535085][ T5719] usb 5-1: SerialNumber: syz [ 149.545004][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.515'. [ 149.557114][ T5689] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 149.569098][ T5719] usb 5-1: config 0 descriptor?? [ 149.602793][ T5689] usb 3-1: USB disconnect, device number 18 [ 149.787586][ T7300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.797339][ T7300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.891590][ T5719] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 149.931442][ T5719] usb 5-1: qt2_attach - failed to power on unit: -71 [ 149.972580][ T5719] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 150.028281][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 150.054343][ T5719] usb 5-1: USB disconnect, device number 20 [ 150.068880][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 150.292983][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 150.443249][ T5719] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 150.452977][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 150.460626][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 150.475233][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 150.490448][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 150.499628][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 150.509425][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 150.519391][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 150.522951][ T29] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 150.529361][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 150.547006][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 150.570006][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 150.580437][ T10] usb 1-1: New USB device strings: Mfr=63, Product=0, SerialNumber=0 [ 150.602236][ T10] usb 1-1: Manufacturer: syz [ 150.615281][ T10] usb 1-1: config 0 descriptor?? [ 150.636732][ T5719] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 150.649323][ T5719] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.676850][ T5719] usb 5-1: config 0 has no interface number 0 [ 150.690899][ T5719] usb 5-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 150.706842][ T5719] usb 5-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 150.727323][ T5719] usb 5-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 150.741896][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 150.753078][ T5719] usb 5-1: config 0 interface 244 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 150.769880][ T5719] usb 5-1: config 0 interface 244 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 150.801709][ T5719] usb 5-1: config 0 interface 244 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 150.827457][ T5719] usb 5-1: config 0 interface 244 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 150.864722][ T5719] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 150.891761][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.950982][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 150.974426][ T5719] usb 5-1: config 0 descriptor?? [ 150.999003][ T7330] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 151.058043][ T10] usb 1-1: USB disconnect, device number 19 [ 151.096941][ T10] usblp0: removed [ 151.246445][ T5719] usb 5-1: string descriptor 0 read error: -71 [ 151.290803][ T5719] cypress_m8 5-1:0.244: DeLorme Earthmate USB converter detected [ 151.307835][ T5719] earthmate ttyUSB0: required endpoint is missing [ 151.349620][ T5719] usb 5-1: USB disconnect, device number 21 [ 151.379101][ T5719] cypress_m8 5-1:0.244: device disconnected [ 151.513057][ T10] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 151.529816][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 151.555105][ T29] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 151.567241][ T29] usb 3-1: can't read configurations, error -71 [ 151.724899][ T10] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 151.743206][ T10] usb 1-1: config 5 has no interface number 0 [ 151.754344][ T10] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.774664][ T10] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 151.796271][ T10] usb 1-1: config 5 interface 123 has no altsetting 0 [ 151.815311][ T10] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 151.832972][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.861125][ T10] usb 1-1: Product: syz [ 151.874436][ T10] usb 1-1: Manufacturer: syz [ 151.887395][ T10] usb 1-1: SerialNumber: syz [ 151.890173][ T7347] netlink: 16 bytes leftover after parsing attributes in process `syz.4.528'. [ 151.904143][ T7347] netlink: 40 bytes leftover after parsing attributes in process `syz.4.528'. [ 151.942942][ T5719] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 152.009460][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'. [ 152.113278][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 152.123715][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 152.152037][ T5719] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 152.169369][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.178181][ T10] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 152.189302][ T5719] usb 4-1: Product: syz [ 152.201530][ T5719] usb 4-1: Manufacturer: syz [ 152.214645][ T5719] usb 4-1: SerialNumber: syz [ 152.219491][ T10] usb 1-1: USB disconnect, device number 20 [ 152.236310][ T5719] usb 4-1: config 0 descriptor?? [ 152.261710][ T5719] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 152.273167][ T5719] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 152.289466][ T7357] loop2: detected capacity change from 0 to 7 [ 152.308998][ T7357] loop2: [ 152.312041][ T7357] loop2: partition table partially beyond EOD, truncated [ 152.862065][ T5719] em28xx 4-1:0.0: chip ID is em2765 [ 152.892977][ T29] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 152.925970][ T5710] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 153.000716][ T7375] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 153.052969][ T5712] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 153.063050][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 153.081842][ T29] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 153.091865][ T5710] usb 2-1: Using ep0 maxpacket: 8 [ 153.097175][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.106058][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 153.114269][ T29] usb 3-1: Product: syz [ 153.118689][ T29] usb 3-1: Manufacturer: syz [ 153.125379][ T5710] usb 2-1: config 106 has an invalid descriptor of length 0, skipping remainder of the config [ 153.136510][ T29] usb 3-1: SerialNumber: syz [ 153.141786][ T5710] usb 2-1: config 106 has 0 interfaces, different from the descriptor's value: 1 [ 153.155621][ T5710] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=af.a7 [ 153.175043][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.184708][ T5710] usb 2-1: Product: syz [ 153.188954][ T5710] usb 2-1: Manufacturer: syz [ 153.194450][ T5710] usb 2-1: SerialNumber: syz [ 153.213011][ T5712] usb 1-1: Using ep0 maxpacket: 16 [ 153.224475][ T5712] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 153.234098][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.251769][ T5712] usb 1-1: Product: syz [ 153.256428][ T5712] usb 1-1: Manufacturer: syz [ 153.261103][ T5712] usb 1-1: SerialNumber: syz [ 153.275311][ T5712] usb 1-1: config 0 descriptor?? [ 153.373971][ T29] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 153.386074][ T29] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 153.397590][ T29] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 153.406130][ T29] usb 3-1: media controller created [ 153.410150][ T7365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.424692][ T7365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.428115][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.449765][ T5710] usb 2-1: USB disconnect, device number 18 [ 153.480591][ T5719] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 153.489399][ T5719] em28xx 4-1:0.0: board has no eeprom [ 153.503436][ T10] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 153.626421][ T7363] netlink: 56 bytes leftover after parsing attributes in process `syz.2.534'. [ 153.665008][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 153.673332][ T29] zl10353_read_register: readreg error (reg=127, ret==-110) [ 153.681890][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 153.691427][ T5712] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 153.699844][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.715653][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.717787][ T5712] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.730083][ T10] usb 5-1: string descriptor 0 read error: -22 [ 153.743610][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.752778][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.757724][ T29] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 153.771589][ T5712] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 153.780159][ T5712] usb 1-1: media controller created [ 153.797340][ T29] usb 3-1: USB disconnect, device number 21 [ 153.801709][ T10] usb 5-1: 0:2 : does not exist [ 153.820431][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.840592][ T1222] hid_parser_main: 27 callbacks suppressed [ 153.840610][ T1222] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 153.858026][ T1222] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 154.383298][ T5712] zl10353_read_register: readreg error (reg=127, ret==0) [ 154.394645][ T5712] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 154.402595][ T5712] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 154.473143][ T5711] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 154.518149][ T7345] em28xx 4-1:0.0: reading from i2c device at 0x8 failed (error=-5) [ 154.572954][ T5719] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 154.584210][ T5719] em28xx 4-1:0.0: dvb set to bulk mode. [ 154.590606][ T5712] em28xx 4-1:0.0: Binding DVB extension [ 154.639891][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 154.668233][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 55, changing to 7 [ 154.699116][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8496, setting to 1024 [ 154.718171][ T5712] em28xx 4-1:0.0: Registering input extension [ 154.745215][ T5711] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 154.757430][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.768855][ T5711] usb 2-1: Product: syz [ 154.774442][ T5711] usb 2-1: Manufacturer: syz [ 154.779702][ T5711] usb 2-1: SerialNumber: syz [ 154.788220][ T5711] usb 2-1: config 0 descriptor?? [ 154.826523][ T7382] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 155.001525][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.029807][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.077900][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 155.109034][ T10] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 155.138501][ T10] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 155.242206][ T10] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 155.327143][ T5711] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 37 [ 155.328986][ T10] usb 5-1: USB disconnect, device number 22 [ 155.409014][ T5711] usb 2-1: USB disconnect, device number 19 [ 155.554001][ T5712] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 155.610928][ T1222] usb 4-1: USB disconnect, device number 13 [ 155.626785][ T7420] syzkaller0: entered promiscuous mode [ 155.632678][ T7420] syzkaller0: entered allmulticast mode [ 155.640457][ T1222] em28xx 4-1:0.0: Disconnecting em28xx [ 155.666478][ T1222] em28xx 4-1:0.0: Closing input extension [ 155.744752][ T5712] usb 3-1: Using ep0 maxpacket: 8 [ 155.786544][ T5712] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 155.815905][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.828382][ T5712] usb 3-1: Product: syz [ 155.832593][ T5712] usb 3-1: Manufacturer: syz [ 155.841031][ T5712] usb 3-1: SerialNumber: syz [ 155.857408][ T1222] em28xx 4-1:0.0: Freeing device [ 155.879031][ T5712] usb 3-1: config 0 descriptor?? [ 155.919610][ T5712] gspca_main: sq930x-2.14.0 probing 2770:930c [ 156.014514][ T10] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 156.141055][ T7437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.562'. [ 156.150292][ T7437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.562'. [ 156.162982][ T10] usb 5-1: device descriptor read/64, error -71 [ 156.272268][ T7441] netlink: 'syz.3.563': attribute type 1 has an invalid length. [ 156.371275][ T5712] gspca_sq930x: ucbus_write failed -71 [ 156.413199][ T10] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 156.492971][ T5689] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 156.563021][ T10] usb 5-1: device descriptor read/64, error -71 [ 156.576721][ T7455] SET target dimension over the limit! [ 156.592918][ T5712] gspca_sq930x: Sensor ov9630 not yet treated [ 156.602602][ T5712] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 156.628478][ T5712] usb 3-1: USB disconnect, device number 22 [ 156.643729][ T5689] usb 2-1: Using ep0 maxpacket: 16 [ 156.671206][ T5689] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 156.687143][ T10] usb usb5-port1: attempt power cycle [ 156.707541][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.731071][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.742944][ T5689] usb 2-1: Product: syz [ 156.751911][ T5689] usb 2-1: Manufacturer: syz [ 156.761281][ T5689] usb 2-1: SerialNumber: syz [ 156.779973][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.042989][ T10] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 157.052442][ T5689] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 157.085020][ T10] usb 5-1: device descriptor read/8, error -71 [ 157.104264][ T5689] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 157.128636][ T5689] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 157.181665][ T5689] usb 2-1: media controller created [ 157.252367][ T5689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.319350][ T7439] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21 [ 157.335431][ T10] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 157.355290][ T7439] netlink: 56 bytes leftover after parsing attributes in process `syz.1.558'. [ 157.403883][ T10] usb 5-1: device descriptor read/8, error -71 [ 157.429344][ T7469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.457066][ T5689] zl10353_read_register: readreg error (reg=127, ret==-71) [ 157.496586][ T7469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.515337][ T10] usb usb5-port1: unable to enumerate USB device [ 157.600103][ T5689] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 157.600894][ T7469] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 157.625585][ T5689] usb 2-1: USB disconnect, device number 20 [ 157.677710][ T7469] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 157.686539][ T7469] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 157.686539][ T7469] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 157.725570][ T7469] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 157.776473][ T7469] CUSE: DEVNAME unspecified [ 157.785360][ T7471] netlink: 76 bytes leftover after parsing attributes in process `syz.2.573'. [ 157.787232][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 158.378663][ T7492] loop2: detected capacity change from 0 to 7 [ 158.389904][ T7492] Dev loop2: unable to read RDB block 7 [ 158.406682][ T7492] loop2: unable to read partition table [ 158.423162][ T7492] loop2: partition table beyond EOD, truncated [ 158.473132][ T7492] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 158.685214][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 158.697097][ T7498] netlink: 88 bytes leftover after parsing attributes in process `syz.0.583'. [ 158.710522][ T7502] loop5: detected capacity change from 0 to 7 [ 158.720908][ T7502] Dev loop5: unable to read RDB block 7 [ 158.734563][ T7502] loop5: AHDI p1 p2 [ 158.741089][ T7502] loop5: partition table partially beyond EOD, truncated [ 158.749736][ T7504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.759795][ T7502] loop5: p1 size 150995456 extends beyond EOD, truncated [ 158.800010][ T7504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.948315][ T6069] udevd[6069]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 158.986937][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'. [ 159.018327][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 159.071197][ T7513] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 159.282948][ T5719] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 159.339687][ T7520] xt_TCPMSS: Only works on TCP SYN packets [ 159.464201][ T5719] usb 2-1: Using ep0 maxpacket: 32 [ 159.478125][ T5719] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.495840][ T5719] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 159.511524][ T5719] usb 2-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice= 0.40 [ 159.529845][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.538307][ T5719] usb 2-1: Product: syz [ 159.543066][ T5719] usb 2-1: Manufacturer: syz [ 159.558666][ T5719] usb 2-1: SerialNumber: syz [ 159.808907][ T7529] No such timeout policy "syz0" [ 159.869224][ T5719] usb 2-1: USB disconnect, device number 21 [ 160.583067][ T5719] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 160.734193][ T7548] bond1: option mode: unable to set because the bond device has slaves [ 160.775655][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 160.779112][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 160.809295][ T5719] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 160.825658][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.851158][ T5719] usb 4-1: Product: syz [ 160.858871][ T5719] usb 4-1: Manufacturer: syz [ 160.865948][ T7553] netlink: 'syz.1.604': attribute type 4 has an invalid length. [ 160.868179][ T5719] usb 4-1: SerialNumber: syz [ 160.900184][ T7553] netlink: 'syz.1.604': attribute type 4 has an invalid length. [ 161.143478][ T5719] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 161.169336][ T5719] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 161.183043][ T5719] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 161.191678][ T5719] usb 4-1: media controller created [ 161.243802][ T5719] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.284278][ T5712] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 161.406199][ T7527] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21 [ 161.436829][ T7527] __nla_validate_parse: 1 callbacks suppressed [ 161.436847][ T7527] netlink: 56 bytes leftover after parsing attributes in process `syz.3.592'. [ 161.453276][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 161.471024][ T5712] usb 2-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 161.481010][ T7564] netlink: 'syz.2.605': attribute type 2 has an invalid length. [ 161.493579][ T5719] zl10353_read_register: readreg error (reg=127, ret==-110) [ 161.505821][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.539226][ T5712] usb 2-1: config 0 descriptor?? [ 161.556051][ T5712] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 161.585651][ T5712] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 161.618711][ T5719] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 161.633477][ T5712] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 161.669848][ T5712] usb 2-1: media controller created [ 161.678362][ T5719] usb 4-1: USB disconnect, device number 14 [ 161.701995][ T7563] netlink: 'syz.2.605': attribute type 2 has an invalid length. [ 161.715143][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.771355][ T5712] usb 2-1: selecting invalid altsetting 1 [ 161.788147][ T5712] set interface failed [ 161.788167][ T5712] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 161.799498][ T7559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.815577][ T5712] error writing reg: 0xff, val: 0x00 [ 161.819056][ T7559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.880340][ T5712] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 162.132047][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.160367][ T7573] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 162.193544][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.240280][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.282489][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.365765][ T5712] usb 2-1: USB disconnect, device number 22 [ 162.382744][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 162.410094][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 162.491895][ T7581] netlink: 68 bytes leftover after parsing attributes in process `syz.4.613'. [ 162.830691][ T7593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.618'. [ 162.850343][ T7593] netlink: 40 bytes leftover after parsing attributes in process `syz.2.618'. [ 163.046378][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'. [ 163.085676][ T7602] loop2: detected capacity change from 0 to 7 [ 163.110341][ T7602] loop2: [ 163.122403][ T7602] loop2: partition table partially beyond EOD, truncated [ 163.823046][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.843506][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.852964][ T5712] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 163.874796][ T7603] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21 [ 163.894094][ T7603] netlink: 56 bytes leftover after parsing attributes in process `syz.0.622'. [ 164.023566][ T5712] usb 3-1: Using ep0 maxpacket: 32 [ 164.034682][ T5712] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 164.049721][ T5712] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 164.058602][ T5712] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 164.067716][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.082954][ T5711] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 164.094637][ T5712] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 164.105357][ T24] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 164.113927][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 164.124750][ T5712] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 164.134688][ T5712] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 164.149004][ T5712] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 164.158401][ T5712] usb 3-1: New USB device strings: Mfr=65, Product=0, SerialNumber=0 [ 164.166764][ T5712] usb 3-1: Manufacturer: syz [ 164.177812][ T5712] usb 3-1: config 0 descriptor?? [ 164.259406][ T7631] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 164.273691][ T5711] usb 2-1: Using ep0 maxpacket: 32 [ 164.281769][ T5711] usb 2-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 164.291825][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 164.299883][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.308557][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 164.318256][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 164.332478][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= 0.40 [ 164.344607][ T5711] usb 2-1: config 0 descriptor?? [ 164.351914][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.361287][ T24] usb 4-1: Product: syz [ 164.366148][ T24] usb 4-1: Manufacturer: syz [ 164.369054][ T5711] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 164.382202][ T24] usb 4-1: SerialNumber: syz [ 164.403252][ T5712] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 164.428798][ T5711] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 164.467494][ T5712] usb 3-1: USB disconnect, device number 23 [ 164.484235][ T5711] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 164.492248][ T5711] usb 2-1: media controller created [ 164.506430][ T5712] usblp0: removed [ 164.538751][ T5711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.571189][ T5711] usb 2-1: selecting invalid altsetting 1 [ 164.578159][ T5711] set interface failed [ 164.578185][ T5711] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 164.605603][ T5711] error writing reg: 0xff, val: 0x00 [ 164.762524][ T7642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.863339][ T7642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.874693][ T7638] could not allocate digest TFM handle crc32 [ 164.900462][ T5711] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 165.013107][ T5712] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 165.068344][ T7637] binder: 7634:7637 ioctl c0306201 0 returned -14 [ 165.197940][ T5711] usb 2-1: USB disconnect, device number 23 [ 165.205516][ T5712] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 165.217391][ T5712] usb 3-1: config 5 has no interface number 0 [ 165.227104][ T5712] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.238353][ T5712] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 165.252183][ T5712] usb 3-1: config 5 interface 123 has no altsetting 0 [ 165.265567][ T5712] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 165.275891][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.284123][ T5712] usb 3-1: Product: syz [ 165.294771][ T5712] usb 3-1: Manufacturer: syz [ 165.304216][ T5712] usb 3-1: SerialNumber: syz [ 165.402716][ T24] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 4 [ 165.435632][ T24] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 165.488556][ T24] usb 4-1: failed to enable PITCH for EP 0x1 [ 165.519549][ T24] usb 4-1: unit 2 not found! [ 165.543883][ T5712] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 165.552140][ T24] usb 4-1: unit 0 not found! [ 165.601715][ T5712] usb 3-1: USB disconnect, device number 24 [ 165.827176][ T24] usb 4-1: USB disconnect, device number 15 [ 166.027712][ T5642] udevd[5642]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.293765][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 166.610064][ T7692] syzkaller0: entered promiscuous mode [ 166.633250][ T7692] syzkaller0: entered allmulticast mode [ 166.734669][ T7696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.753490][ T7696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.812537][ T7675] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21 [ 166.837979][ T7675] netlink: 56 bytes leftover after parsing attributes in process `syz.0.648'. [ 167.103489][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 167.103506][ T30] audit: type=1326 audit(1779648736.078:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.652" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f2701c code=0x0 [ 167.163007][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 167.205923][ T7706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.659'. [ 167.215949][ T7706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.659'. [ 167.292944][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 167.323455][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 167.338616][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 167.354454][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.388471][ T24] usb 2-1: config 0 descriptor?? [ 167.402241][ T24] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 167.425740][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 167.447674][ T24] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 167.456203][ T24] usb 2-1: media controller created [ 167.456596][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.473169][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.512932][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.518636][ T24] usb 2-1: selecting invalid altsetting 1 [ 167.539341][ T24] set interface failed [ 167.539368][ T24] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 167.543001][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.549486][ T24] error writing reg: 0xff, val: 0x00 [ 167.551268][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.573651][ T29] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 167.620145][ T7702] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 167.650428][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.676441][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.712127][ T24] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 167.727006][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.755792][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.767864][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.775016][ T7710] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 167.784074][ T29] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 167.802918][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 167.811524][ T29] usb 3-1: SerialNumber: syz [ 168.069900][ T7716] Cannot find del_set index 0 as target [ 168.075732][ T7708] netlink: 830 bytes leftover after parsing attributes in process `syz.2.660'. [ 168.094287][ T29] usb 3-1: 0:2 : does not exist [ 168.108609][ T29] usb 3-1: unit 5: unexpected type 0x09 [ 168.121184][ T9] usb 2-1: USB disconnect, device number 24 [ 168.202248][ T29] usb 3-1: USB disconnect, device number 25 [ 168.268966][ T6069] udevd[6069]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 168.372045][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.381799][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.421191][ T7719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.431687][ T29] usb 4-1: USB disconnect, device number 16 [ 168.444347][ T7719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.576003][ T7731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.608852][ T7731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.810637][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.667'. [ 168.918463][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.667'. [ 168.952307][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 169.267040][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.675'. [ 169.726336][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 169.813415][ T7766] loop2: detected capacity change from 0 to 7 [ 169.826910][ T7766] Dev loop2: unable to read RDB block 7 [ 169.862565][ T7766] loop2: unable to read partition table [ 169.870592][ T7766] loop2: partition table beyond EOD, truncated [ 169.884460][ T7766] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 169.923163][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 169.948237][ T24] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 169.985799][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.020660][ T24] usb 2-1: Product: syz [ 170.046332][ T24] usb 2-1: Manufacturer: syz [ 170.072284][ T24] usb 2-1: SerialNumber: syz [ 170.309738][ T24] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 170.341381][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 170.362941][ T1222] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 170.374371][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 170.397148][ T24] usb 2-1: media controller created [ 170.438067][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.543022][ T1222] usb 3-1: Using ep0 maxpacket: 32 [ 170.551588][ T1222] usb 3-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 170.564832][ T7758] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21 [ 170.578774][ T1222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.588521][ T7758] netlink: 56 bytes leftover after parsing attributes in process `syz.1.671'. [ 170.606833][ T7772] netlink: 76 bytes leftover after parsing attributes in process `syz.4.681'. [ 170.627080][ T1222] usb 3-1: config 0 descriptor?? [ 170.655844][ T1222] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 170.684297][ T1222] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 170.708789][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 170.709333][ T1222] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 170.761370][ T1222] usb 3-1: media controller created [ 170.814341][ T24] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 170.847792][ T24] usb 2-1: USB disconnect, device number 25 [ 170.862315][ T1222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.962090][ T7774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.982333][ T1222] usb 3-1: selecting invalid altsetting 1 [ 170.995880][ T7774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.013819][ T1222] set interface failed [ 171.014137][ T1222] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 171.046690][ T1222] error writing reg: 0xff, val: 0x00 [ 171.175115][ T1222] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 171.395107][ T1222] usb 3-1: USB disconnect, device number 26 [ 171.402911][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 171.572904][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 171.607776][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.642348][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 171.674463][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.692910][ T24] usb 5-1: config 0 descriptor?? [ 171.706761][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 171.765328][ T7793] loop5: detected capacity change from 0 to 7 [ 171.774709][ T7793] Dev loop5: unable to read RDB block 7 [ 171.781840][ T7793] loop5: AHDI p1 p2 [ 171.786604][ T7793] loop5: partition table partially beyond EOD, truncated [ 171.795646][ T7793] loop5: p1 size 150995456 extends beyond EOD, truncated [ 171.872504][ T7795] __nla_validate_parse: 2 callbacks suppressed [ 171.872523][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 171.970343][ T6069] udevd[6069]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 172.369573][ T7810] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 172.568980][ T7814] xt_TCPMSS: Only works on TCP SYN packets [ 172.816587][ T7819] syz_tun: entered allmulticast mode [ 172.916953][ T7819] dvmrp8: entered allmulticast mode [ 173.271143][ T7822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.287109][ T7822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.300040][ T7822] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21 [ 173.318140][ T24] gspca_vc032x: reg_w err -71 [ 173.329674][ T7822] netlink: 56 bytes leftover after parsing attributes in process `syz.0.697'. [ 173.341165][ T24] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 173.367719][ T24] usb 5-1: USB disconnect, device number 27 [ 173.376666][ T7811] syz_tun: left allmulticast mode [ 173.609167][ T7827] syzkaller1: entered promiscuous mode [ 173.633476][ T7827] syzkaller1: entered allmulticast mode [ 173.822008][ T7835] No such timeout policy "syz0" [ 174.015900][ T7841] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 174.053024][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 174.186553][ T7845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.208069][ T7845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.223353][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 174.231476][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 174.242704][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.255401][ T10] usb 4-1: config 0 descriptor?? [ 174.272711][ T10] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 174.296023][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 174.318614][ T10] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 174.339268][ T10] usb 4-1: media controller created [ 174.381563][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.437685][ T10] usb 4-1: selecting invalid altsetting 1 [ 174.445644][ T7845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.467704][ T10] set interface failed [ 174.467733][ T10] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 174.485244][ T7845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.498312][ T10] error writing reg: 0xff, val: 0x00 [ 174.570072][ T7834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.590671][ T10] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 174.605012][ T7834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.832995][ T29] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 174.915626][ T5711] usb 4-1: USB disconnect, device number 17 [ 175.015161][ T29] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 175.025911][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.048104][ T29] usb 5-1: config 0 descriptor?? [ 175.070200][ T29] cp210x 5-1:0.0: cp210x converter detected [ 175.428016][ T7867] bond1: option mode: unable to set because the bond device has slaves [ 175.441629][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 175.453157][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 175.469455][ T29] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 175.696629][ T29] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 175.719238][ T29] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 175.743039][ T29] usb 5-1: cp210x converter now attached to ttyUSB0 [ 175.787350][ T7875] netlink: 'syz.2.717': attribute type 4 has an invalid length. [ 175.836933][ T7877] netlink: 'syz.2.717': attribute type 4 has an invalid length. [ 176.063838][ T10] usb 5-1: USB disconnect, device number 28 [ 176.102485][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 176.115565][ T7883] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 176.143622][ T10] cp210x 5-1:0.0: device disconnected [ 176.379230][ T7900] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 176.393011][ T29] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 176.470501][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.480099][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.523703][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'. [ 176.533929][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'. [ 176.542553][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.555054][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.572982][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 176.583808][ T29] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 176.600000][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.618465][ T29] usb 4-1: Product: syz [ 176.623644][ T29] usb 4-1: Manufacturer: syz [ 176.628299][ T29] usb 4-1: SerialNumber: syz [ 176.774885][ T7912] netlink: 68 bytes leftover after parsing attributes in process `syz.4.729'. [ 176.852726][ T29] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 176.874124][ T29] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 176.895609][ T29] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 176.913071][ T29] usb 4-1: media controller created [ 176.951514][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.098284][ T5689] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 177.107571][ T7886] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21 [ 177.122079][ T5689] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 177.130896][ T7886] netlink: 56 bytes leftover after parsing attributes in process `syz.3.716'. [ 177.143379][ T5689] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 177.213309][ T29] zl10353_read_register: readreg error (reg=127, ret==-110) [ 177.332622][ T29] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 177.363799][ T29] usb 4-1: USB disconnect, device number 18 [ 177.449889][ T7924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.733'. [ 177.485175][ T7924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.733'. [ 177.488501][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.734'. [ 177.647250][ T7930] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 177.653964][ T7934] loop2: detected capacity change from 0 to 7 [ 177.665393][ T7934] loop2: [ 177.670453][ T7934] loop2: partition table partially beyond EOD, truncated [ 177.757700][ T7936] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.073413][ T7944] SET target dimension over the limit! [ 178.162141][ T7947] netlink: 'syz.4.742': attribute type 11 has an invalid length. [ 178.453038][ T29] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 178.461306][ T5711] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 178.623064][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 178.628251][ T5711] usb 5-1: Using ep0 maxpacket: 8 [ 178.635720][ T29] usb 2-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 178.645587][ T5711] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 178.656727][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.665402][ T5711] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 178.679061][ T29] usb 2-1: config 0 descriptor?? [ 178.685006][ T5711] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 178.699846][ T29] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 178.709014][ T5711] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.724936][ T29] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 178.736601][ T29] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 178.745172][ T29] usb 2-1: media controller created [ 178.757767][ T5711] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 178.767388][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.786156][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.794854][ T5711] usb 5-1: Product: syz [ 178.800313][ T5711] usb 5-1: Manufacturer: syz [ 178.806983][ T5711] usb 5-1: SerialNumber: syz [ 178.838581][ T7954] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 178.852371][ T29] usb 2-1: selecting invalid altsetting 1 [ 178.859575][ T5711] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 178.869124][ T29] set interface failed [ 178.869150][ T29] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 178.880542][ T5711] usbtest 5-1:1.0: Linux user mode ISO test driver [ 178.888398][ T29] error writing reg: 0xff, val: 0x00 [ 178.888646][ T5711] usbtest 5-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 178.991257][ T7955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.004421][ T7955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.036082][ T29] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 179.191454][ T5689] usb 5-1: USB disconnect, device number 29 [ 179.346198][ T7968] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 179.415406][ T9] usb 2-1: USB disconnect, device number 26 [ 179.888010][ T7986] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 180.083344][ T29] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 180.192927][ T24] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 180.232895][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 180.239411][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.250887][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.260953][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.274690][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 180.284787][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.296452][ T29] usb 5-1: config 0 descriptor?? [ 180.353213][ T5712] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 180.362380][ T24] usb 4-1: config 84 has an invalid interface number: 116 but max is 0 [ 180.370998][ T24] usb 4-1: config 84 has no interface number 0 [ 180.377279][ T24] usb 4-1: config 84 interface 116 has no altsetting 0 [ 180.387301][ T24] usb 4-1: New USB device found, idVendor=18ec, idProduct=3290, bcdDevice= a.66 [ 180.396450][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.404592][ T24] usb 4-1: Product: syz [ 180.409007][ T24] usb 4-1: Manufacturer: syz [ 180.413678][ T24] usb 4-1: SerialNumber: syz [ 180.532908][ T5712] usb 3-1: Using ep0 maxpacket: 16 [ 180.542331][ T5712] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 180.551629][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.559661][ T5712] usb 3-1: Product: syz [ 180.564129][ T5712] usb 3-1: Manufacturer: syz [ 180.568754][ T5712] usb 3-1: SerialNumber: syz [ 180.635551][ T24] uvcvideo 4-1:84.116: Found UVC 0.0b device syz (18ec:3290) [ 180.643422][ T24] uvcvideo 4-1:84.116: No valid video chain found. [ 180.653264][ T24] usb 4-1: USB disconnect, device number 19 [ 180.714836][ T29] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 180.722136][ T29] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 180.731276][ T29] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 180.746234][ T29] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 180.760453][ T29] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 180.767870][ T29] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 180.775152][ T29] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 180.782462][ T29] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 180.794119][ T5712] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 180.807717][ T29] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000E/input/input12 [ 180.826613][ T5712] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 180.839043][ T5712] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 180.848383][ T5712] usb 3-1: media controller created [ 180.862134][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.904487][ T29] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 180.937788][ T29] usb 5-1: USB disconnect, device number 30 [ 181.047173][ T7994] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21 [ 181.056678][ T7995] fido_id[7995]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 181.073821][ T7994] netlink: 56 bytes leftover after parsing attributes in process `syz.2.753'. [ 181.093684][ T5712] zl10353_read_register: readreg error (reg=127, ret==-110) [ 181.199386][ T5712] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 181.232022][ T5712] usb 3-1: USB disconnect, device number 27 [ 181.243301][ T8003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.272305][ T8003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.377134][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 182.322928][ T5689] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 182.482933][ T5689] usb 5-1: Using ep0 maxpacket: 32 [ 182.501580][ T5689] usb 5-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 182.527861][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.549662][ T5689] usb 5-1: config 0 descriptor?? [ 182.577344][ T5689] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 182.610833][ T5689] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 182.639892][ T5689] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 182.650462][ T5689] usb 5-1: media controller created [ 182.672585][ T5689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.709829][ T5689] usb 5-1: selecting invalid altsetting 1 [ 182.722801][ T5689] set interface failed [ 182.725573][ T5689] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 182.738749][ T5689] error writing reg: 0xff, val: 0x00 [ 182.810390][ T5689] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 182.868664][ T8021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.899640][ T8021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.269052][ T5689] usb 5-1: USB disconnect, device number 31 [ 183.453066][ T5712] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 183.623193][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 183.633610][ T5712] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 183.649988][ T5712] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 183.666282][ T5712] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 183.688455][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 183.698698][ T5712] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 183.716015][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 183.726587][ T5712] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 183.737025][ T5712] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 183.751737][ T5712] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 183.762939][ T5712] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 183.771422][ T5712] usb 2-1: Manufacturer: syz [ 183.778844][ T5712] usb 2-1: config 0 descriptor?? [ 183.933031][ T5689] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 184.015523][ T5712] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 184.058162][ T5712] usb 2-1: USB disconnect, device number 27 [ 184.090230][ T5712] usblp0: removed [ 184.113350][ T5689] usb 4-1: Using ep0 maxpacket: 16 [ 184.133829][ T5689] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 184.157431][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.173300][ T5689] usb 4-1: Product: syz [ 184.180525][ T5689] usb 4-1: Manufacturer: syz [ 184.191758][ T5689] usb 4-1: SerialNumber: syz [ 184.405990][ T8059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.423486][ T5689] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 184.450185][ T5689] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 184.467927][ T5689] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 184.480928][ T5689] usb 4-1: media controller created [ 184.508675][ T5689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.533004][ T5712] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 184.560325][ T8063] syzkaller0: entered promiscuous mode [ 184.566326][ T8063] syzkaller0: entered allmulticast mode [ 184.593153][ T1222] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 184.696425][ T5712] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 184.705088][ T5712] usb 2-1: config 5 has no interface number 0 [ 184.711467][ T5712] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.723894][ T5712] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.733374][ T5689] zl10353_read_register: readreg error (reg=127, ret==-110) [ 184.735980][ T5712] usb 2-1: config 5 interface 123 has no altsetting 0 [ 184.753136][ T1222] usb 3-1: Using ep0 maxpacket: 16 [ 184.770157][ T1222] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 184.770313][ T5712] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 184.806681][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.817862][ T1222] usb 3-1: Product: syz [ 184.830697][ T1222] usb 3-1: Manufacturer: syz [ 184.837507][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.838307][ T1222] usb 3-1: SerialNumber: syz [ 184.851915][ T5689] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 184.870846][ T5712] usb 2-1: Product: syz [ 184.876982][ T5712] usb 2-1: Manufacturer: syz [ 184.881805][ T5712] usb 2-1: SerialNumber: syz [ 184.888211][ T5689] usb 4-1: USB disconnect, device number 20 [ 185.115423][ T1222] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 185.129384][ T5712] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 185.150488][ T1222] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 185.174575][ T1222] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 185.189978][ T5712] usb 2-1: USB disconnect, device number 28 [ 185.215624][ T1222] usb 3-1: media controller created [ 185.271983][ T1222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.379330][ T8051] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21 [ 185.396022][ T8051] netlink: 56 bytes leftover after parsing attributes in process `syz.2.779'. [ 185.513302][ T1222] zl10353_read_register: readreg error (reg=127, ret==-110) [ 185.594637][ T1222] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 185.637013][ T1222] usb 3-1: USB disconnect, device number 28 [ 186.004241][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 186.162916][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 186.188629][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.241398][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.269695][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 186.300506][ T10] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 186.311227][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.327797][ T10] usb 2-1: Product: syz [ 186.341596][ T10] usb 2-1: Manufacturer: syz [ 186.347587][ T10] usb 2-1: SerialNumber: syz [ 186.366091][ T10] usb 2-1: config 0 descriptor?? [ 186.373780][ T8072] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 186.397890][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 186.465356][ C0] kbtab 2-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 186.494006][ T1222] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 186.594611][ T10] usb 2-1: USB disconnect, device number 29 [ 186.663665][ T1222] usb 3-1: Using ep0 maxpacket: 32 [ 186.671851][ T1222] usb 3-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 186.684719][ T1222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.701724][ T1222] usb 3-1: config 0 descriptor?? [ 186.717973][ T1222] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 186.728511][ T1222] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 186.739773][ T1222] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 186.753447][ T1222] usb 3-1: media controller created [ 186.781811][ T1222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.813708][ T1222] usb 3-1: selecting invalid altsetting 1 [ 186.821988][ T1222] set interface failed [ 186.822014][ T1222] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 186.842795][ T1222] error writing reg: 0xff, val: 0x00 [ 186.928714][ T1222] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 187.059169][ T8087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.083356][ T8087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.298873][ T8101] netlink: 'syz.3.795': attribute type 1 has an invalid length. [ 188.337147][ T5711] usb 3-1: USB disconnect, device number 29 [ 188.394189][ T8106] netlink: 48 bytes leftover after parsing attributes in process `syz.4.797'. [ 188.405012][ T8108] netlink: 91 bytes leftover after parsing attributes in process `syz.4.797'. [ 188.408423][ T8111] netlink: 91 bytes leftover after parsing attributes in process `syz.4.797'. [ 188.430376][ T8113] SET target dimension over the limit! [ 188.707698][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 188.733101][ T5689] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 188.883344][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 188.905833][ T5689] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.935881][ T5689] usb 5-1: not running at top speed; connect to a high speed hub [ 188.951612][ T5689] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.982565][ T5689] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.017500][ T5689] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 189.032242][ T5689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.051486][ T5689] usb 5-1: Product: syz [ 189.054110][ T8128] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 189.064049][ T5689] usb 5-1: Manufacturer: syz [ 189.068972][ T5689] usb 5-1: SerialNumber: syz [ 189.075221][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.100028][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 189.133963][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.171807][ T10] usb 2-1: config 0 descriptor?? [ 189.211443][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 189.348316][ T8137] loop2: detected capacity change from 0 to 7 [ 189.385773][ T8137] Dev loop2: unable to read RDB block 7 [ 189.410815][ T8137] loop2: unable to read partition table [ 189.429150][ T8137] loop2: partition table beyond EOD, truncated [ 189.455958][ T8137] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 189.593779][ T5689] usb 5-1: USB disconnect, device number 32 [ 189.615362][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 189.646373][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 189.672334][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 189.700465][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 189.723078][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 189.999868][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 190.030171][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 190.167019][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 190.199828][ T8151] loop5: detected capacity change from 0 to 7 [ 190.208691][ T8151] Dev loop5: unable to read RDB block 7 [ 190.215082][ T8151] loop5: AHDI p1 p2 [ 190.219205][ T8151] loop5: partition table partially beyond EOD, truncated [ 190.227415][ T8151] loop5: p1 size 150995456 extends beyond EOD, truncated [ 190.262671][ T8139] netlink: 76 bytes leftover after parsing attributes in process `syz.3.809'. [ 190.305523][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 190.332138][ T6069] udevd[6069]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 190.381976][ T30] audit: type=1804 audit(1779648759.358:37): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.815" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=20026 res=1 errno=0 [ 190.516929][ T8158] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 190.545890][ T8160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.557645][ T8160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.592779][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 190.596201][ T8160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.613540][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 190.634736][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 190.637125][ T8160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.646168][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 190.679824][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 190.700181][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 190.723991][ T8162] xt_TCPMSS: Only works on TCP SYN packets [ 190.730903][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 190.739881][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 190.770471][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 190.818179][ T10] pwc: Registered as video103. [ 190.869014][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 190.884123][ T8164] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 190.932510][ T10] usb 2-1: USB disconnect, device number 30 [ 191.088876][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 191.089602][ T4944] Bluetooth: hci0: command 0x0406 tx timeout [ 191.095131][ T5634] Bluetooth: hci3: command 0x0406 tx timeout [ 191.108469][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 191.108805][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 191.117228][ T5689] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 191.313594][ T5689] usb 3-1: Using ep0 maxpacket: 16 [ 191.331925][ T5689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 191.345605][ T5689] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 191.356681][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.364842][ T5689] usb 3-1: Product: syz [ 191.369881][ T5689] usb 3-1: Manufacturer: syz [ 191.374718][ T5689] usb 3-1: SerialNumber: syz [ 191.389016][ T5689] usb 3-1: config 0 descriptor?? [ 191.405642][ T5689] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 191.418765][ T5689] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 191.724869][ T5689] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 191.819767][ T5689] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 191.852391][ T5689] em28xx 3-1:0.0: board has no eeprom [ 191.933622][ T5689] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 191.966868][ T5689] em28xx 3-1:0.0: dvb set to bulk mode. [ 191.989262][ T10] em28xx 3-1:0.0: Binding DVB extension [ 192.027370][ T5689] usb 3-1: USB disconnect, device number 30 [ 192.065514][ T5689] em28xx 3-1:0.0: Disconnecting em28xx [ 192.146513][ T8202] netlink: 'syz.0.831': attribute type 4 has an invalid length. [ 192.158417][ T8199] loop6: detected capacity change from 0 to 2640 [ 192.176782][ T10] em28xx 3-1:0.0: Registering input extension [ 192.198671][ T8205] netlink: 'syz.0.831': attribute type 4 has an invalid length. [ 192.200163][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 192.237799][ T5689] em28xx 3-1:0.0: Closing input extension [ 192.314768][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 192.395416][ T5689] em28xx 3-1:0.0: Freeing device [ 192.538062][ T8203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.577749][ T8203] bond7: (slave bond0): making interface the new active one [ 192.608076][ T8203] bond7: (slave bond0): Enslaving as an active interface with an up link [ 192.950337][ T8216] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 193.011019][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'. [ 193.021363][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'. [ 193.893884][ T8222] netlink: 68 bytes leftover after parsing attributes in process `syz.4.835'. [ 194.240883][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.253024][ T5712] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 194.257746][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.400400][ T8230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.839'. [ 194.433093][ T5712] usb 3-1: Using ep0 maxpacket: 32 [ 194.450580][ T8230] netlink: 40 bytes leftover after parsing attributes in process `syz.4.839'. [ 194.467546][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'. [ 194.481042][ T5712] usb 3-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 194.493367][ T8233] loop2: detected capacity change from 0 to 7 [ 194.509979][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.521602][ T8233] loop2: [ 194.538795][ T8233] loop2: partition table partially beyond EOD, truncated [ 194.572111][ T5712] usb 3-1: config 0 descriptor?? [ 194.632979][ T5712] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 194.738072][ T5712] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 194.812319][ T5712] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 194.881778][ T5712] usb 3-1: media controller created [ 195.038937][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.057694][ T8224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.135715][ T8224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.109556][ T5712] usb 3-1: selecting invalid altsetting 1 [ 197.240920][ T5712] set interface failed [ 197.240948][ T5712] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 197.252153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 197.287117][ T5712] error writing reg: 0xff, val: 0x00 [ 197.480525][ T8249] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 197.513442][ T5712] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 197.574479][ T8246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.783544][ T5712] usb 3-1: USB disconnect, device number 31 [ 197.853219][ T8246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.151090][ T8241] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21 [ 198.265883][ T8246] netlink: 56 bytes leftover after parsing attributes in process `syz.0.844'. [ 199.212964][ T29] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 199.419644][ T8264] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 199.701524][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 199.934045][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 200.106204][ T29] usb 4-1: config 3 has an invalid interface number: 20 but max is 0 [ 200.269628][ T29] usb 4-1: config 3 has no interface number 0 [ 200.379592][ T29] usb 4-1: config 3 interface 20 altsetting 67 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 200.607201][ T29] usb 4-1: config 3 interface 20 has no altsetting 0 [ 200.646431][ T29] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=b6.be [ 200.878472][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.056857][ T29] usb 4-1: Product: syz [ 201.087796][ T29] usb 4-1: Manufacturer: а [ 201.119325][ T29] usb 4-1: SerialNumber: syz [ 201.730172][ T29] ljca 4-1:3.20: bulk endpoints not found [ 201.786812][ T29] usb 4-1: USB disconnect, device number 21 [ 202.028967][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.853'. [ 202.103014][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.853'. [ 202.126277][ T8276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.854'. [ 202.153727][ T8277] x_tables: duplicate underflow at hook 1 [ 202.215909][ T8276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.854'. [ 202.888497][ T8280] loop5: detected capacity change from 0 to 7 [ 202.976217][ T8280] Dev loop5: unable to read RDB block 7 [ 203.060234][ T8280] loop5: AHDI p1 p2 [ 203.170558][ T8280] loop5: partition table partially beyond EOD, truncated [ 203.190675][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 203.234363][ T8280] loop5: p1 size 150995456 extends beyond EOD, truncated [ 204.135966][ T8288] xt_TCPMSS: Only works on TCP SYN packets [ 204.250724][ T6069] udevd[6069]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 204.723049][ T29] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 204.952975][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 205.025183][ T29] usb 3-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 208.321584][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.804568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 208.957632][ T29] usb 3-1: config 0 descriptor?? [ 209.078503][ T29] usb 3-1: can't set config #0, error -71 [ 209.145002][ T29] usb 3-1: USB disconnect, device number 32 [ 219.050469][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'. [ 219.069323][ T5710] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 220.335099][ T8314] netlink: 'syz.2.870': attribute type 1 has an invalid length. [ 220.818663][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.892408][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.946059][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.999555][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 221.008513][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.143039][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 221.323851][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 221.333867][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 221.350505][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.373882][ T24] usb 4-1: config 0 descriptor?? [ 221.397208][ T24] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 221.440382][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 221.500661][ T24] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 221.559132][ T24] usb 4-1: media controller created [ 221.735816][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.777597][ T8323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.840163][ T8323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.887145][ T24] usb 4-1: selecting invalid altsetting 1 [ 221.923615][ T24] set interface failed [ 221.923642][ T24] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 221.992092][ T24] error writing reg: 0xff, val: 0x00 [ 222.234333][ T24] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 223.074578][ T5631] Bluetooth: hci5: command tx timeout [ 225.152900][ T5631] Bluetooth: hci5: command tx timeout [ 226.204508][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 227.066414][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 227.143454][ T24] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 227.170417][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.203490][ T24] usb 3-1: config 0 has no interface number 0 [ 227.228487][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 227.238015][ T5631] Bluetooth: hci5: command tx timeout [ 227.254978][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.263404][ T24] usb 3-1: Product: syz [ 227.276341][ T24] usb 3-1: Manufacturer: syz [ 227.280978][ T24] usb 3-1: SerialNumber: syz [ 227.289796][ T24] usb 3-1: config 0 descriptor?? [ 227.318243][ T24] uvcvideo 3-1:0.105: probe with driver uvcvideo failed with error -22 [ 227.364719][ T113] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.374411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 227.688954][ T24] usb 3-1: USB disconnect, device number 33 [ 227.762136][ T5712] usb 4-1: USB disconnect, device number 23 [ 228.381904][ T113] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.317342][ T5631] Bluetooth: hci5: command tx timeout [ 229.488930][ T8367] loop5: detected capacity change from 0 to 7 [ 229.500501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 229.508943][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.532186][ T8367] Dev loop5: unable to read RDB block 7 [ 229.544819][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.570894][ T8367] loop5: AHDI p1 p2 [ 229.587508][ T8367] loop5: partition table partially beyond EOD, truncated [ 229.595981][ T8325] bridge_slave_0: entered allmulticast mode [ 229.647748][ T8367] loop5: p1 size 150995456 extends beyond EOD, truncated [ 229.655277][ T8325] bridge_slave_0: entered promiscuous mode [ 230.056840][ T113] team0: Port device netdevsim1 removed [ 230.069978][ T8296] udevd[8296]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 230.205734][ T113] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.399551][ T8325] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.515864][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.602900][ T5712] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 230.681770][ T8325] bridge_slave_1: entered allmulticast mode [ 230.784859][ T8325] bridge_slave_1: entered promiscuous mode [ 230.883015][ T5712] usb 3-1: Using ep0 maxpacket: 16 [ 230.962915][ T5710] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 231.085944][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.161441][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.198042][ T5712] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 231.232104][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.298560][ T5712] usb 3-1: config 0 descriptor?? [ 231.318968][ T113] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.337899][ T5710] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 231.427491][ T5710] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.479947][ T5710] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.717253][ T8325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.748201][ T5710] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.800335][ T8325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.909813][ T5710] usb 5-1: unable to read config index 1 descriptor/start: -71 [ 231.955675][ T5712] bigben 0003:146B:0902.000F: unexpected rdesc, please submit for review [ 231.987728][ T5710] usb 5-1: can't read configurations, error -71 [ 232.028264][ T5712] hid_parser_main: 2 callbacks suppressed [ 232.028287][ T5712] bigben 0003:146B:0902.000F: unknown main item tag 0x0 [ 232.202475][ T5712] bigben 0003:146B:0902.000F: unknown main item tag 0x0 [ 232.261407][ T5712] bigben 0003:146B:0902.000F: unknown main item tag 0x0 [ 232.329952][ T8325] team0: Port device team_slave_0 added [ 232.346010][ T5712] bigben 0003:146B:0902.000F: unknown main item tag 0x0 [ 232.395066][ T5712] bigben 0003:146B:0902.000F: unknown main item tag 0x0 [ 232.411097][ T8325] team0: Port device team_slave_1 added [ 232.454581][ T5712] bigben 0003:146B:0902.000F: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.2-1/input0 [ 232.480272][ T8386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.497929][ T8387] Cannot find del_set index 0 as target [ 232.540819][ T8386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.551943][ T5712] bigben 0003:146B:0902.000F: missing HID_OUTPUT_REPORT 0 [ 232.605517][ T5712] bigben 0003:146B:0902.000F: no output report found [ 232.740045][ T5712] usb 3-1: USB disconnect, device number 34 [ 232.896615][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.913516][ T8390] fido_id[8390]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 232.943864][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.978810][ T8386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.009656][ T8386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.067166][ T8325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.120449][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.137562][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.353056][ T5710] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 234.628816][ T8325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.982963][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 234.994433][ T5710] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 235.081857][ T5710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.115078][ T5710] usb 5-1: config 0 has no interface number 0 [ 235.230742][ T5710] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 235.387379][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.437713][ T5710] usb 5-1: Product: syz [ 235.452310][ T5710] usb 5-1: Manufacturer: syz [ 235.464729][ T5710] usb 5-1: SerialNumber: syz [ 235.523265][ T5710] usb 5-1: config 0 descriptor?? [ 235.569895][ T5710] uvcvideo 5-1:0.105: probe with driver uvcvideo failed with error -22 [ 235.823255][ T8408] syzkaller0: entered promiscuous mode [ 235.851873][ T8408] syzkaller0: entered allmulticast mode [ 236.055636][ T5710] usb 5-1: USB disconnect, device number 35 [ 236.233325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 241.349950][ T8428] loop2: detected capacity change from 0 to 7 [ 241.490481][ T8428] Dev loop2: unable to read RDB block 7 [ 241.742450][ T8428] loop2: unable to read partition table [ 241.807183][ T8428] loop2: partition table beyond EOD, truncated [ 241.831152][ T8428] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 243.222929][ T29] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 243.472038][ T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 243.503927][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.901'. [ 243.524377][ T29] usb 5-1: config 0 has no interface number 0 [ 243.604766][ T29] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.738661][ T29] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.851773][ T29] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 243.886741][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.963854][ T29] usb 5-1: config 0 descriptor?? [ 244.632971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 244.646484][ T29] prodikeys 0003:041E:2801.0010: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 244.701251][ T29] hid_prodikeys: hid-prodikeys: failed to find output report [ 244.701251][ T29] [ 244.841136][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 245.145677][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 245.238442][ T24] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 245.376146][ T24] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 245.493328][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 245.536338][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.596889][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 245.612509][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 245.641907][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 245.652340][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 245.667328][ T24] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 245.676927][ T24] usb 4-1: New USB device strings: Mfr=250, Product=0, SerialNumber=0 [ 245.686478][ T24] usb 4-1: Manufacturer: syz [ 245.733065][ T24] usb 4-1: config 0 descriptor?? [ 246.066028][ T24] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 246.106553][ T24] usb 4-1: USB disconnect, device number 24 [ 246.118815][ T24] usblp0: removed [ 246.621438][ T24] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 246.778514][ T24] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 246.794985][ T24] usb 4-1: config 5 has no interface number 0 [ 246.801322][ T24] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 246.818900][ T24] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 246.829268][ T24] usb 4-1: config 5 interface 123 has no altsetting 0 [ 246.859739][ T24] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 246.876682][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.891579][ T24] usb 4-1: Product: syz [ 246.902547][ T24] usb 4-1: Manufacturer: syz [ 246.915053][ T24] usb 4-1: SerialNumber: syz [ 247.164424][ T24] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 247.212680][ T24] usb 4-1: USB disconnect, device number 25 [ 248.506915][ T5710] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 248.683344][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 248.701157][ T5710] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 248.713723][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 248.720407][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.744712][ T8449] wg1: entered promiscuous mode [ 248.771345][ T8449] wg1: entered allmulticast mode [ 248.778811][ T5710] usb 4-1: Product: syz [ 248.791263][ T5710] usb 4-1: Manufacturer: syz [ 248.911799][ T5710] usb 4-1: SerialNumber: syz [ 249.312708][ T5710] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 249.346781][ T5710] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 249.380894][ T5711] usb 5-1: USB disconnect, device number 36 [ 249.429787][ T5710] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 249.503455][ T5710] usb 4-1: media controller created [ 249.535759][ T8459] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21 [ 249.563166][ T8325] hsr_slave_0: entered promiscuous mode [ 249.611192][ T8325] hsr_slave_1: entered promiscuous mode [ 249.624971][ T8459] netlink: 56 bytes leftover after parsing attributes in process `syz.3.904'. [ 249.687395][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.703164][ T8325] debugfs: 'hsr0' already exists in 'hsr' [ 249.733870][ T8325] Cannot create hsr debugfs directory [ 249.850758][ T5710] zl10353_read_register: readreg error (reg=127, ret==-71) [ 249.870313][ T8470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.922304][ T8470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.222273][ T5710] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 250.311707][ T113] bridge_slave_1: left allmulticast mode [ 250.347430][ T5710] usb 4-1: USB disconnect, device number 26 [ 250.361808][ T113] bridge_slave_1: left promiscuous mode [ 250.395521][ T113] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.538677][ T113] bridge_slave_0: left allmulticast mode [ 250.591942][ T113] bridge_slave_0: left promiscuous mode [ 250.625757][ T113] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.824720][ T5711] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 251.063507][ T5711] usb 5-1: Using ep0 maxpacket: 32 [ 251.097551][ T8482] netlink: 'syz.2.909': attribute type 4 has an invalid length. [ 251.145940][ T5711] usb 5-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 251.176789][ T8489] netlink: 'syz.2.909': attribute type 4 has an invalid length. [ 251.201773][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.246184][ T5711] usb 5-1: config 0 descriptor?? [ 251.299016][ T5711] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 251.362622][ T5711] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 251.470550][ T5711] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 251.538275][ T5711] usb 5-1: media controller created [ 251.641294][ T5711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 251.809311][ T8500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.831233][ T5711] usb 5-1: selecting invalid altsetting 1 [ 251.870927][ T5711] set interface failed [ 251.870955][ T5711] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 251.911350][ T8500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.919620][ T5711] error writing reg: 0xff, val: 0x00 [ 252.043722][ T5711] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 252.373479][ T5711] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 252.517103][ T113] bond0 (unregistering): Released all slaves [ 252.538436][ T113] bond1 (unregistering): Released all slaves [ 252.544712][ T5711] usb 4-1: Using ep0 maxpacket: 32 [ 252.571446][ T5711] usb 4-1: config 6 has an invalid interface number: 132 but max is 0 [ 252.590860][ T5711] usb 4-1: config 6 has no interface number 0 [ 252.599762][ T5711] usb 4-1: config 6 interface 132 altsetting 6 endpoint 0xA has an invalid bInterval 248, changing to 7 [ 252.619858][ T5711] usb 4-1: config 6 interface 132 has no altsetting 0 [ 252.657176][ T5711] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=d3.7e [ 252.682551][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.711514][ T5711] usb 4-1: Product: syz [ 252.717413][ T5711] usb 4-1: Manufacturer: syz [ 252.731458][ T5711] usb 4-1: SerialNumber: syz [ 252.985619][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 253.266180][ T5710] usb 5-1: USB disconnect, device number 37 [ 254.374461][ T5710] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 254.650278][ T5710] usb 3-1: Using ep0 maxpacket: 16 [ 254.959636][ T5710] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 254.984820][ T5711] usbtest 4-1:6.132: couldn't get endpoints, -22 [ 255.032834][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.044637][ T5711] usbtest 4-1:6.132: probe with driver usbtest failed with error -22 [ 255.075161][ T5710] usb 3-1: Product: syz [ 255.105582][ T5711] usb 4-1: USB disconnect, device number 27 [ 255.111538][ T5710] usb 3-1: Manufacturer: syz [ 255.142088][ T5710] usb 3-1: SerialNumber: syz [ 255.330534][ T113] hsr_slave_0: left promiscuous mode [ 255.439296][ T5710] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 255.471583][ T5710] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 255.559047][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.565497][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.621853][ T5710] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 255.673288][ T113] hsr_slave_1: left promiscuous mode [ 255.692009][ T8514] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21 [ 255.707363][ T5710] usb 3-1: media controller created [ 255.778112][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.829744][ T113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.939581][ T113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.008935][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.106703][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.329769][ T8522] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21 [ 256.501690][ T113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.536828][ T5710] zl10353_read_register: readreg error (reg=127, ret==-71) [ 256.556214][ T113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.804914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 256.844088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 256.925217][ T113] veth1_macvtap: left promiscuous mode [ 256.952608][ T113] veth0_macvtap: left promiscuous mode [ 257.098713][ T113] veth1_vlan: left promiscuous mode [ 257.126413][ T113] veth0_vlan: left promiscuous mode [ 257.977468][ T5710] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 258.188002][ T5710] usb 3-1: USB disconnect, device number 35 [ 258.871727][ T8545] loop5: detected capacity change from 0 to 7 [ 258.911797][ T8545] Dev loop5: unable to read RDB block 7 [ 258.942398][ T8545] loop5: AHDI p1 p2 [ 259.042269][ T8545] loop5: partition table partially beyond EOD, truncated [ 259.097510][ T8545] loop5: p1 size 150995456 extends beyond EOD, truncated [ 259.928210][ T8479] udevd[8479]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 260.833397][ T113] team0 (unregistering): Port device team_slave_1 removed [ 260.899711][ T8557] No such timeout policy "syz0" [ 260.926658][ T113] team0 (unregistering): Port device team_slave_0 removed [ 261.624059][ T8563] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20001 [ 261.756242][ T8565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.792273][ T8565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.211330][ T8551] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21 [ 262.348938][ T8551] netlink: 56 bytes leftover after parsing attributes in process `syz.0.920'. [ 262.652524][ T8520] wg1: left promiscuous mode [ 262.688714][ T8520] wg1: left allmulticast mode [ 263.033026][ T5711] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 263.203759][ T5711] usb 4-1: Using ep0 maxpacket: 8 [ 263.225587][ T5711] usb 4-1: unable to get BOS descriptor or descriptor too short [ 263.280446][ T5711] usb 4-1: config 86 has an invalid interface number: 62 but max is 0 [ 263.297447][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 263.334860][ T5711] usb 4-1: config 86 has no interface number 0 [ 263.534975][ T5711] usb 4-1: config 86 interface 62 has no altsetting 0 [ 264.135421][ T5711] usb 4-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice= 7.1f [ 264.218514][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.603829][ T5711] usb 4-1: Product: syz [ 264.713071][ T5711] usb 4-1: Manufacturer: syz [ 264.854473][ T5711] usb 4-1: SerialNumber: syz [ 265.850375][ T8325] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 265.954629][ T8325] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.998753][ T8325] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 266.132939][ T5710] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 266.452802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 266.552806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 267.386505][ T5711] quatech2 4-1:86.62: Quatech 2nd gen USB to Serial Driver converter detected [ 267.426959][ T8325] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.444629][ T5711] usb 4-1: qt2_attach - failed to power on unit: -71 [ 268.264326][ T5710] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.288132][ T5711] quatech2 4-1:86.62: probe with driver quatech2 failed with error -71 [ 268.296554][ T8325] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.356121][ T5710] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.392563][ T8325] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 269.423167][ T5711] usb 4-1: USB disconnect, device number 28 [ 269.456046][ T8325] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.464280][ T113] IPVS: stop unused estimator thread 0... [ 269.545962][ T8325] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.724623][ T5710] usb 5-1: string descriptor 0 read error: -71 [ 269.810567][ T5710] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 269.869440][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 270.249946][ T5710] usb 5-1: can't set config #1, error -71 [ 270.470190][ T5710] usb 5-1: USB disconnect, device number 38 [ 270.800820][ T8600] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 271.158907][ T8325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.472273][ T8325] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.682016][ T8605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.881585][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.888780][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.081093][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.088275][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.277611][ T8611] capability: warning: `syz.4.931' uses deprecated v2 capabilities in a way that may be insecure [ 272.315756][ T8607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.383103][ T8614] bond7: option mode: unable to set because the bond device has slaves [ 272.426365][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'. [ 272.537094][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.932'. [ 273.858543][ T8325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.952453][ T8620] IPVS: length: 199 != 272630600 [ 274.149459][ T8620] bond1: (slave bond0): Releasing backup interface [ 274.335090][ T8620] bridge_slave_0: left allmulticast mode [ 274.690238][ T8620] bridge_slave_0: left promiscuous mode [ 275.001028][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.340817][ T8620] bridge_slave_1: left allmulticast mode [ 275.496286][ T8620] bridge_slave_1: left promiscuous mode [ 275.564526][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.714519][ T8620] bond0: (slave bond_slave_0): Releasing backup interface [ 275.769931][ T8620] bond0: (slave bond_slave_1): Releasing backup interface [ 275.955092][ T8620] team0: Port device team_slave_0 removed [ 276.028761][ T8620] team0: Port device team_slave_1 removed [ 276.076935][ T8620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.189267][ T8620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.496860][ T8620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.531535][ T8620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.615465][ T8620] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 276.795357][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.936'. [ 276.824823][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 277.162458][ T8325] veth0_vlan: entered promiscuous mode [ 277.613214][ T8325] veth1_vlan: entered promiscuous mode [ 278.098111][ T8640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.939'. [ 278.625568][ T8325] veth0_macvtap: entered promiscuous mode [ 278.749414][ T8325] veth1_macvtap: entered promiscuous mode [ 279.128103][ T5710] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 279.171753][ T5710] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 279.227892][ T5710] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 279.285658][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.194071][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.278218][ T8650] fido_id[8650]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 280.923734][ T29] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 281.284595][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.991472][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.004055][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.016726][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.033312][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.044775][ T29] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 282.054831][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.129189][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.270018][ T29] usb 4-1: config 0 descriptor?? [ 282.398972][ T29] pwc: Askey VC010 type 2 USB webcam detected. [ 282.581561][ T29] pwc: recv_control_msg error -32 req 02 val 2b00 [ 282.615666][ T29] pwc: recv_control_msg error -32 req 02 val 2700 [ 282.760852][ T29] pwc: recv_control_msg error -71 req 02 val 2c00 [ 282.806121][ T29] pwc: recv_control_msg error -71 req 04 val 1000 [ 282.867308][ T29] pwc: recv_control_msg error -71 req 04 val 1300 [ 282.907312][ T29] pwc: recv_control_msg error -71 req 04 val 1400 [ 282.956708][ T29] pwc: recv_control_msg error -71 req 02 val 2000 [ 283.013745][ T29] pwc: recv_control_msg error -71 req 02 val 2100 [ 283.079428][ T29] pwc: recv_control_msg error -71 req 04 val 1500 [ 283.132264][ T8673] syzkaller1: entered promiscuous mode [ 283.146849][ T29] pwc: recv_control_msg error -71 req 02 val 2500 [ 283.179521][ T29] pwc: recv_control_msg error -71 req 02 val 2400 [ 283.191904][ T29] pwc: recv_control_msg error -71 req 02 val 2600 [ 283.204357][ T8673] syzkaller1: entered allmulticast mode [ 283.213784][ T29] pwc: recv_control_msg error -71 req 02 val 2900 [ 283.229196][ T29] pwc: recv_control_msg error -71 req 02 val 2800 [ 283.270568][ T29] pwc: recv_control_msg error -71 req 04 val 1100 [ 283.306180][ T29] pwc: recv_control_msg error -71 req 04 val 1200 [ 283.457357][ T29] pwc: Registered as video103. [ 283.491612][ T29] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 283.543116][ T29] usb 4-1: USB disconnect, device number 29 [ 283.618308][ T8446] udevd[8446]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 284.113083][ T5637] Bluetooth: hci0: command tx timeout [ 284.465462][ T8694] xt_TCPMSS: Only works on TCP SYN packets [ 284.871866][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.952'. [ 285.038374][ T8699] xt_l2tp: missing protocol rule (udp|l2tpip) [ 285.205653][ T8698] netlink: 'syz.2.953': attribute type 4 has an invalid length. [ 285.235278][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 285.443259][ T5710] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 285.641868][ T8709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.703924][ T5710] usb 3-1: Using ep0 maxpacket: 16 [ 285.735171][ T8709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.759847][ T5710] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.881980][ T5710] usb 3-1: config 0 interface 0 has no altsetting 0 [ 285.934834][ T5710] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 285.994312][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.193605][ T5637] Bluetooth: hci0: command tx timeout [ 286.292428][ T5710] usb 3-1: Product: syz [ 286.310239][ T5710] usb 3-1: Manufacturer: syz [ 286.320175][ T5710] usb 3-1: SerialNumber: syz [ 286.334921][ T5710] usb 3-1: config 0 descriptor?? [ 286.351832][ T8710] bond3: entered allmulticast mode [ 286.368428][ T8710] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.601048][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 286.632193][ T5710] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 286.660963][ T5710] imon:send_packet: packet tx failed (-71) [ 286.833700][ T5710] imon 3-1:0.0: panel buttons/knobs setup failed [ 287.361045][ T5710] rc_core: IR keymap rc-imon-pad not found [ 287.405789][ T5710] Registered IR keymap rc-empty [ 287.423064][ T5710] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 287.477314][ T5710] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 287.539454][ T5710] imon:send_packet: packet tx failed (-71) [ 287.608485][ T5710] imon 3-1:0.0: remote input dev register failed [ 287.639236][ T5710] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 287.837324][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.960'. [ 287.935189][ T5710] imon 3-1:0.0: unable to initialize intf0, err 0 [ 287.951026][ T5710] imon:imon_probe: failed to initialize context! [ 287.985233][ T5710] imon 3-1:0.0: unable to register, err -19 [ 288.119756][ T5710] usb 3-1: USB disconnect, device number 36 [ 288.273035][ T5637] Bluetooth: hci0: command tx timeout [ 288.371761][ T8735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.427488][ T8727] netlink: 76 bytes leftover after parsing attributes in process `syz.4.961'. [ 288.465331][ T8735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.519679][ T8735] netlink: 56 bytes leftover after parsing attributes in process `syz.0.963'. [ 288.563222][ T8735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.579359][ T8735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.817564][ T8663] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.875881][ T8663] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.924847][ T8663] bridge_slave_0: entered allmulticast mode [ 288.983323][ T8663] bridge_slave_0: entered promiscuous mode [ 289.336723][ T8749] netlink: 'syz.2.966': attribute type 4 has an invalid length. [ 289.387666][ T8750] netlink: 'syz.2.966': attribute type 4 has an invalid length. [ 289.557533][ T8663] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.597226][ T8663] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.640016][ T8663] bridge_slave_1: entered allmulticast mode [ 289.687656][ T8663] bridge_slave_1: entered promiscuous mode [ 290.049368][ T8663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.110656][ T8663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.179355][ T8735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.265712][ T8735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.355129][ T5637] Bluetooth: hci0: command tx timeout [ 290.376555][ T8761] netlink: 'syz.2.967': attribute type 1 has an invalid length. [ 290.689324][ T8663] team0: Port device team_slave_0 added [ 290.721632][ T8663] team0: Port device team_slave_1 added [ 290.865188][ T12] bridge_slave_1: left allmulticast mode [ 290.889432][ T12] bridge_slave_1: left promiscuous mode [ 290.910032][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.944982][ T8771] netlink: 68 bytes leftover after parsing attributes in process `syz.2.969'. [ 290.959822][ T12] bridge_slave_0: left allmulticast mode [ 290.971047][ T12] bridge_slave_0: left promiscuous mode [ 290.977502][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.611917][ T8775] capability: warning: `syz.0.970' uses 32-bit capabilities (legacy support in use) [ 291.897720][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.952291][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.981435][ T12] bond0 (unregistering): Released all slaves [ 292.240678][ T8663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.282092][ T8663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.415878][ T8785] loop2: detected capacity change from 0 to 7 [ 292.422093][ T8783] SET target dimension over the limit! [ 292.432147][ T8663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.438284][ T8663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.438303][ T8663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.438328][ T8663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.591610][ T8785] Dev loop2: unable to read RDB block 7 [ 292.619408][ T8785] loop2: unable to read partition table [ 292.632533][ T8785] loop2: partition table beyond EOD, truncated [ 292.651075][ T8785] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 292.748291][ T12] hsr_slave_0: left promiscuous mode [ 292.795312][ T12] hsr_slave_1: left promiscuous mode [ 292.831241][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.876038][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.991792][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.044027][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.120526][ T12] veth1_macvtap: left promiscuous mode [ 293.156658][ T12] veth0_macvtap: left promiscuous mode [ 293.215521][ T12] veth1_vlan: left promiscuous mode [ 293.253281][ T12] veth0_vlan: left promiscuous mode [ 293.333159][ T5719] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 293.729798][ T8802] loop5: detected capacity change from 0 to 7 [ 293.779940][ T8802] Dev loop5: unable to read RDB block 7 [ 293.810811][ T8802] loop5: AHDI p1 p2 [ 293.832578][ T8802] loop5: partition table partially beyond EOD, truncated [ 293.856795][ T8808] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 293.887362][ T8802] loop5: p1 size 150995456 extends beyond EOD, truncated [ 294.300993][ T8479] udevd[8479]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 294.938375][ T8821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.986054][ T30] audit: type=1326 audit(1779648863.958:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8823 comm="syz.2.986" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 294.986268][ T30] audit: type=1326 audit(1779648863.968:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8823 comm="syz.2.986" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 294.986706][ T30] audit: type=1326 audit(1779648863.968:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8823 comm="syz.2.986" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 294.997972][ T8821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.053780][ T30] audit: type=1326 audit(1779648864.028:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8823 comm="syz.2.986" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 295.077445][ T30] audit: type=1326 audit(1779648864.048:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8823 comm="syz.2.986" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 295.078190][ T12] team0 (unregistering): Port device team_slave_1 removed [ 295.187131][ T30] audit: type=1326 audit(1779648864.168:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8823 comm="syz.2.986" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 295.187182][ T30] audit: type=1326 audit(1779648864.168:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8823 comm="syz.2.986" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 295.205087][ T30] audit: type=1326 audit(1779648864.188:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8823 comm="syz.2.986" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 295.211330][ T30] audit: type=1326 audit(1779648864.188:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8823 comm="syz.2.986" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 295.605560][ T12] team0 (unregistering): Port device team_slave_0 removed [ 296.277766][ T30] audit: type=1326 audit(1779648865.238:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8823 comm="syz.2.986" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 296.798278][ T8826] loop5: detected capacity change from 0 to 7 [ 296.818793][ T8826] Dev loop5: unable to read RDB block 7 [ 296.818823][ T8826] loop5: AHDI p1 [ 296.818849][ T8826] loop5: partition table partially beyond EOD, truncated [ 297.338607][ T8831] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 298.086233][ T8663] hsr_slave_0: entered promiscuous mode [ 298.138432][ T8663] hsr_slave_1: entered promiscuous mode [ 298.185272][ T8663] debugfs: 'hsr0' already exists in 'hsr' [ 298.237712][ T8663] Cannot create hsr debugfs directory [ 298.883527][ T8853] fuse: fd is not a fuse device [ 298.963639][ T8842] netlink: 76 bytes leftover after parsing attributes in process `syz.0.990'. [ 299.182003][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 299.525812][ T8863] syzkaller0: entered promiscuous mode [ 299.662645][ T8863] syzkaller0: entered allmulticast mode [ 299.812925][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.997'. [ 299.874386][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.997'. [ 300.487794][ T8882] netlink: 'syz.3.1000': attribute type 4 has an invalid length. [ 300.518560][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'. [ 300.552318][ T8885] netlink: 'syz.3.1000': attribute type 4 has an invalid length. [ 300.735203][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 301.424574][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 301.491886][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 301.928465][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1007'. [ 302.043522][ T8915] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 302.304717][ T8918] syzkaller1: entered promiscuous mode [ 302.390569][ T8918] syzkaller1: entered allmulticast mode [ 307.632758][ C0] sched: DL replenish lagged too much [ 310.792024][ T8923] pimreg: entered allmulticast mode [ 311.178620][ T8932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1012'. [ 311.478481][ T8932] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1012'. [ 311.612829][ T8932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1012'. [ 311.944312][ T8663] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 312.059106][ T8663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.774093][ T8663] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 312.932727][ T8663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.233048][ T8663] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 313.377657][ T8663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.488438][ T8663] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 313.559163][ T8663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 316.998253][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.004699][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.447741][ T8943] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 318.616933][ T8943] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 318.634522][ T8663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.583818][ T8663] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.216841][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.224029][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.590311][ T3352] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.598778][ T3352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.788276][ T8979] netlink: 'syz.3.1021': attribute type 61 has an invalid length. [ 324.872535][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 325.021365][ T8663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.388905][ T9006] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 327.222948][ T5710] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 327.291549][ T8663] veth0_vlan: entered promiscuous mode [ 327.442844][ T5710] usb 4-1: Using ep0 maxpacket: 8 [ 327.502602][ T5710] usb 4-1: config 0 has an invalid interface number: 137 but max is 0 [ 327.546597][ T8663] veth1_vlan: entered promiscuous mode [ 327.573596][ T5710] usb 4-1: config 0 has no interface number 0 [ 327.616755][ T5710] usb 4-1: config 0 interface 137 altsetting 1 has an endpoint descriptor with address 0x11, changing to 0x1 [ 327.689482][ T5710] usb 4-1: config 0 interface 137 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 327.721804][ T8663] veth0_macvtap: entered promiscuous mode [ 327.790060][ T5710] usb 4-1: config 0 interface 137 altsetting 1 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 327.843070][ T8663] veth1_macvtap: entered promiscuous mode [ 327.849153][ T5710] usb 4-1: config 0 interface 137 has no altsetting 0 [ 327.887051][ T5710] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=32.10 [ 328.196350][ T9024] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 328.267399][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.403439][ T5710] usb 4-1: Product: syz [ 328.440369][ T8663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.456863][ T5710] usb 4-1: Manufacturer: syz [ 328.511444][ T5710] usb 4-1: SerialNumber: syz [ 331.591687][ T8663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.868994][ T5710] usb 4-1: config 0 descriptor?? [ 331.917074][ T5710] usb 4-1: can't set config #0, error -71 [ 332.202297][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.291658][ T5710] usb 4-1: USB disconnect, device number 30 [ 332.594061][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.548940][ T9030] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.082713][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 465.089721][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9027/1:b..l P29/1:b..l P9034/1:b..l [ 465.100170][ C0] rcu: (detected by 0, t=10502 jiffies, g=47133, q=499 ncpus=2) [ 465.107902][ C0] task:sed state:R running task stack:25632 pid:9034 tgid:9034 ppid:9033 task_flags:0x400000 flags:0x00080800 [ 465.122458][ C0] Call Trace: [ 465.125759][ C0] [ 465.128701][ C0] __schedule+0x1821/0x5740 [ 465.133254][ C0] ? __pfx___schedule+0x10/0x10 [ 465.138122][ C0] preempt_schedule_irq+0x4d/0xa0 [ 465.143136][ C0] irqentry_exit+0x14f/0x760 [ 465.147729][ C0] ? trace_irq_disable+0x3b/0x140 [ 465.152774][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 465.158761][ C0] RIP: 0010:unwind_next_frame+0x534/0x2550 [ 465.164580][ C0] Code: 0f b6 04 08 84 c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 8d 47 fc 48 0f 47 d8 4d 0f 46 ef 48 39 dd 76 a2 7b fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 7c cc 4c 89 ff 48 [ 465.184187][ C0] RSP: 0018:ffffc90005886c98 EFLAGS: 00000212 [ 465.190236][ C0] RAX: ffffffff9052b938 RBX: ffffffff9052b93c RCX: ffffffff9052b940 [ 465.198190][ C0] RDX: ffffffff9052b93c RSI: ffffffff90d33678 RDI: ffffffff8c28b780 [ 465.206167][ C0] RBP: ffffffff9052b940 R08: 000000000000000a R09: ffffffff8e95cca0 [ 465.214139][ C0] R10: ffffc90005886db8 R11: ffffffff81b0e040 R12: ffffffff82310858 [ 465.222115][ C0] R13: ffffffff9052b93c R14: ffffc90005886d68 R15: ffffffff9052b93c [ 465.230093][ C0] ? qlist_free_all+0x98/0x100 [ 465.234866][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 465.241007][ C0] ? unwind_next_frame+0xd5/0x2550 [ 465.246110][ C0] ? unwind_next_frame+0xa6/0x2550 [ 465.251231][ C0] ? qlist_free_all+0x99/0x100 [ 465.256005][ C0] ? qlist_free_all+0x99/0x100 [ 465.260783][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 465.266949][ C0] arch_stack_walk+0x11b/0x150 [ 465.271723][ C0] ? qlist_free_all+0x99/0x100 [ 465.276505][ C0] stack_trace_save+0xa9/0x100 [ 465.281281][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 465.286668][ C0] save_stack+0x122/0x230 [ 465.290984][ C0] ? __pfx_save_stack+0x10/0x10 [ 465.295822][ C0] ? __free_frozen_pages+0xbc7/0xd30 [ 465.301114][ C0] ? __slab_free+0x274/0x2c0 [ 465.305709][ C0] ? qlist_free_all+0x99/0x100 [ 465.310476][ C0] ? page_ext_put+0x97/0xc0 [ 465.315000][ C0] __reset_page_owner+0x71/0x1f0 [ 465.319966][ C0] __free_frozen_pages+0xbc7/0xd30 [ 465.325111][ C0] __slab_free+0x274/0x2c0 [ 465.329559][ C0] qlist_free_all+0x99/0x100 [ 465.334164][ C0] ? ptlock_alloc+0x20/0x70 [ 465.338682][ C0] kasan_quarantine_reduce+0x148/0x160 [ 465.344157][ C0] __kasan_slab_alloc+0x22/0x80 [ 465.349026][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 465.354496][ C0] ? ptlock_alloc+0x20/0x70 [ 465.359013][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 465.364659][ C0] ptlock_alloc+0x20/0x70 [ 465.369007][ C0] pte_alloc_one+0x7a/0x370 [ 465.373530][ C0] __pte_alloc+0x25/0x1a0 [ 465.377876][ C0] move_page_tables+0x186a/0x1c10 [ 465.382905][ C0] ? __pfx_commit_merge+0x10/0x10 [ 465.387931][ C0] ? move_page_tables+0x56a/0x1c10 [ 465.393036][ C0] ? vma_expand+0x8ac/0xfa0 [ 465.397546][ C0] ? __pfx_move_page_tables+0x10/0x10 [ 465.402928][ C0] ? __pfx_vma_expand+0x10/0x10 [ 465.407796][ C0] relocate_vma_down+0x3ab/0x590 [ 465.412746][ C0] ? __pfx_relocate_vma_down+0x10/0x10 [ 465.418235][ C0] ? mprotect_fixup+0xa2a/0xb60 [ 465.423115][ C0] ? setup_arg_pages+0x316/0xbd0 [ 465.428067][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 465.433713][ C0] ? tlb_finish_mmu+0x197/0x230 [ 465.438567][ C0] setup_arg_pages+0x70a/0xbd0 [ 465.443330][ C0] ? __pfx_setup_arg_pages+0x10/0x10 [ 465.448624][ C0] ? get_random_u64+0x49d/0x870 [ 465.453481][ C0] ? get_random_u64+0x13b/0x870 [ 465.458337][ C0] ? get_random_u64+0x4d4/0x870 [ 465.463216][ C0] ? arch_setup_new_exec+0x1a7/0x2c0 [ 465.468511][ C0] load_elf_binary+0xc5e/0x2980 [ 465.473378][ C0] ? load_misc_binary+0x10f/0xc40 [ 465.478402][ C0] ? lock_acquire+0x106/0x350 [ 465.483095][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 465.488384][ C0] bprm_execve+0x94a/0x1510 [ 465.492887][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 465.497837][ C0] ? count+0x1e0/0x230 [ 465.501925][ C0] do_execveat_common+0x50d/0x690 [ 465.506966][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.513037][ C0] __x64_sys_execve+0x97/0xc0 [ 465.517731][ C0] do_syscall_64+0x15f/0xf80 [ 465.522327][ C0] ? trace_irq_disable+0x3b/0x140 [ 465.527366][ C0] ? clear_bhb_loop+0x40/0x90 [ 465.532048][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.537938][ C0] RIP: 0033:0x7ff564001107 [ 465.542330][ C0] RSP: 002b:00007fff57468a58 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 465.550723][ C0] RAX: ffffffffffffffda RBX: 0000559710d1d188 RCX: 00007ff564001107 [ 465.558695][ C0] RDX: 0000559710d1d1b0 RSI: 0000559710d1d188 RDI: 0000559710d1d268 [ 465.566671][ C0] RBP: 0000559710d1d268 R08: 00007fff5746ee10 R09: 0000000000000000 [ 465.574640][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000559710d1d1b0 [ 465.582608][ C0] R13: 00007ff5641c6e8b R14: 0000559710d1d1b0 R15: 0000000000000000 [ 465.590580][ C0] [ 465.593590][ C0] task:kworker/1:1 state:R running task stack:20768 pid:29 tgid:29 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 465.607170][ C0] Workqueue: mld mld_ifc_work [ 465.611861][ C0] Call Trace: [ 465.615137][ C0] [ 465.618071][ C0] __schedule+0x1821/0x5740 [ 465.622590][ C0] ? trace_sched_exit_tp+0x3a/0x130 [ 465.627814][ C0] ? __pfx___schedule+0x10/0x10 [ 465.632691][ C0] preempt_schedule_irq+0x4d/0xa0 [ 465.637723][ C0] irqentry_exit+0x14f/0x760 [ 465.642289][ C0] ? trace_irq_disable+0x3b/0x140 [ 465.647305][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 465.653290][ C0] RIP: 0010:deref_stack_reg+0x13/0x230 [ 465.658759][ C0] Code: fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 89 54 24 18 <49> 89 f0 49 89 ff 48 be 00 00 00 00 00 fc ff df 48 8d 5f 08 49 89 [ 465.678369][ C0] RSP: 0018:ffffc90000a571c0 EFLAGS: 00000286 [ 465.684443][ C0] RAX: fffffffffffffff0 RBX: ffffffff90c9d476 RCX: 0000000000000000 [ 465.692394][ C0] RDX: ffffc90000a57328 RSI: ffffc90000a57410 RDI: ffffc90000a572e8 [ 465.700351][ C0] RBP: dffffc0000000000 R08: ffffc90000a57347 R09: 0000000000000000 [ 465.708326][ C0] R10: ffffc90000a57338 R11: fffff5200014ae69 R12: ffffc90000a57410 [ 465.716302][ C0] R13: 1ffff9200014ae5f R14: ffffc90000a572e8 R15: 1ffffffff2193a8f [ 465.724306][ C0] unwind_next_frame+0x19d5/0x2550 [ 465.729432][ C0] ? unwind_next_frame+0xa6/0x2550 [ 465.734552][ C0] ? stack_trace_save+0xa9/0x100 [ 465.739475][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 465.745614][ C0] arch_stack_walk+0x11b/0x150 [ 465.750393][ C0] ? save_stack+0x122/0x230 [ 465.754910][ C0] stack_trace_save+0xa9/0x100 [ 465.759687][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 465.765079][ C0] save_stack+0x122/0x230 [ 465.769417][ C0] ? __pfx_save_stack+0x10/0x10 [ 465.774294][ C0] ? page_ext_put+0x97/0xc0 [ 465.778811][ C0] __reset_page_owner+0x71/0x1f0 [ 465.783760][ C0] __free_frozen_pages+0xbc7/0xd30 [ 465.788880][ C0] __slab_free+0x274/0x2c0 [ 465.793289][ C0] ? qlist_free_all+0x8e/0x100 [ 465.798062][ C0] qlist_free_all+0x99/0x100 [ 465.802664][ C0] kasan_quarantine_reduce+0x148/0x160 [ 465.808132][ C0] __kasan_kmalloc+0x22/0xb0 [ 465.812732][ C0] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 465.819162][ C0] ? mld_newpack+0x14c/0xc90 [ 465.823765][ C0] ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0 [ 465.830363][ C0] __alloc_skb+0x2c1/0x7d0 [ 465.834790][ C0] mld_newpack+0x14c/0xc90 [ 465.839186][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 465.845065][ C0] ? rcu_is_watching+0x15/0xb0 [ 465.849833][ C0] ? __pfx_mld_newpack+0x10/0x10 [ 465.854778][ C0] ? __mutex_lock+0x319/0x1550 [ 465.859519][ C0] ? register_lock_class+0x31/0x2e0 [ 465.864707][ C0] add_grhead+0x5a/0x2a0 [ 465.868957][ C0] ? add_grec+0x1360/0x1740 [ 465.873470][ C0] add_grec+0x1452/0x1740 [ 465.877810][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 465.882845][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 465.888236][ C0] mld_ifc_work+0x6e6/0xe70 [ 465.892760][ C0] ? process_scheduled_works+0xa70/0x1860 [ 465.898484][ C0] process_scheduled_works+0xb5d/0x1860 [ 465.904060][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 465.910048][ C0] ? assign_work+0x3d5/0x5e0 [ 465.914647][ C0] worker_thread+0xa53/0xfc0 [ 465.919268][ C0] kthread+0x389/0x470 [ 465.923343][ C0] ? __pfx_worker_thread+0x10/0x10 [ 465.928458][ C0] ? __pfx_kthread+0x10/0x10 [ 465.933054][ C0] ret_from_fork+0x514/0xb70 [ 465.937646][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 465.942738][ C0] ? __switch_to+0xc79/0x1410 [ 465.947423][ C0] ? __pfx_kthread+0x10/0x10 [ 465.952018][ C0] ret_from_fork_asm+0x1a/0x30 [ 465.956807][ C0] [ 465.959826][ C0] task:syz.0.1030 state:R running task stack:25280 pid:9027 tgid:9023 ppid:5646 task_flags:0x400040 flags:0x08080002 [ 465.973325][ C0] Call Trace: [ 465.976601][ C0] [ 465.979532][ C0] __schedule+0x1821/0x5740 [ 465.984045][ C0] ? lock_acquire+0x106/0x350 [ 465.988733][ C0] ? __pfx___schedule+0x10/0x10 [ 465.993574][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 465.998525][ C0] preempt_schedule_irq+0x4d/0xa0 [ 466.003560][ C0] irqentry_exit+0x14f/0x760 [ 466.008153][ C0] ? trace_irq_disable+0x3b/0x140 [ 466.013194][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.019180][ C0] RIP: 0010:lock_is_held_type+0x9/0x150 [ 466.024726][ C0] Code: d1 19 8e 67 48 0f b9 3a 90 eb ce 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 <41> 55 41 54 53 bb ff ff ff ff 83 3d 56 a6 87 04 00 0f 84 e4 00 00 [ 466.044332][ C0] RSP: 0018:ffffc90002f4f420 EFLAGS: 00000246 [ 466.050402][ C0] RAX: ffffffff8ba2f6ff RBX: dffffc0000000000 RCX: 0000000000080000 [ 466.058373][ C0] RDX: ffffc9000e7fd000 RSI: 00000000ffffffff RDI: ffff88802924d8f8 [ 466.066344][ C0] RBP: ffff88802924d8f8 R08: ffff88802fce1ec0 R09: 0000000000000005 [ 466.074316][ C0] R10: 0000000000000004 R11: 0000000000000002 R12: ffff88804dfab8c0 [ 466.082292][ C0] R13: 0000000080ffffff R14: 0000000000000300 R15: 000000000000000a [ 466.090266][ C0] ? mtree_range_walk+0x53f/0x8b0 [ 466.095289][ C0] mtree_range_walk+0x55e/0x8b0 [ 466.100161][ C0] mt_find+0x25f/0x630 [ 466.104244][ C0] ? mt_find+0x186/0x630 [ 466.108488][ C0] ? __pfx_mt_find+0x10/0x10 [ 466.113090][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 466.119081][ C0] find_vma+0xed/0x160 [ 466.123157][ C0] ? __pfx_find_vma+0x10/0x10 [ 466.127844][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 466.132788][ C0] lock_mm_and_find_vma+0x66/0x340 [ 466.137906][ C0] ? do_user_addr_fault+0x2c9/0x1340 [ 466.143179][ C0] do_user_addr_fault+0x330/0x1340 [ 466.148310][ C0] ? irqentry_exit+0x218/0x760 [ 466.153087][ C0] ? rcu_is_watching+0x15/0xb0 [ 466.157861][ C0] ? trace_page_fault_kernel+0x84/0x1e0 [ 466.163423][ C0] exc_page_fault+0x6a/0xc0 [ 466.167949][ C0] asm_exc_page_fault+0x26/0x30 [ 466.172805][ C0] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 466.178618][ C0] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 466.198231][ C0] RSP: 0018:ffffc90002f4f8b8 EFLAGS: 00050206 [ 466.204309][ C0] RAX: 00007ffffffff001 RBX: 000000000000001c RCX: 000000000000001c [ 466.212369][ C0] RDX: 0000000000000001 RSI: 00000000800af000 RDI: ffffc90002f4f940 [ 466.220344][ C0] RBP: ffffc90002f4f9d0 R08: 0000000000000003 R09: 0000000000000004 [ 466.228318][ C0] R10: dffffc0000000000 R11: fffff520005e9f2b R12: dffffc0000000000 [ 466.236288][ C0] R13: ffffc90002f4fc80 R14: ffffc90002f4f940 R15: 00000000800af000 [ 466.244269][ C0] _copy_from_user+0x7a/0xb0 [ 466.248879][ C0] get_compat_msghdr+0xb3/0x4c0 [ 466.253743][ C0] ? __pfx_get_compat_msghdr+0x10/0x10 [ 466.259208][ C0] ? kfree+0x4d/0x640 [ 466.263201][ C0] ___sys_recvmsg+0x1dd/0x590 [ 466.267888][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 466.273122][ C0] do_recvmmsg+0x3a5/0x800 [ 466.277551][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 466.282504][ C0] ? __fget_files+0x3a0/0x420 [ 466.287184][ C0] ? fput+0xa0/0xd0 [ 466.290976][ C0] __sys_recvmmsg+0x1a5/0x290 [ 466.295639][ C0] ? __pfx___sys_recvmmsg+0x10/0x10 [ 466.300840][ C0] ? rcu_is_watching+0x15/0xb0 [ 466.305614][ C0] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 466.311774][ C0] __do_fast_syscall_32+0x229/0x6e0 [ 466.316979][ C0] ? do_fast_syscall_32+0x33/0x70 [ 466.322008][ C0] ? irqentry_exit+0x10f/0x760 [ 466.326772][ C0] ? trace_irq_disable+0x3b/0x140 [ 466.331811][ C0] do_fast_syscall_32+0x33/0x70 [ 466.336662][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 466.342979][ C0] RIP: 0023:0xf70cf01c [ 466.347046][ C0] RSP: 002b:00000000f549c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 466.355467][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 466.363439][ C0] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 466.371416][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 466.379391][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 466.387355][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 466.395327][ C0] [ 466.398346][ C0] rcu: rcu_preempt kthread starved for 7202 jiffies! g47133 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 466.409446][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 466.419401][ C0] rcu: RCU grace-period kthread stack dump: [ 466.425285][ C0] task:rcu_preempt state:R running task stack:27968 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 466.438784][ C0] Call Trace: [ 466.442059][ C0] [ 466.444981][ C0] __schedule+0x1821/0x5740 [ 466.449495][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 466.454468][ C0] ? __pfx___schedule+0x10/0x10 [ 466.459338][ C0] ? schedule+0x90/0x360 [ 466.463593][ C0] schedule+0x164/0x360 [ 466.467762][ C0] schedule_timeout+0x158/0x2c0 [ 466.472620][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 466.477998][ C0] ? __pfx_process_timeout+0x10/0x10 [ 466.483301][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 466.489114][ C0] ? prepare_to_swait_event+0x340/0x370 [ 466.494654][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 466.499512][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 466.504713][ C0] ? rcu_gp_init+0x1315/0x15b0 [ 466.509480][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 466.515636][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 466.520920][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 466.526130][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 466.531950][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 466.536537][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 466.541711][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 466.547504][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 466.552451][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 466.557487][ C0] kthread+0x389/0x470 [ 466.561563][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 466.566762][ C0] ? __pfx_kthread+0x10/0x10 [ 466.571358][ C0] ret_from_fork+0x514/0xb70 [ 466.575956][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 466.581067][ C0] ? __switch_to+0xc79/0x1410 [ 466.585749][ C0] ? __pfx_kthread+0x10/0x10 [ 466.590320][ C0] ret_from_fork_asm+0x1a/0x30 [ 466.595083][ C0] [ 466.598100][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 466.604438][ C0] Sending NMI from CPU 0 to CPUs 1: [ 466.609645][ C1] NMI backtrace for cpu 1 [ 466.609666][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 466.609684][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 466.609694][ C1] RIP: 0010:unwind_next_frame+0x24a/0x2550 [ 466.609719][ C1] Code: 8b 6d 00 44 89 f8 ff c0 48 8d 2c 85 f8 6b 71 91 48 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 85 1d 00 00 44 8b 45 00 41 ff c0 <4a> 8d 04 6d 00 00 00 00 4c 01 e8 48 8d 34 45 3c 32 bc 90 48 81 fe [ 466.609734][ C1] RSP: 0018:ffffc90000a07698 EFLAGS: 00000206 [ 466.609748][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000080000300 [ 466.609759][ C1] RDX: 00000000000aad3e RSI: ffffffff8c28b7c0 RDI: ffffffff8c28b780 [ 466.609771][ C1] RBP: ffffffff919371bc R08: 000000000017fc21 R09: ffffffff8e95cca0 [ 466.609783][ C1] R10: ffffc90000a077b8 R11: ffffffff81b0e040 R12: ffffffff89817046 [ 466.609795][ C1] R13: 000000000017fc20 R14: ffffc90000a07768 R15: 0000000000088170 [ 466.609806][ C1] FS: 0000000000000000(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 466.609819][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.609831][ C1] CR2: 00000000800aa018 CR3: 000000006d5a4000 CR4: 00000000003526f0 [ 466.609845][ C1] Call Trace: [ 466.609851][ C1] [ 466.609861][ C1] ? unwind_next_frame+0xa6/0x2550 [ 466.609881][ C1] ? net_rx_action+0x627/0xf70 [ 466.609903][ C1] ? net_rx_action+0x627/0xf70 [ 466.609924][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 466.609949][ C1] arch_stack_walk+0x11b/0x150 [ 466.609971][ C1] ? net_rx_action+0x627/0xf70 [ 466.609992][ C1] ? skb_clone+0x212/0x3a0 [ 466.610008][ C1] stack_trace_save+0xa9/0x100 [ 466.610032][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 466.610059][ C1] kasan_save_track+0x3e/0x80 [ 466.610080][ C1] ? kasan_save_track+0x3e/0x80 [ 466.610100][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 466.610121][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 466.610142][ C1] ? skb_clone+0x212/0x3a0 [ 466.610156][ C1] ? dev_queue_xmit_nit+0x29a/0xad0 [ 466.610178][ C1] ? dev_hard_start_xmit+0x1c1/0x830 [ 466.610198][ C1] ? sch_direct_xmit+0x251/0x4c0 [ 466.610218][ C1] ? __qdisc_run+0xa83/0x1560 [ 466.610238][ C1] ? __dev_queue_xmit+0x1d26/0x3950 [ 466.610253][ C1] ? ip_finish_output2+0xc68/0x1070 [ 466.610272][ C1] ? ip_output+0x29f/0x450 [ 466.610287][ C1] ? synproxy_send_client_synack+0x8c1/0xe30 [ 466.610304][ C1] ? nft_synproxy_eval_v4+0x34a/0x4e0 [ 466.610321][ C1] ? nft_synproxy_do_eval+0x305/0x580 [ 466.610338][ C1] ? nft_do_chain+0x48d/0x1ae0 [ 466.610356][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 466.610374][ C1] ? nf_hook_slow+0xc5/0x220 [ 466.610388][ C1] ? NF_HOOK+0x21f/0x3c0 [ 466.610409][ C1] ? NF_HOOK+0x336/0x3c0 [ 466.610429][ C1] ? process_backlog+0xaa3/0x1950 [ 466.610449][ C1] ? __napi_poll+0xae/0x340 [ 466.610467][ C1] ? net_rx_action+0x627/0xf70 [ 466.610502][ C1] __kasan_slab_alloc+0x6c/0x80 [ 466.610525][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 466.610545][ C1] ? skb_clone+0x212/0x3a0 [ 466.610560][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 466.610582][ C1] skb_clone+0x212/0x3a0 [ 466.610596][ C1] ? dev_queue_xmit_nit+0x268/0xad0 [ 466.610620][ C1] dev_queue_xmit_nit+0x29a/0xad0 [ 466.610642][ C1] ? dev_queue_xmit_nit+0x2d/0xad0 [ 466.610668][ C1] dev_hard_start_xmit+0x1c1/0x830 [ 466.610690][ C1] sch_direct_xmit+0x251/0x4c0 [ 466.610713][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 466.610738][ C1] __qdisc_run+0xa83/0x1560 [ 466.610766][ C1] __dev_queue_xmit+0x1d26/0x3950 [ 466.610786][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 466.610803][ C1] ? ipv4_synproxy_hook+0x293/0xd80 [ 466.610820][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 466.610839][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 466.610855][ C1] ? __pfx_nf_confirm+0x10/0x10 [ 466.610882][ C1] ? ip_finish_output2+0xa1e/0x1070 [ 466.610902][ C1] ? ip_finish_output2+0x3c2/0x1070 [ 466.610920][ C1] ip_finish_output2+0xc68/0x1070 [ 466.610938][ C1] ? ip_finish_output2+0x3c2/0x1070 [ 466.610960][ C1] ip_output+0x29f/0x450 [ 466.610976][ C1] ? ip_output+0x5b/0x450 [ 466.610992][ C1] synproxy_send_client_synack+0x8c1/0xe30 [ 466.611016][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 466.611033][ C1] ? nft_osf_eval+0x258/0x870 [ 466.611048][ C1] ? synproxy_pernet+0x45/0x270 [ 466.611067][ C1] nft_synproxy_eval_v4+0x34a/0x4e0 [ 466.611087][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 466.611106][ C1] ? nf_ip_checksum+0x13c/0x510 [ 466.611128][ C1] nft_synproxy_do_eval+0x305/0x580 [ 466.611145][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 466.611163][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 466.611187][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 466.611207][ C1] nft_do_chain+0x48d/0x1ae0 [ 466.611232][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 466.611254][ C1] ? ipt_do_table+0x2b2/0x1630 [ 466.611279][ C1] ? nf_nat_inet_fn+0x95b/0xbf0 [ 466.611304][ C1] nft_do_chain_inet+0x360/0x4b0 [ 466.611324][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 466.611342][ C1] ? ipt_do_table+0x2b2/0x1630 [ 466.611363][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 466.611388][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 466.611408][ C1] nf_hook_slow+0xc5/0x220 [ 466.611425][ C1] NF_HOOK+0x21f/0x3c0 [ 466.611447][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 466.611470][ C1] ? NF_HOOK+0x9e/0x3c0 [ 466.611491][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 466.611511][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 466.611535][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 466.611560][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 466.611584][ C1] NF_HOOK+0x336/0x3c0 [ 466.611606][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 466.611627][ C1] ? NF_HOOK+0x9e/0x3c0 [ 466.611648][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 466.611671][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 466.611695][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 466.611717][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 466.611737][ C1] ? process_backlog+0x3eb/0x1950 [ 466.611758][ C1] process_backlog+0xaa3/0x1950 [ 466.611787][ C1] __napi_poll+0xae/0x340 [ 466.611805][ C1] ? skb_defer_free_flush+0x233/0x260 [ 466.611826][ C1] net_rx_action+0x627/0xf70 [ 466.611853][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 466.611885][ C1] handle_softirqs+0x22a/0x840 [ 466.611903][ C1] ? __irq_exit_rcu+0xca/0x220 [ 466.611922][ C1] __irq_exit_rcu+0xca/0x220 [ 466.611938][ C1] irq_exit_rcu+0x9/0x30 [ 466.611953][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 466.611977][ C1] [ 466.611983][ C1] [ 466.611989][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.612006][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 466.612031][ C1] Code: 6b 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 01 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 466.612045][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 466.612057][ C1] RAX: 0000000000e60079 RBX: ffffffff819a858a RCX: 0000000080000001 [ 466.612068][ C1] RDX: 0000000000000001 RSI: ffffffff8dfad387 RDI: ffffffff8c28b7e0 [ 466.612080][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 466.612092][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 466.612103][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000 [ 466.612117][ C1] ? do_idle+0x36a/0x5f0 [ 466.612139][ C1] default_idle+0x9/0x20 [ 466.612155][ C1] default_idle_call+0x72/0xb0 [ 466.612173][ C1] do_idle+0x36a/0x5f0 [ 466.612197][ C1] ? __pfx_do_idle+0x10/0x10 [ 466.612218][ C1] cpu_startup_entry+0x43/0x60 [ 466.612237][ C1] start_secondary+0x101/0x110 [ 466.612252][ C1] common_startup_64+0x13e/0x147 [ 466.612280][ C1] [ 469.519063][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 473.558164][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 473.574946][ T1314] ieee802154 phy1 wpan1: encryption failed: -22