last executing test programs: 6.837382795s ago: executing program 3 (id=4842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "2defbd1ccdd59bac", "b0ad0cd933caf9dbdfc37796bc1019ba", "779d4176"}, 0x28) writev(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="9daf5194d6ff2fb71e455a389b8ead15aebc12ea8ead35a3b45cb2f2603e607dfe3f1228fb0b1cd1968a9bcd1badfa49059ce704fa1228343bfe3f3600c5000000140000d09c5c82111202b07c1c755457049ad0ebcd70cbaa678adaa17831266adfc9fa04f5093b8c9fd353b714b22e5454084aa316bd17dbadd5a49b0dd3b073051bb901212a764a56d76d2ff9747d5cad8712e20378bbbcca075b5564a0b50df37294931900f48618135effbb4f2392455f6451fd556b02e166b774d78b8f419eebd9998b8d428dc4b2fcb57503d0eeba1a3280f447ccf7812d1895b6479c7059fe50fff0e5c7dcf0768191e9bcb9c2b1e58427a93a7396d404a4116c8cd5e00456979d2dce4347f00189da68317adf15ea9e728f1fb93db495bd754b84cfc923a1428c97643f05cf00000000000000000000000000005e2cd2cd53a53fab4d50415b7fc9634782", 0x149}], 0x3) 6.684323312s ago: executing program 3 (id=4843): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00000010003704030000000300000000000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 6.440282551s ago: executing program 3 (id=4844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) 6.319288977s ago: executing program 3 (id=4845): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000010ef17476000000000000109022400010000a00209040005020300840009210000400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000000c0)={0x3, 0x200, 0xfffd, 0xfffffffb, 0x0, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x40, 0x9}) 6.096913489s ago: executing program 0 (id=4847): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x20000, 0xb) fcntl$notify(r1, 0x402, 0x80000002) socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 6.066233011s ago: executing program 0 (id=4848): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) close(0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(0x0, 0x0, 0x2) io_pgetevents(0x0, 0x3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd(0x5f0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x2000, 0x113000, 0x8}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2}) syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x214683) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000001c00)=[{0x0, 0x10, 0x0, 0x0}, {0x0, 0x800, 0x0, 0x0}, {0x7f, 0xc801, 0x0, 0x0}], 0x3}) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000005580)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xfff3}}]}}]}, 0x40}}, 0x0) 5.667599341s ago: executing program 2 (id=4851): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="401505"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x402) syz_usb_control_io(r0, 0x0, 0x0) write$hidraw(r1, &(0x7f00000002c0)="5bf9", 0x4000) 5.441115635s ago: executing program 1 (id=4852): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x1405, 0x400, 0x70bd2d, 0x10, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x100) 5.373825177s ago: executing program 4 (id=4853): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x0, '\a\x00'}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000200)={0x1, "b4be8421a3f3090ceb57129c83bb1a1562ae2050097bc3a277628b8fb36a28da220fdf81608f602bc11cfdaec03d294cfbdd855de75763122def77a5c75d51a8"}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000700), 0x0}) 4.634061238s ago: executing program 4 (id=4854): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000008}, 0x50) ptrace(0x10, r0) set_mempolicy(0x4000, 0x0, 0x7) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 4.462296497s ago: executing program 1 (id=4855): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x44, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0xd, 0x0, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40019}, 0x40000) 4.30067333s ago: executing program 4 (id=4856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x10) sendmsg$NFT_BATCH(r0, 0x0, 0x4004000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES16=0x0, @ANYRES8=r0], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x37, &(0x7f0000001f40)=""/4096, &(0x7f0000000140)=0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000feb7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baa00fe00000000b5090800000000007baaf0ff00000000bf8720000000000036070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004602010076000000bf98000000000000be080000000000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_ep_read(r4, 0x4, 0x0, 0x0) syz_usb_ep_write(r4, 0x83, 0x0, 0x0) syz_usb_ep_read(r4, 0x4, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r7 = socket$inet6(0x2d, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x8080, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r8, 0x0, 0xffff, 0xffc4, &(0x7f0000000480)='|0', 0x1}) syz_usb_ep_write(r4, 0x82, 0x0, 0x0) syz_usb_ep_read(r4, 0x4, 0x0, 0x0) syz_usb_ep_read(r4, 0x4, 0x0, 0x0) unshare(0x64000600) 4.296975909s ago: executing program 1 (id=4857): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) ftruncate(r2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4008094) syz_emit_ethernet(0xa2, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x6c, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1b, 0x2, 0xf3d8, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @eol, @timestamp={0x8, 0xa, 0xffb0, 0x9}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "aaa802ba81236a6a3f0291096ebc95e2"}, @md5sig={0x13, 0x12, "ee60fd29eee2d03b098afc604c77aea3"}, @mptcp=@syn={0x1e, 0xc, 0x3, 0x1, 0x2, 0x1, 0xfc}, @sack={0x5, 0x12, [0x2, 0x9, 0xd4, 0x6]}]}}}}}}}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x9, @mcast2, 0x8}, @in6={0xa, 0x4e21, 0x5, @empty, 0x6}], 0x38) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x5c}]}}}], 0x18}}], 0x1, 0x50008000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00], [0x0, 0x0, 0xff], 'ipvlan0\x00', 'ip6gre0\x00', {0xff}, {}, 0x11, 0x6}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@loopback, @empty, [], [0xff, 0xff], 'netdevsim0\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}, {}, 0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) 3.503713187s ago: executing program 2 (id=4858): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x400000) 3.387104686s ago: executing program 4 (id=4859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0xd, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) 3.304187228s ago: executing program 2 (id=4860): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) lseek(r2, 0x8000000000000002, 0x0) 3.220209528s ago: executing program 2 (id=4861): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 3.187366067s ago: executing program 3 (id=4862): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x5, 0x0, &(0x7f0000000080)=0x5a) 3.041514598s ago: executing program 1 (id=4863): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4008094) syz_emit_ethernet(0xa2, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x6c, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1b, 0x2, 0xf3d8, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @eol, @timestamp={0x8, 0xa, 0xffb0, 0x9}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "aaa802ba81236a6a3f0291096ebc95e2"}, @md5sig={0x13, 0x12, "ee60fd29eee2d03b098afc604c77aea3"}, @mptcp=@syn={0x1e, 0xc, 0x3, 0x1, 0x2, 0x1, 0xfc}, @sack={0x5, 0x12, [0x2, 0x9, 0xd4, 0x6]}]}}}}}}}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x9, @mcast2, 0x8}, @in6={0xa, 0x4e21, 0x5, @empty, 0x6}], 0x38) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r5, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x5c}]}}}], 0x18}}], 0x1, 0x50008000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00], [0x0, 0x0, 0xff], 'ipvlan0\x00', 'ip6gre0\x00', {0xff}, {}, 0x11, 0x6}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@loopback, @empty, [], [0xff, 0xff], 'netdevsim0\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}, {}, 0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) 2.951033582s ago: executing program 4 (id=4864): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000082}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x200082, 0x0) 2.949853577s ago: executing program 0 (id=4865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000200)) 2.931629795s ago: executing program 3 (id=4866): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 2.80848143s ago: executing program 4 (id=4867): r0 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x0, 0x9f21d88eb2fac37f, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x8140) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x101000, 0x8000, 0x8000103, 0x5, 0x1, 0x5}) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0x4}, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x0, 0x7, 0x7f, 0x80000a9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7ffe01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x1, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000006, 0x5f31, 0xd, 0x4e0, 0x381, 0x20000004, 0xb, 0x4000004, 0x1, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfdfffffc, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x1, 0x42, 0xfffff800], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ec, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x1, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x802, 0x12b, 0x4, 0x1, 0x2, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2d0, 0x7, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0xfffffffd, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000404, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0x10]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000108ee3f620d500000300000700000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002100970e000000800000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffcfff}, {0x6, 0x3}]}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0xc03e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@remote, 0x4e24, 0x0, 0x4e21, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x2, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffa, 0x5, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) 2.200095062s ago: executing program 0 (id=4868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1.927842101s ago: executing program 0 (id=4869): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x4048084) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 1.881204574s ago: executing program 1 (id=4870): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) close(0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(0x0, 0x0, 0x2) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) io_pgetevents(0x0, 0x3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = eventfd(0x5f0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0x2000, 0x113000, 0x8}) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r3}) syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x214683) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000000c0)={&(0x7f0000001c00)=[{0x0, 0x10, 0x0, 0x0}, {0x0, 0x800, 0x0, 0x0}, {0x7f, 0xc801, 0x0, 0x0}], 0x3}) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000005580)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xfff3}}]}}]}, 0x40}}, 0x0) 1.754794636s ago: executing program 0 (id=4871): r0 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x0, 0x9f21d88eb2fac37f, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x8140) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x101000, 0x8000, 0x8000103, 0x5, 0x1, 0x5}) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0x4}, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x0, 0x7, 0x7f, 0x80000a9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7ffe01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x1, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000006, 0x5f31, 0xd, 0x4e0, 0x381, 0x20000004, 0xb, 0x4000004, 0x1, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfdfffffc, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x1, 0x42, 0xfffff800], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ec, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x1, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x802, 0x12b, 0x4, 0x1, 0x2, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2d0, 0x7, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0xfffffffd, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000404, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0x10]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000108ee3f620d500000300000700000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002100970e000000800000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffcfff}, {0x6, 0x3}]}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0xc03e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@remote, 0x4e24, 0x0, 0x4e21, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x2, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffa, 0x5, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) 394.597559ms ago: executing program 2 (id=4872): write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x7f, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x4, 0x0, {0x17, 0x4, 0x2, 0x9, 0xff, 0x64, 0x7, 0x1, 0x4, 0x2, @empty, @empty, {[@rr={0x7, 0x3, 0xf3}, @ssrr={0x89, 0x17, 0x6c, [@remote, @multicast1, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x7, 0xd3, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x13, 0x92, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @timestamp={0x44, 0x8, 0xe1, 0x0, 0xb, [0x5]}, @cipso={0x86, 0x6, 0x3}, @lsrr={0x83, 0x3, 0x4f}]}}, "c1a4fb427747af"}}}, 0x8d) 196.722592ms ago: executing program 1 (id=4873): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80000, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000050000000000000000"], 0x78) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r4 = memfd_create(&(0x7f0000000ac0)='\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xb5\xf5\xe8\x18h\xb4\xa71\xa8\x85s\xaf\x8a\xe5\xca\'\xfc>\x98\xaa\x8e\x02\xf6rY\xc4\xecB5\vX\'\xe7\xdd\x9d\x9e_\x00\xa1^Yx\x0eF\x98S\xdf\"\xa4\xc2T\xfa\x9f\xac|\xa0\xc5\x9d\xec\xa3\xe9c`j\xbf\x19\xc5\xc7c\xaer\x10\\BCo\x86\xe8X\x1c\x05E%\xb0\x85\xd0\x1e\xa7\xc9w\xa3D\xad<\xcc\x90`\xa8<1\xa1\x04\x0f\a\r\xe4H\x95\a\x80{\x1eJW\x8b\x93\x05\xa2\x85\x95\xdf\x87\xf6+\x0e\xff\xff\x00\x00\x00\x00\x00\x00\xff\xd6h\x8b\xc5\xb9\x10\xa4\x0e\xff\xfak\xf1{\xb7{', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003140)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1}}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0, 0x40051}, 0x20008000) execve(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x2, 0xa6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000004000000040008005d00000014440000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000dc2ab856d9468356c592749be1aece65bed9c84c1010bd6ef9e1f0fd"], 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 0s ago: executing program 2 (id=4874): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) ftruncate(r2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4008094) syz_emit_ethernet(0xa2, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x6c, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1b, 0x2, 0xf3d8, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @eol, @timestamp={0x8, 0xa, 0xffb0, 0x9}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "aaa802ba81236a6a3f0291096ebc95e2"}, @md5sig={0x13, 0x12, "ee60fd29eee2d03b098afc604c77aea3"}, @mptcp=@syn={0x1e, 0xc, 0x3, 0x1, 0x2, 0x1, 0xfc}, @sack={0x5, 0x12, [0x2, 0x9, 0xd4, 0x6]}]}}}}}}}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x9, @mcast2, 0x8}, @in6={0xa, 0x4e21, 0x5, @empty, 0x6}], 0x38) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x5c}]}}}], 0x18}}], 0x1, 0x50008000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00], [0x0, 0x0, 0xff], 'ipvlan0\x00', 'ip6gre0\x00', {0xff}, {}, 0x11, 0x6}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@loopback, @empty, [], [0xff, 0xff], 'netdevsim0\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}, {}, 0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) kernel console output (not intermixed with test programs): 31] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1531.273460][T16131] usb 4-1: can't read configurations, error -71 [ 1531.361681][ T6206] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1531.533292][ T6206] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1531.536200][ T6206] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.536264][ T6206] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1531.536363][ T6206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.543352][ T6206] usb 3-1: config 0 descriptor?? [ 1531.590372][ T6206] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1531.590465][ T6206] dvb-usb: bulk message failed: -22 (3/0) [ 1531.597710][ T6206] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1531.599059][ T6206] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1531.599152][ T6206] usb 3-1: media controller created [ 1531.604422][ T6206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1531.622947][ T6206] dvb-usb: bulk message failed: -22 (6/0) [ 1531.623101][ T6206] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1531.641882][ T6206] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input152 [ 1531.649916][ T6206] dvb-usb: schedule remote query interval to 150 msecs. [ 1531.649968][ T6206] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1531.801503][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 1531.801567][ T6206] dvb-usb: error while querying for an remote control event. [ 1531.902042][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1531.902441][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1531.962063][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 1531.962121][ T6206] dvb-usb: error while querying for an remote control event. [ 1532.122244][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 1532.122277][ T6206] dvb-usb: error while querying for an remote control event. [ 1532.282021][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 1532.282087][ T6206] dvb-usb: error while querying for an remote control event. [ 1532.451602][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 1532.451635][ T6206] dvb-usb: error while querying for an remote control event. [ 1532.611553][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 1532.611585][ T6206] dvb-usb: error while querying for an remote control event. [ 1532.771582][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 1532.771626][ T6206] dvb-usb: error while querying for an remote control event. [ 1532.934416][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 1532.934449][ T6206] dvb-usb: error while querying for an remote control event. [ 1532.941584][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1533.091525][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 1533.091577][ T6206] dvb-usb: error while querying for an remote control event. [ 1533.263852][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 1533.263939][ T6206] dvb-usb: error while querying for an remote control event. [ 1533.421619][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 1533.421653][ T6206] dvb-usb: error while querying for an remote control event. [ 1533.592484][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 1533.592540][ T6206] dvb-usb: error while querying for an remote control event. [ 1533.757180][T22776] netlink: 'syz.4.4263': attribute type 8 has an invalid length. [ 1533.761766][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 1533.761791][ T6206] dvb-usb: error while querying for an remote control event. [ 1533.921656][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 1533.921689][ T6206] dvb-usb: error while querying for an remote control event. [ 1533.982056][ C0] net_ratelimit: 1 callbacks suppressed [ 1533.982082][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1533.982447][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1534.029482][ T6206] usb 3-1: USB disconnect, device number 110 [ 1534.136942][ T6206] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1534.295130][T22784] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1534.663238][T22790] program syz.1.4270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1534.722392][T22791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4269'. [ 1534.722418][T22791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4269'. [ 1534.897279][T22791] xt_CT: No such helper "netbios-ns" [ 1535.021611][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1535.021974][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1535.083725][T22800] ip_tables: iptables: counters copy to user failed while replacing table [ 1535.209810][T22802] netlink: Failed to add dvmrp0 helper -22 [ 1535.209867][T22802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1535.406238][T22808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1535.406640][T22808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1535.571662][T20285] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1535.733868][T20285] usb 2-1: Using ep0 maxpacket: 8 [ 1535.736257][T20285] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1535.744562][T20285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.797402][T20285] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1535.797414][T20285] pvrusb2: ********** [ 1535.797418][T20285] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1535.797434][T20285] pvrusb2: Important functionality might not be entirely working. [ 1535.797439][T20285] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1535.797446][T20285] pvrusb2: ********** [ 1535.960729][T22814] program syz.2.4281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1536.062013][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1536.062334][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1536.062726][ T2351] pvrusb2: Invalid write control endpoint [ 1536.074906][T20285] usb 2-1: USB disconnect, device number 101 [ 1536.250995][ T2351] pvrusb2: Invalid write control endpoint [ 1536.251005][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1536.251010][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1536.251025][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1536.251031][ T2351] pvrusb2: Device being rendered inoperable [ 1536.258171][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1536.258248][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1536.263122][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1536.263134][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1536.263160][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1536.837100][T22835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4289'. [ 1536.837123][T22835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4289'. [ 1536.932496][T22835] xt_CT: No such helper "netbios-ns" [ 1537.283659][T22294] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1537.434135][T22294] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1537.436540][T22294] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1537.436570][T22294] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1537.436595][T22294] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1537.436626][T22294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.499996][T22294] usb 4-1: config 0 descriptor?? [ 1537.632733][T20285] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1537.812699][T20285] usb 3-1: Using ep0 maxpacket: 16 [ 1537.813877][T20285] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 1537.815924][T20285] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1537.815951][T20285] usb 3-1: config 0 has no interface number 0 [ 1537.816011][T20285] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1537.816051][T20285] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1537.816090][T20285] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1537.816114][T20285] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1537.816153][T20285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.820537][T20285] usb 3-1: config 0 descriptor?? [ 1537.868213][T20285] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 1537.941813][T22294] hid-multitouch 0003:0EEF:72C4.0027: unknown main item tag 0x0 [ 1537.941849][T22294] hid-multitouch 0003:0EEF:72C4.0027: unknown main item tag 0x0 [ 1537.973444][T22294] hid-multitouch 0003:0EEF:72C4.0027: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 1537.996636][T22855] netlink: 'syz.1.4287': attribute type 8 has an invalid length. [ 1538.164652][T22294] usb 4-1: USB disconnect, device number 114 [ 1538.322288][T22862] fido_id[22862]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1538.325085][T20285] elan 0003:04F3:074D.0028: failed to start in urb: -90 [ 1538.448101][T20285] elan 0003:04F3:074D.0028: Set report error for parm 6: -71 [ 1538.463197][T20285] elan 0003:04F3:074D.0028: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.2-1/input1 [ 1538.463229][T20285] elan 0003:04F3:074D.0028: Input device is not registered [ 1538.497270][T20285] elan 0003:04F3:074D.0028: probe with driver elan failed with error -119 [ 1538.526715][T20285] usb 3-1: USB disconnect, device number 111 [ 1538.643609][T22867] fido_id[22867]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1538.846530][T22872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.847260][T22872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.003559][T22880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4308'. [ 1539.181549][ C0] net_ratelimit: 5 callbacks suppressed [ 1539.181571][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1539.181900][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1539.215993][T22891] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1539.271876][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 1539.271910][ T31] audit: type=1326 audit(1791322172.572:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22892 comm="syz.3.4314" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5399e199 code=0x7ffc0000 [ 1539.273123][ T31] audit: type=1326 audit(1791322172.582:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22892 comm="syz.3.4314" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcb5399e199 code=0x7ffc0000 [ 1539.273742][ T31] audit: type=1326 audit(1791322172.582:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22892 comm="syz.3.4314" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5399e199 code=0x7ffc0000 [ 1539.274458][ T31] audit: type=1326 audit(1791322172.582:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22892 comm="syz.3.4314" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5399e199 code=0x7ffc0000 [ 1539.274856][ T31] audit: type=1326 audit(1791322172.582:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22892 comm="syz.3.4314" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcb5399e199 code=0x7ffc0000 [ 1539.275584][ T31] audit: type=1326 audit(1791322172.582:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22892 comm="syz.3.4314" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5399e199 code=0x7ffc0000 [ 1539.275680][ T31] audit: type=1326 audit(1791322172.582:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22892 comm="syz.3.4314" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5399e199 code=0x7ffc0000 [ 1539.523788][T22899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4317'. [ 1539.561657][T20285] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1539.655849][T22906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1539.656357][T22906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.722882][T20285] usb 2-1: not running at top speed; connect to a high speed hub [ 1539.722948][T20285] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 1539.724017][T20285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.891456][T22294] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1540.042403][T22294] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1540.045210][T22294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.048426][T22294] usb 4-1: config 0 descriptor?? [ 1540.057536][T22294] cp210x 4-1:0.0: cp210x converter detected [ 1540.075153][T22910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4322'. [ 1540.075174][T22910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4322'. [ 1540.121672][T22910] xt_CT: No such helper "netbios-ns" [ 1540.222039][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1540.222408][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1540.621928][ T6218] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1540.640998][ C1] port100 2-1:1.0: NFC: Urb failure (status -71) [ 1540.641129][ C1] port100 2-1:1.0: NFC: Urb failure (status -71) [ 1540.646200][T20285] port100 2-1:1.0: NFC: Could not get supported command types [ 1540.664739][T22294] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1540.664791][T22294] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1540.670534][T22294] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1540.677410][T20285] usb 2-1: USB disconnect, device number 102 [ 1540.702404][T22294] usb 4-1: USB disconnect, device number 115 [ 1540.736325][T22294] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1540.736867][T22294] cp210x 4-1:0.0: device disconnected [ 1540.771381][ T6218] usb 3-1: Using ep0 maxpacket: 8 [ 1540.778592][ T6218] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1540.780300][ T6218] usb 3-1: config 0 interface 0 altsetting 168 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1540.780330][ T6218] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1540.780361][ T6218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.833031][ T6218] usb 3-1: config 0 descriptor?? [ 1541.233165][T22930] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1541.260279][ T6218] logitech 0003:046D:C294.0029: unknown main item tag 0x0 [ 1541.260317][ T6218] logitech 0003:046D:C294.0029: unknown main item tag 0x0 [ 1541.260346][ T6218] logitech 0003:046D:C294.0029: unknown main item tag 0x0 [ 1541.260372][ T6218] logitech 0003:046D:C294.0029: unknown main item tag 0x0 [ 1541.260398][ T6218] logitech 0003:046D:C294.0029: unknown main item tag 0x0 [ 1541.260424][ T6218] logitech 0003:046D:C294.0029: unknown main item tag 0x0 [ 1541.260450][ T6218] logitech 0003:046D:C294.0029: unknown main item tag 0x0 [ 1541.260474][ T6218] logitech 0003:046D:C294.0029: unknown main item tag 0x0 [ 1541.261563][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1541.261880][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1541.346114][ T6218] logitech 0003:046D:C294.0029: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.2-1/input0 [ 1541.346372][ T6218] logitech 0003:046D:C294.0029: no inputs found [ 1541.403765][T22933] program syz.1.4331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1541.462999][ T6218] usb 3-1: USB disconnect, device number 112 [ 1541.589404][T22932] fido_id[22932]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1541.673746][T22939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4333'. [ 1541.673786][T22939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4333'. [ 1541.738378][T22939] xt_CT: No such helper "netbios-ns" [ 1541.946243][T22954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4341'. [ 1541.946270][T22954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4341'. [ 1541.946299][T22954] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4341'. [ 1542.065809][T22957] program syz.2.4343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1542.301992][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1542.302357][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1542.411577][T20285] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1542.531997][ T6206] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1542.581501][T20285] usb 3-1: Using ep0 maxpacket: 8 [ 1542.582555][T20285] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1542.587334][T20285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.626966][T20285] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1542.626988][T20285] pvrusb2: ********** [ 1542.626993][T20285] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1542.626999][T20285] pvrusb2: Important functionality might not be entirely working. [ 1542.627014][T20285] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1542.627021][T20285] pvrusb2: ********** [ 1542.704432][ T6206] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1542.705711][ T6206] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.722777][ T6206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.722815][ T6206] usb 2-1: Product: syz [ 1542.722868][ T6206] usb 2-1: Manufacturer: syz [ 1542.722883][ T6206] usb 2-1: SerialNumber: syz [ 1542.804732][ T6206] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1542.894770][ T2351] pvrusb2: Invalid write control endpoint [ 1543.026549][ T2351] pvrusb2: Invalid write control endpoint [ 1543.026571][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1543.026577][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1543.026581][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1543.026606][ T2351] pvrusb2: Device being rendered inoperable [ 1543.034173][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1543.070595][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1543.072949][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1543.072978][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1543.072988][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1543.145929][T22292] usb 3-1: USB disconnect, device number 113 [ 1543.341515][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1543.347756][T22975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4348'. [ 1543.347782][T22975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4348'. [ 1543.569910][T22975] xt_CT: No such helper "netbios-ns" [ 1543.731763][ T6206] gspca_mr97310a: reg read [21] error -110 [ 1543.731931][ T6206] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -110 [ 1543.849495][T22979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4349'. [ 1543.967475][T22979] xt_CT: No such helper "netbios-ns" [ 1544.172310][ T6206] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1544.328092][T22996] netlink: 'syz.4.4356': attribute type 1 has an invalid length. [ 1544.342651][ T6206] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1544.345080][ T6206] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.348214][ T6206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.348238][ T6206] usb 3-1: Product: syz [ 1544.348247][ T6206] usb 3-1: Manufacturer: syz [ 1544.348254][ T6206] usb 3-1: SerialNumber: syz [ 1544.385349][ C0] net_ratelimit: 1 callbacks suppressed [ 1544.385368][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1544.385639][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1544.397569][ T6206] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1544.456774][T23000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1544.462519][T23000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1544.551418][T22292] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1544.702261][T22292] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1544.710126][T22292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.710153][T22292] usb 4-1: Product: syz [ 1544.710167][T22292] usb 4-1: Manufacturer: syz [ 1544.710181][T22292] usb 4-1: SerialNumber: syz [ 1544.746107][T22292] usb 4-1: config 0 descriptor?? [ 1544.759583][T22292] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1544.774874][T22292] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1544.776830][T22292] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1544.776881][T22292] usb 4-1: media controller created [ 1544.825883][T22292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1544.914054][T22292] DVB: Unable to find symbol mt352_attach() [ 1545.049839][T22292] DVB: Unable to find symbol nxt6000_attach() [ 1545.049858][T22292] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1545.073212][T22292] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input154 [ 1545.078825][T22292] dvb-usb: schedule remote query interval to 1000 msecs. [ 1545.078845][T22292] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1545.078862][T22292] dvb-usb: bulk message failed: -22 (7/0) [ 1545.078889][T22292] dvb-usb: bulk message failed: -22 (7/0) [ 1545.126657][T22292] usb 4-1: USB disconnect, device number 116 [ 1545.232480][T22292] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1545.330565][ T6206] gspca_mr97310a: reg read [21] error -110 [ 1545.330655][ T6206] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -110 [ 1545.388823][ T6206] usb 2-1: USB disconnect, device number 103 [ 1545.421532][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1545.421816][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1545.554253][T23010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.554604][T23010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1546.063287][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.063345][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.462026][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1546.462403][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1546.677444][T23040] sg_write: data in/out 270376/136 bytes for SCSI command 0x0-- guessing data in; [ 1546.677444][T23040] program syz.4.4371 not setting count and/or reply_len properly [ 1546.848469][T23044] __nla_validate_parse: 1 callbacks suppressed [ 1546.848489][T23044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4375'. [ 1546.848504][T23044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4375'. [ 1546.879104][T22292] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1546.970430][T23044] xt_CT: No such helper "netbios-ns" [ 1547.033888][T22292] usb 4-1: Using ep0 maxpacket: 16 [ 1547.035651][T22292] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1547.037210][T22292] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1547.037239][T22292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1547.084541][T22292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.084569][T22292] usb 4-1: Product: syz [ 1547.084584][T22292] usb 4-1: Manufacturer: syz [ 1547.084597][T22292] usb 4-1: SerialNumber: syz [ 1547.090046][T22292] usb 4-1: config 0 descriptor?? [ 1547.128663][T22292] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1547.128695][T22292] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1547.306172][T20285] usb 3-1: USB disconnect, device number 114 [ 1547.414121][ T6206] wiimote 0005:057E:0330.002A: item fetching failed at offset 3/4 [ 1547.415469][ T6206] wiimote 0005:057E:0330.002A: HID parse failed [ 1547.420810][ T6206] wiimote 0005:057E:0330.002A: probe with driver wiimote failed with error -22 [ 1547.501565][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1547.501947][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1547.780630][T22292] em28xx 4-1:0.0: unknown em28xx chip ID (76) [ 1547.986700][T22292] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1547.989517][T22292] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1547.989537][T22292] em28xx 4-1:0.0: No AC97 audio processor [ 1548.031766][T22292] usb 4-1: USB disconnect, device number 117 [ 1548.053030][T22292] em28xx 4-1:0.0: Disconnecting em28xx [ 1548.058489][T22292] em28xx: Freeing device [ 1548.083196][T20285] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1548.235249][T20285] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1548.255433][T20285] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1548.255490][T20285] usb 2-1: config 0 has no interface number 0 [ 1548.258567][T20285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.258611][T20285] usb 2-1: Product: syz [ 1548.258730][T20285] usb 2-1: Manufacturer: syz [ 1548.258745][T20285] usb 2-1: SerialNumber: syz [ 1548.267984][T20285] usb 2-1: config 0 descriptor?? [ 1548.486420][T20285] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1548.503639][T20285] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1548.503902][T20285] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1548.503939][T20285] usb 2-1: media controller created [ 1548.542008][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1548.542346][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1548.552782][T20285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1548.733956][T20285] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1548.998402][T20285] usb 2-1: USB disconnect, device number 104 [ 1549.159389][T23087] binder: 23085:23087 ioctl c0306201 0 returned -14 [ 1549.194351][T23087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.196014][T23087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1549.515751][T23091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4393'. [ 1549.515795][T23091] netlink: 'syz.1.4393': attribute type 1 has an invalid length. [ 1549.542678][T23091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4393'. [ 1549.542716][T23091] netlink: 'syz.1.4393': attribute type 1 has an invalid length. [ 1549.581569][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1549.581915][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1549.659027][T23093] usb usb8: usbfs: process 23093 (syz.3.4394) did not claim interface 0 before use [ 1550.081683][T20285] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1550.181827][T23098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.200672][T23098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.262002][T20285] usb 2-1: Using ep0 maxpacket: 8 [ 1550.269664][T20285] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1550.295355][T20285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.335079][T20285] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1550.335106][T20285] pvrusb2: ********** [ 1550.335111][T20285] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1550.335117][T20285] pvrusb2: Important functionality might not be entirely working. [ 1550.335133][T20285] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1550.335139][T20285] pvrusb2: ********** [ 1550.577567][ T2351] pvrusb2: Invalid write control endpoint [ 1550.621937][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1550.624642][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1550.853025][T23105] tipc: Bearer : already 2 bearers with priority 10 [ 1550.853045][T23105] tipc: Bearer : trying with adjusted priority [ 1550.853481][T23105] tipc: Enabled bearer , priority 9 [ 1550.861116][ T2351] pvrusb2: Invalid write control endpoint [ 1550.861125][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1550.861141][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1550.861146][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1550.861152][ T2351] pvrusb2: Device being rendered inoperable [ 1550.861184][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1550.861225][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1550.874381][ T6206] usb 2-1: USB disconnect, device number 105 [ 1550.978269][T23103] netlink: 'syz.2.4392': attribute type 8 has an invalid length. [ 1551.030049][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1551.030079][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1551.030105][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1551.661529][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1551.661804][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1551.775992][T23116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4402'. [ 1551.776015][T23116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4402'. [ 1551.929380][T23116] xt_CT: No such helper "netbios-ns" [ 1552.131640][ T6206] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1552.312784][ T6206] usb 4-1: Using ep0 maxpacket: 16 [ 1552.313936][ T6206] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1552.340372][ T6206] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1552.340438][ T6206] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1552.340481][ T6206] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1552.340546][ T6206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.390003][T23134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4410'. [ 1552.390026][T23134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4410'. [ 1552.411976][ T6206] usb 4-1: config 0 descriptor?? [ 1552.412834][T23123] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1552.468155][T23134] xt_CT: No such helper "netbios-ns" [ 1552.491653][T23139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1552.492083][T23139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.564978][T23141] binder: 23140:23141 ioctl c0306201 0 returned -14 [ 1552.701915][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1552.702236][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1552.842167][T20285] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1552.870272][ T6206] hid_parser_main: 30 callbacks suppressed [ 1552.870289][ T6206] samsung 0003:0419:0001.002B: unknown main item tag 0x0 [ 1552.870319][ T6206] samsung 0003:0419:0001.002B: unknown main item tag 0x0 [ 1552.870345][ T6206] samsung 0003:0419:0001.002B: unknown main item tag 0x0 [ 1552.870371][ T6206] samsung 0003:0419:0001.002B: unknown main item tag 0x0 [ 1552.870386][ T6206] samsung 0003:0419:0001.002B: unknown main item tag 0x0 [ 1552.870414][ T6206] samsung 0003:0419:0001.002B: unknown main item tag 0x0 [ 1552.870439][ T6206] samsung 0003:0419:0001.002B: unknown main item tag 0x0 [ 1552.870454][ T6206] samsung 0003:0419:0001.002B: unknown main item tag 0x0 [ 1552.870480][ T6206] samsung 0003:0419:0001.002B: unknown main item tag 0x0 [ 1552.870505][ T6206] samsung 0003:0419:0001.002B: unknown main item tag 0x0 [ 1552.976855][ T6206] input: HID 0419:0001 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0419:0001.002B/input/input155 [ 1553.053492][ T6206] samsung 0003:0419:0001.002B: input,hidraw0: USB HID v7f.fd Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 1553.061633][T20285] usb 3-1: Using ep0 maxpacket: 8 [ 1553.074143][T20285] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1553.100872][T20285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.120796][ T6206] usb 4-1: USB disconnect, device number 118 [ 1553.180506][T20285] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1553.180529][T20285] pvrusb2: ********** [ 1553.180533][T20285] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1553.180540][T20285] pvrusb2: Important functionality might not be entirely working. [ 1553.180545][T20285] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1553.180561][T20285] pvrusb2: ********** [ 1553.421562][ T2351] pvrusb2: Invalid write control endpoint [ 1553.453684][T23148] fido_id[23148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1553.650393][T22292] usb 3-1: USB disconnect, device number 115 [ 1553.735743][T23155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.741567][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1553.741963][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1553.801910][T23155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.813961][ T2351] pvrusb2: Invalid write control endpoint [ 1553.813990][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1553.814000][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1553.848731][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1553.848761][ T2351] pvrusb2: Device being rendered inoperable [ 1553.848834][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1553.848927][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1553.863505][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1553.863523][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1553.863546][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1554.068309][T23160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4420'. [ 1554.242615][T20285] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1554.303241][T23166] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4422'. [ 1554.418755][T20285] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1554.418812][T20285] usb 2-1: too many configurations: 181, using maximum allowed: 8 [ 1554.420843][T20285] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1554.420876][T20285] usb 2-1: can't read configurations, error -71 [ 1554.754112][T23175] Set syz1 is full, maxelem 246 reached [ 1554.782040][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1554.782409][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1555.230074][T23184] netlink: 'syz.3.4421': attribute type 8 has an invalid length. [ 1555.651648][T20285] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1555.821663][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1555.822062][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1555.825255][T20285] usb 2-1: Using ep0 maxpacket: 16 [ 1555.828182][T20285] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1555.865565][T20285] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.865629][T20285] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.865665][T20285] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1555.865704][T20285] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1555.865767][T20285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.884805][T20285] usb 2-1: config 0 descriptor?? [ 1556.011155][T23197] xt_hashlimit: size too large, truncated to 1048576 [ 1556.350704][T20285] hid (null): report_id 34376 is invalid [ 1556.350780][T20285] hid (null): invalid report_size 29285 [ 1556.351136][T20285] hid (null): invalid report_size 29285 [ 1556.351240][T20285] hid (null): report_id 34376 is invalid [ 1556.353397][T20285] hid (null): report_id 0 is invalid [ 1556.353459][T20285] hid (null): global environment stack underflow [ 1556.353499][T20285] hid (null): unknown global tag 0xc [ 1556.355331][T20285] hid (null): unknown global tag 0xe [ 1556.355366][T20285] hid (null): unknown global tag 0xc [ 1556.355434][T20285] hid (null): unknown global tag 0xc [ 1556.553586][T20285] usb 2-1: USB disconnect, device number 108 [ 1556.861913][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1556.862204][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1556.935116][T23212] binder: 23211:23212 ioctl c0306201 0 returned -14 [ 1557.231712][ T6218] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1557.381614][ T6218] usb 3-1: Using ep0 maxpacket: 8 [ 1557.382867][ T6218] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1557.419535][ T6218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.450358][ T6218] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1557.450376][ T6218] pvrusb2: ********** [ 1557.450384][ T6218] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1557.450396][ T6218] pvrusb2: Important functionality might not be entirely working. [ 1557.450404][ T6218] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1557.450415][ T6218] pvrusb2: ********** [ 1557.663699][ T2351] pvrusb2: Invalid write control endpoint [ 1557.867730][ T2351] pvrusb2: Invalid write control endpoint [ 1557.867776][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1557.867785][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1557.867810][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1557.867821][ T2351] pvrusb2: Device being rendered inoperable [ 1557.868240][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1557.868334][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1557.881747][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1557.881777][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1557.881803][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1557.908503][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1557.908800][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1557.983429][T20285] usb 3-1: USB disconnect, device number 116 [ 1558.250488][T23225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4444'. [ 1558.250511][T23225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4444'. [ 1558.407898][T23225] xt_CT: No such helper "netbios-ns" [ 1558.438788][T23230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4445'. [ 1558.438841][T23230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4445'. [ 1558.942023][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1559.029648][T23236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4447'. [ 1559.029694][T23236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4447'. [ 1559.231496][T23236] xt_CT: No such helper "netbios-ns" [ 1559.981589][ C0] net_ratelimit: 1 callbacks suppressed [ 1559.981610][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1559.981918][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1560.043386][T23256] binder: 23254:23256 ioctl c0306201 0 returned -14 [ 1560.127049][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4454'. [ 1560.127891][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4454'. [ 1560.525156][T23264] netlink: 'syz.4.4458': attribute type 32 has an invalid length. [ 1560.525178][T23264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4458'. [ 1560.525203][T23264] bond0: option coupled_control: mode dependency failed, not supported in mode balance-alb(6) [ 1560.561820][ T6218] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1560.713392][ T6218] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1560.720617][ T6218] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.743959][ T6218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.743985][ T6218] usb 3-1: Product: syz [ 1560.743999][ T6218] usb 3-1: Manufacturer: syz [ 1560.744013][ T6218] usb 3-1: SerialNumber: syz [ 1560.789309][ T6218] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1561.022086][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1561.022443][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1561.693692][T23269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.708673][T23269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.741996][ T6218] gspca_mr97310a: reg read [21] error -110 [ 1561.742079][ T6218] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -110 [ 1562.061557][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1562.061933][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1562.148553][T23272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4461'. [ 1562.808216][T23278] sg_write: data in/out 372224/136 bytes for SCSI command 0x0-- guessing data in; [ 1562.808216][T23278] program syz.4.4463 not setting count and/or reply_len properly [ 1562.962668][T23276] xt_CT: No such helper "netbios-ns" [ 1563.102112][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1563.102512][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1563.300506][T23286] __nla_validate_parse: 5 callbacks suppressed [ 1563.300525][T23286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4466'. [ 1563.300542][T23286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4466'. [ 1563.384780][ T6218] usb 3-1: USB disconnect, device number 117 [ 1563.463986][T23289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1563.527204][T23286] xt_CT: No such helper "netbios-ns" [ 1564.002034][T20285] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1564.029342][T23307] binder: 23306:23307 ioctl c0306201 0 returned -14 [ 1564.060269][T23307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1564.061624][T23307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1564.141602][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1564.141965][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1564.170080][T20285] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1564.182796][T20285] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1564.182854][T20285] usb 2-1: config 0 has no interface number 0 [ 1564.188559][T20285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.188585][T20285] usb 2-1: Product: syz [ 1564.188593][T20285] usb 2-1: Manufacturer: syz [ 1564.188600][T20285] usb 2-1: SerialNumber: syz [ 1564.219501][ T6206] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1564.248884][T20285] usb 2-1: config 0 descriptor?? [ 1564.393531][ T6206] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1564.394828][ T6206] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1564.394869][ T6206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1564.396139][ T6206] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1564.396154][ T6206] usb 4-1: Manufacturer: syz [ 1564.452277][ T6206] usb 4-1: config 0 descriptor?? [ 1564.489188][T20285] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1564.503016][T20285] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1564.503315][T20285] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1564.503360][T20285] usb 2-1: media controller created [ 1564.555541][T20285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1564.621674][ T6206] rc_core: IR keymap rc-hauppauge not found [ 1564.621732][ T6206] Registered IR keymap rc-empty [ 1564.625641][ T6206] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1564.663283][ T6206] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input156 [ 1564.723590][T20285] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1564.896824][T23318] rc rc0: two consecutive events of type space [ 1564.900605][T23320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4481'. [ 1564.935573][T20285] usb 2-1: USB disconnect, device number 109 [ 1565.097815][ T6218] usb 4-1: USB disconnect, device number 119 [ 1565.181916][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1565.182271][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1565.219215][T23326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4482'. [ 1565.219270][T23326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4482'. [ 1565.548537][ T31] audit: type=1326 audit(1791322198.852:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23330 comm="syz.1.4485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa83919e199 code=0x0 [ 1565.588682][T23335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.592117][T23335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.834911][T23335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.835329][T23335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.221567][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1566.221926][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1566.707487][T23347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.710958][T23347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.740003][T23346] binder: 23345:23346 ioctl c0306201 0 returned -14 [ 1567.011625][ T6218] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1567.163376][ T6218] usb 2-1: Using ep0 maxpacket: 8 [ 1567.164133][ T6218] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1567.167205][ T6218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.215149][ T6218] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1567.215169][ T6218] pvrusb2: ********** [ 1567.215176][ T6218] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1567.215187][ T6218] pvrusb2: Important functionality might not be entirely working. [ 1567.215198][ T6218] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1567.215208][ T6218] pvrusb2: ********** [ 1567.261995][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1567.262321][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1567.426964][ T2351] pvrusb2: Invalid write control endpoint [ 1567.661017][T22292] usb 2-1: USB disconnect, device number 110 [ 1567.704689][ T2351] pvrusb2: Invalid write control endpoint [ 1567.704704][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1567.704713][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1567.704722][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1567.704731][ T2351] pvrusb2: Device being rendered inoperable [ 1567.704769][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1567.704813][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1567.705627][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1567.705638][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1567.705648][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1568.161741][ T6218] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1568.301584][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1568.301918][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1568.328863][ T31] audit: type=1326 audit(1791322201.632:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.4.4495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1568.328960][ T31] audit: type=1326 audit(1791322201.632:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.4.4495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1568.329048][ T31] audit: type=1326 audit(1791322201.632:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.4.4495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1568.329121][ T31] audit: type=1326 audit(1791322201.632:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.4.4495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1568.329192][ T31] audit: type=1326 audit(1791322201.632:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.4.4495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1568.351463][ T31] audit: type=1326 audit(1791322201.632:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.4.4495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1568.351519][ T31] audit: type=1326 audit(1791322201.632:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.4.4495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1568.351580][ T31] audit: type=1326 audit(1791322201.632:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.4.4495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1568.351617][ T31] audit: type=1326 audit(1791322201.632:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.4.4495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1568.353380][ T6218] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1568.364542][ T6218] usb 4-1: config 0 has no interfaces? [ 1568.364577][ T6218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.368989][ T6218] usb 4-1: config 0 descriptor?? [ 1568.639118][ T6218] usb 4-1: USB disconnect, device number 120 [ 1569.274011][T23383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1569.280026][T23383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1569.302405][T20285] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1569.342107][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1569.342465][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1569.484088][T20285] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1569.486260][T20285] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.489695][T20285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.489726][T20285] usb 3-1: Product: syz [ 1569.489734][T20285] usb 3-1: Manufacturer: syz [ 1569.489752][T20285] usb 3-1: SerialNumber: syz [ 1569.552481][T20285] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1569.581774][ T6218] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1569.744538][ T6218] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1569.763685][ T6218] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.765588][ T6218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.765610][ T6218] usb 4-1: Product: syz [ 1569.765624][ T6218] usb 4-1: Manufacturer: syz [ 1569.765637][ T6218] usb 4-1: SerialNumber: syz [ 1569.771906][ T6218] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1570.381634][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1570.382032][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1570.571866][T20285] gspca_mr97310a: reg read [21] error -110 [ 1570.571969][T20285] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -110 [ 1570.691632][ T6218] gspca_mr97310a: reg read [21] error -110 [ 1570.691723][ T6218] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -110 [ 1571.406836][T23415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.407309][T23415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.410898][T23413] netlink: 'syz.1.4507': attribute type 8 has an invalid length. [ 1571.422007][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1571.422340][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1571.789167][T23419] program syz.1.4516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1572.059552][T23424] batadv_slave_1: entered promiscuous mode [ 1572.060190][T23423] batadv_slave_1: left promiscuous mode [ 1572.166066][T20285] usb 3-1: USB disconnect, device number 118 [ 1572.254233][T23428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.256913][T23428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.307442][ T6218] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1572.323691][T22292] usb 4-1: USB disconnect, device number 121 [ 1572.461539][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1572.461846][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1572.475050][ T6218] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1572.477459][ T6218] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1572.477483][ T6218] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1572.479031][T23428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.482560][ T6218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.482582][ T6218] usb 2-1: Product: syz [ 1572.482596][ T6218] usb 2-1: Manufacturer: syz [ 1572.482609][ T6218] usb 2-1: SerialNumber: syz [ 1572.484436][T23428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.520127][ T6218] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 1572.546071][ T6218] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1572.546071][ T6218] Please send a copy of this message to and [ 1572.963818][T23447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4527'. [ 1572.963842][T23447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4527'. [ 1572.983141][ T6218] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 1573.039015][T23445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4524'. [ 1573.039039][T23445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4524'. [ 1573.088444][T23447] xt_CT: No such helper "netbios-ns" [ 1573.120148][T23445] xt_CT: No such helper "netbios-ns" [ 1573.148724][ T6218] usb 2-1: USB disconnect, device number 111 [ 1573.251882][T23455] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4530'. [ 1573.502052][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1573.502397][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1573.621593][T20285] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1573.772670][T20285] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1573.775748][T20285] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.780774][T20285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.780828][T20285] usb 4-1: Product: syz [ 1573.780860][T20285] usb 4-1: Manufacturer: syz [ 1573.780890][T20285] usb 4-1: SerialNumber: syz [ 1573.843765][T20285] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1574.339533][T23474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.340121][T23474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.541513][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1574.541798][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1574.761664][T20285] gspca_mr97310a: reg read [21] error -110 [ 1574.761742][T20285] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -110 [ 1575.032118][T23480] netlink: 'syz.2.4533': attribute type 8 has an invalid length. [ 1575.581986][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1575.582340][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1575.728646][T23495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4545'. [ 1575.728686][T23495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4545'. [ 1575.971493][T23495] xt_CT: No such helper "netbios-ns" [ 1576.273040][T23504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1576.273427][T23504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1576.396085][T23505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4547'. [ 1576.396126][T23505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4547'. [ 1576.448511][T20285] usb 4-1: USB disconnect, device number 122 [ 1576.621579][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1576.621952][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1577.149714][T23513] binder: 23512:23513 ioctl c0306201 0 returned -14 [ 1577.481567][T20285] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1577.642163][T20285] usb 4-1: Using ep0 maxpacket: 8 [ 1577.649069][T20285] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1577.666212][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1577.666515][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1577.696383][T20285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.730902][T23521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4554'. [ 1577.747279][T20285] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1577.747290][T20285] pvrusb2: ********** [ 1577.747305][T20285] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1577.747311][T20285] pvrusb2: Important functionality might not be entirely working. [ 1577.747316][T20285] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1577.747322][T20285] pvrusb2: ********** [ 1577.945257][ T2351] pvrusb2: Invalid write control endpoint [ 1577.967384][T20285] usb 4-1: USB disconnect, device number 123 [ 1578.121092][T23524] binder: 23523:23524 ioctl c0306201 0 returned -14 [ 1578.211545][ T2351] pvrusb2: Invalid write control endpoint [ 1578.211560][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1578.211570][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1578.211578][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1578.211588][ T2351] pvrusb2: Device being rendered inoperable [ 1578.212010][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1578.212056][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1578.218226][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1578.218242][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1578.218252][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1578.701598][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1578.701948][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1579.302076][T23535] veth0_to_bond: Caught tx_queue_len zero misconfig [ 1579.614854][T23543] __nla_validate_parse: 1 callbacks suppressed [ 1579.614891][T23543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4559'. [ 1579.614922][T23543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4559'. [ 1579.721554][T22292] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1579.742001][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1579.742339][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1579.871957][T22292] usb 4-1: Using ep0 maxpacket: 32 [ 1579.872672][T22292] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1579.873672][T22292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.876684][T22292] usb 4-1: config 0 descriptor?? [ 1579.971429][ T6218] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1580.061458][T21687] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1580.097999][T22292] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1580.112048][T22292] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1580.112073][T22292] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1580.139546][ T6218] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1580.151746][ T6218] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.151769][ T6218] usb 2-1: config 0 has no interfaces? [ 1580.153279][ T6218] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1580.153302][ T6218] usb 2-1: Manufacturer: syz [ 1580.205424][ T6218] usb 2-1: config 0 descriptor?? [ 1580.222024][T21687] usb 3-1: Using ep0 maxpacket: 8 [ 1580.237550][T21687] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1580.250982][T21687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.301679][T21687] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1580.301697][T21687] pvrusb2: ********** [ 1580.301704][T21687] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1580.301716][T21687] pvrusb2: Important functionality might not be entirely working. [ 1580.301725][T21687] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1580.301736][T21687] pvrusb2: ********** [ 1580.459571][ T6206] usb 2-1: USB disconnect, device number 112 [ 1580.494574][ T2351] pvrusb2: Invalid write control endpoint [ 1580.633762][ T2351] pvrusb2: Invalid write control endpoint [ 1580.633778][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1580.633789][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1580.633797][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1580.633807][ T2351] pvrusb2: Device being rendered inoperable [ 1580.635810][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1580.635859][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 1580.749165][ T6218] usb 3-1: USB disconnect, device number 119 [ 1580.765651][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1580.765666][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1580.765676][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1580.789720][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1580.790001][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1581.246902][T23558] binder: 23557:23558 ioctl c0306201 0 returned -14 [ 1581.646735][T23565] binder: 23564:23565 ioctl c0306201 0 returned -14 [ 1581.821863][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1581.822133][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1581.931650][ T6206] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1582.002224][ T6218] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1582.101791][ T6206] usb 3-1: Using ep0 maxpacket: 8 [ 1582.118411][ T6206] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1582.143138][ T6206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.160193][ T6218] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1582.176658][ T6218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.176684][ T6218] usb 2-1: Product: syz [ 1582.176698][ T6218] usb 2-1: Manufacturer: syz [ 1582.176712][ T6218] usb 2-1: SerialNumber: syz [ 1582.217242][ T6218] usb 2-1: config 0 descriptor?? [ 1582.240377][ T6206] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1582.240397][ T6206] pvrusb2: ********** [ 1582.240401][ T6206] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1582.240408][ T6206] pvrusb2: Important functionality might not be entirely working. [ 1582.240413][ T6206] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1582.240429][ T6206] pvrusb2: ********** [ 1582.282255][ T6218] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1582.504733][ T2351] pvrusb2: Invalid write control endpoint [ 1582.519455][ T6206] usb 3-1: USB disconnect, device number 120 [ 1582.646439][ T2351] pvrusb2: Invalid write control endpoint [ 1582.646454][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1582.646463][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1582.646471][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1582.646481][ T2351] pvrusb2: Device being rendered inoperable [ 1582.646548][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1582.646761][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 1582.709002][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1582.709016][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1582.709026][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1582.861554][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1582.861890][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1583.574919][T21431] Buffer I/O error on dev loop7, logical block 4095, async page read [ 1583.901980][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1583.902360][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1584.061110][T23585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.077344][T23585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.321828][ T6206] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1584.472166][ T6206] usb 3-1: Using ep0 maxpacket: 8 [ 1584.473749][ T6206] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1584.478693][ T6206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.525647][ T6206] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1584.525669][ T6206] pvrusb2: ********** [ 1584.525673][ T6206] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1584.525680][ T6206] pvrusb2: Important functionality might not be entirely working. [ 1584.525684][ T6206] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1584.525701][ T6206] pvrusb2: ********** [ 1584.739992][ T2351] pvrusb2: Invalid write control endpoint [ 1584.828965][ T6206] usb 2-1: USB disconnect, device number 113 [ 1584.934177][ T2351] pvrusb2: Invalid write control endpoint [ 1584.934198][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1584.934204][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1584.934209][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1584.934215][ T2351] pvrusb2: Device being rendered inoperable [ 1584.936382][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1584.936437][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 1584.941522][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1584.941790][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1584.952532][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1584.952562][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1584.952588][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1585.089491][ T6218] usb 3-1: USB disconnect, device number 121 [ 1585.975964][T23620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1585.978921][T23620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1585.981936][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1585.982251][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1586.022623][ T6206] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1586.192530][ T6206] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1586.194154][ T6206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.200723][ T6206] usb 2-1: config 0 descriptor?? [ 1586.442108][ T6206] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1586.665190][ T6206] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 1586.665207][ T6206] [drm] Initialized udl on minor 1 [ 1586.792677][T23617] netlink: 'syz.2.4587': attribute type 8 has an invalid length. [ 1587.021618][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1587.021963][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1587.093428][T23626] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 1587.093487][T23626] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1587.165227][T23628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1587.165668][T23628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.004973][T23645] binder: 23644:23645 ioctl c0306201 0 returned -14 [ 1588.019593][T23645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.034431][T23645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.061929][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1588.062262][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1588.531498][T20285] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1588.692462][T20285] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1588.693693][T20285] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.696323][T20285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.696360][T20285] usb 3-1: Product: syz [ 1588.696380][T20285] usb 3-1: Manufacturer: syz [ 1588.696393][T20285] usb 3-1: SerialNumber: syz [ 1588.724904][T20285] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1588.836104][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4605'. [ 1588.836151][T23658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4605'. [ 1589.101584][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1589.101990][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1589.674612][T20285] gspca_mr97310a: reg read [21] error -110 [ 1589.674705][T20285] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -110 [ 1589.721886][T23681] binder: 23680:23681 ioctl c0306201 0 returned -14 [ 1590.141996][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1590.142379][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1591.181562][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1591.181935][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1591.366095][T20285] usb 3-1: USB disconnect, device number 122 [ 1591.742168][ T6206] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1591.743077][ T6206] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1591.773265][T20285] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1591.787027][T20285] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1591.787415][T20285] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1591.797902][ T6206] usb 2-1: USB disconnect, device number 114 [ 1591.803919][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1591.803935][ T31] audit: type=1326 audit(1791322225.112:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23694 comm="syz.2.4619" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4d59e199 code=0x7ffc0000 [ 1591.803974][ T31] audit: type=1326 audit(1791322225.112:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23694 comm="syz.2.4619" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4d59e199 code=0x7ffc0000 [ 1591.816178][ T31] audit: type=1326 audit(1791322225.112:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23694 comm="syz.2.4619" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f6f4d59e199 code=0x7ffc0000 [ 1591.816227][ T31] audit: type=1326 audit(1791322225.112:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23694 comm="syz.2.4619" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4d59e199 code=0x7ffc0000 [ 1591.816265][ T31] audit: type=1326 audit(1791322225.112:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23694 comm="syz.2.4619" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4d59e199 code=0x7ffc0000 [ 1591.840931][ T31] audit: type=1326 audit(1791322225.132:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23694 comm="syz.2.4619" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f6f4d59e199 code=0x7ffc0000 [ 1591.840981][ T31] audit: type=1326 audit(1791322225.132:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23694 comm="syz.2.4619" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4d59e199 code=0x7ffc0000 [ 1591.841020][ T31] audit: type=1326 audit(1791322225.132:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23694 comm="syz.2.4619" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4d59e199 code=0x7ffc0000 [ 1591.841057][ T31] audit: type=1326 audit(1791322225.132:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23694 comm="syz.2.4619" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f6f4d59e199 code=0x7ffc0000 [ 1591.841095][ T31] audit: type=1326 audit(1791322225.132:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23694 comm="syz.2.4619" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4d59e199 code=0x7ffc0000 [ 1592.222014][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1592.222399][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1592.431632][ T6206] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1592.612341][ T6206] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1592.631675][ T6206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.838552][T23720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1592.854227][T23720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1592.973743][T23724] loop8: detected capacity change from 0 to 7 [ 1592.977266][T23724] Dev loop8: unable to read RDB block 7 [ 1592.977308][T23724] loop8: unable to read partition table [ 1592.977498][T23724] loop8: partition table beyond EOD, truncated [ 1592.977950][T23724] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1593.239357][T23727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4632'. [ 1593.239562][T23727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4632'. [ 1593.261538][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1593.261900][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1593.487338][ T6206] usb 2-1: Firmware version (0.0) predates our first public release. [ 1593.487382][ T6206] usb 2-1: Please update to version 0.2 or newer [ 1593.633982][ T6206] usb 2-1: USB disconnect, device number 115 [ 1594.301995][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1594.302314][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1595.306671][T23757] netlink: 'syz.0.4636': attribute type 8 has an invalid length. [ 1595.341526][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1595.341890][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1596.381996][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1596.382335][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1596.747575][T23793] loop9: detected capacity change from 0 to 7 [ 1596.763516][T23793] Dev loop9: unable to read RDB block 7 [ 1596.763571][T23793] loop9: unable to read partition table [ 1596.763760][T23793] loop9: partition table beyond EOD, truncated [ 1596.763792][T23793] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1596.974399][T23800] binder: 23799:23800 ioctl c0306201 0 returned -14 [ 1596.992308][T23800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1596.992744][T23800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.421537][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1597.421875][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1597.581707][ T6218] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1597.731369][ T6218] usb 3-1: Using ep0 maxpacket: 8 [ 1597.732125][ T6218] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1597.733283][ T6218] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1597.733329][ T6218] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1597.733350][ T6218] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1597.733372][ T6218] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1597.733394][ T6218] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1597.733431][ T6218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.948237][ T6218] usb 3-1: usb_control_msg returned -32 [ 1597.948285][ T6218] usbtmc 3-1:16.0: can't read capabilities [ 1598.313681][T23813] usbtmc 3-1:16.0: control status returned 0 [ 1598.461974][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1598.462322][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1598.516875][ T6218] usb 3-1: USB disconnect, device number 123 [ 1598.860244][T23822] binder: 23821:23822 ioctl c0306201 0 returned -14 [ 1599.134594][ T6206] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1599.291684][ T6206] usb 2-1: Using ep0 maxpacket: 8 [ 1599.296176][ T6206] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1599.297608][ T6206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.325735][T23837] binder: 23836:23837 ioctl c0306201 0 returned -14 [ 1599.349489][ T6206] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1599.349517][ T6206] pvrusb2: ********** [ 1599.349522][ T6206] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1599.349538][ T6206] pvrusb2: Important functionality might not be entirely working. [ 1599.349544][ T6206] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1599.349550][ T6206] pvrusb2: ********** [ 1599.501513][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1599.501802][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1599.539207][ T2351] pvrusb2: Invalid write control endpoint [ 1599.670544][ T2351] pvrusb2: Invalid write control endpoint [ 1599.670554][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1599.670560][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1599.670575][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1599.670581][ T2351] pvrusb2: Device being rendered inoperable [ 1599.673417][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1599.673529][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 1599.707022][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1599.707053][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1599.707063][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1599.843089][ T6206] usb 2-1: USB disconnect, device number 116 [ 1600.542006][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1600.542370][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1600.971708][ T6206] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1601.142498][ T6206] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1601.146121][ T6206] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.150210][ T6206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.150242][ T6206] usb 2-1: Product: syz [ 1601.150261][ T6206] usb 2-1: Manufacturer: syz [ 1601.150273][ T6206] usb 2-1: SerialNumber: syz [ 1601.226196][ T6206] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1601.581500][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1601.581788][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1602.141990][ T6206] gspca_mr97310a: reg read [21] error -110 [ 1602.142066][ T6206] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -110 [ 1602.168139][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1602.168156][ T31] audit: type=1326 audit(1791322235.462:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23851 comm="syz.4.4677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1602.168201][ T31] audit: type=1326 audit(1791322235.462:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23851 comm="syz.4.4677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1602.303749][ T31] audit: type=1326 audit(1791322235.612:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23851 comm="syz.4.4677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1602.304007][ T31] audit: type=1326 audit(1791322235.612:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23851 comm="syz.4.4677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1602.304299][ T31] audit: type=1326 audit(1791322235.612:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23851 comm="syz.4.4677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1602.386733][ T31] audit: type=1326 audit(1791322235.672:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23851 comm="syz.4.4677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1602.391731][ T31] audit: type=1326 audit(1791322235.672:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23851 comm="syz.4.4677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1602.391822][ T31] audit: type=1326 audit(1791322235.702:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23851 comm="syz.4.4677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1602.470634][ T31] audit: type=1326 audit(1791322235.772:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23851 comm="syz.4.4677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1602.471749][ T31] audit: type=1326 audit(1791322235.772:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23851 comm="syz.4.4677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac9d9e199 code=0x7ffc0000 [ 1602.621994][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1602.622388][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1602.912067][T23863] team_slave_1: Caught tx_queue_len zero misconfig [ 1603.083079][T23870] batadv_slave_0: entered promiscuous mode [ 1603.083849][T23868] batadv_slave_0: left promiscuous mode [ 1603.158201][T23874] ALSA: mixer_oss: invalid OSS volume 'AF_VSOCK' [ 1603.306311][T23880] binder: 23879:23880 ioctl c0306201 0 returned -14 [ 1603.601745][ T6206] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1603.661633][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1603.662008][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1603.673392][T20285] usb 2-1: USB disconnect, device number 117 [ 1603.767164][ T6206] usb 3-1: Using ep0 maxpacket: 8 [ 1603.768447][ T6206] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1603.776741][ T6206] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1603.776840][ T6206] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1603.776895][ T6206] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1603.778380][ T6206] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1603.778437][ T6206] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1603.778508][ T6206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.888996][T23889] syzkaller1: entered promiscuous mode [ 1603.889019][T23889] syzkaller1: entered allmulticast mode [ 1604.338488][T23896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4695'. [ 1604.338513][T23896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4695'. [ 1604.383153][T23896] xt_CT: No such helper "netbios-ns" [ 1604.590916][T23898] usbtmc 3-1:16.0: simple control status returned bd [ 1604.702097][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1604.702469][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1604.792223][ T6206] usb 3-1: USB disconnect, device number 124 [ 1605.305945][T23904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4697'. [ 1605.306202][T23904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4697'. [ 1605.565080][T23909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4699'. [ 1605.567494][T23909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4699'. [ 1605.741534][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1605.741868][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1606.733345][T23925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1606.741707][T23925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1606.781829][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1606.782113][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1606.976887][T23927] binder: 23926:23927 ioctl c0306201 0 returned -14 [ 1607.484438][T23930] netlink: 'syz.2.4701': attribute type 8 has an invalid length. [ 1607.503521][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.503578][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.616381][T23931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4707'. [ 1607.616406][T23931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4707'. [ 1607.736324][T23931] xt_CT: No such helper "netbios-ns" [ 1607.821541][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1607.821889][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1608.003646][T23934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.005834][T23934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.332243][T23942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4710'. [ 1608.332283][T23942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4710'. [ 1608.862113][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1608.862513][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1609.105006][T23945] xt_CT: No such helper "netbios-ns" [ 1609.698400][T23962] binder: 23961:23962 ioctl c0306201 0 returned -14 [ 1609.713628][T23962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.718613][T23962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1609.901543][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1609.901920][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1610.633042][T23985] binder: 23984:23985 ioctl c0306201 0 returned -14 [ 1610.871413][T21687] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1610.942008][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1610.942361][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1611.021457][T21687] usb 2-1: Using ep0 maxpacket: 8 [ 1611.022969][T21687] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1611.024607][T21687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.036050][T21687] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1611.036065][T21687] pvrusb2: ********** [ 1611.036072][T21687] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1611.036083][T21687] pvrusb2: Important functionality might not be entirely working. [ 1611.036092][T21687] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1611.036103][T21687] pvrusb2: ********** [ 1611.244801][ T2351] pvrusb2: Invalid write control endpoint [ 1611.372589][T23988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.373004][T23988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.376900][ T2351] pvrusb2: Invalid write control endpoint [ 1611.376914][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1611.376923][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1611.376931][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1611.376941][ T2351] pvrusb2: Device being rendered inoperable [ 1611.389772][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1611.389820][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 1611.393641][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1611.393654][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1611.393664][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1611.506232][T21687] usb 2-1: USB disconnect, device number 118 [ 1611.545989][T23992] syzkaller1: entered promiscuous mode [ 1611.546011][T23992] syzkaller1: entered allmulticast mode [ 1611.706080][T23997] binder: 23996:23997 ioctl c0306201 0 returned -14 [ 1611.981579][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1611.981925][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1613.021815][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1613.022079][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1613.411406][T21687] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1613.567353][T21687] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1613.570028][T21687] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1613.570053][T21687] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1613.572532][T21687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.572554][T21687] usb 2-1: Product: syz [ 1613.572568][T21687] usb 2-1: Manufacturer: syz [ 1613.572582][T21687] usb 2-1: SerialNumber: syz [ 1613.826682][T21687] usb 2-1: Limiting number of CPorts to U8_MAX [ 1614.061554][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1614.061901][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1614.683484][T21687] usb 2-1: USB disconnect, device number 119 [ 1614.683684][ C0] usb 2-1: failed to resubmit arpc in-urb: -19 [ 1614.683731][ C0] usb 2-1: failed to resubmit arpc in-urb: -19 [ 1614.683774][ C0] usb 2-1: failed to resubmit in-urb: -19 [ 1614.683817][ C0] usb 2-1: failed to resubmit in-urb: -19 [ 1614.683860][ C0] usb 2-1: failed to resubmit in-urb: -19 [ 1614.683901][ C0] usb 2-1: failed to resubmit in-urb: -19 [ 1614.709279][T21687] usb 2-1: failed to send ARPC request 4: -19 [ 1614.709357][T21687] usb 2-1: failed to execute ARPC: -19 [ 1614.709371][T21687] usb 2-1: failed to flush cport 0: -19 [ 1614.709393][T21687] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 1614.709555][T21687] usb 2-1: failed to send ARPC request 2: -19 [ 1614.709627][T21687] usb 2-1: failed to execute ARPC: -19 [ 1614.709641][T21687] usb 2-1: failed to quiesce cport 0: -19 (0) [ 1614.709658][T21687] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 1614.709788][T21687] usb 2-1: failed to send ARPC request 3: -19 [ 1614.709852][T21687] usb 2-1: failed to execute ARPC: -19 [ 1614.709866][T21687] usb 2-1: failed to clear cport 0: -19 [ 1614.709881][T21687] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 1615.101837][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1615.102099][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1615.139473][T24040] binder: 24039:24040 ioctl c0306201 0 returned -14 [ 1616.000498][T24054] __nla_validate_parse: 2 callbacks suppressed [ 1616.000548][T24054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4754'. [ 1616.017194][T24056] xt_hashlimit: size too large, truncated to 1048576 [ 1616.028643][T24054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4754'. [ 1616.123737][T24060] binder: 24059:24060 ioctl c0306201 0 returned -14 [ 1616.141537][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1616.141905][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1616.274811][T24062] binder: 24061:24062 ioctl c0306201 0 returned -14 [ 1616.381460][T20285] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1616.512393][T21687] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1616.551593][T20285] usb 2-1: Using ep0 maxpacket: 8 [ 1616.553553][T20285] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1616.556715][T20285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.619071][T20285] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1616.619105][T20285] pvrusb2: ********** [ 1616.619129][T20285] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1616.619144][T20285] pvrusb2: Important functionality might not be entirely working. [ 1616.619167][T20285] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1616.619194][T20285] pvrusb2: ********** [ 1616.662016][T21687] usb 3-1: Using ep0 maxpacket: 8 [ 1616.662747][T21687] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1616.664224][T21687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.699074][T21687] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1616.699091][T21687] pvrusb2: ********** [ 1616.699098][T21687] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1616.699109][T21687] pvrusb2: Important functionality might not be entirely working. [ 1616.699118][T21687] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1616.699128][T21687] pvrusb2: ********** [ 1616.801895][ T2351] pvrusb2: Invalid write control endpoint [ 1616.965065][ T2351] pvrusb2: Invalid write control endpoint [ 1616.965082][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1616.965091][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1616.965100][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1616.965108][ T2351] pvrusb2: Device being rendered inoperable [ 1616.967046][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1616.967095][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 1616.969572][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1616.969585][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1616.969595][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1616.969624][ T2351] pvrusb2: Invalid write control endpoint [ 1617.080032][T21687] usb 2-1: USB disconnect, device number 120 [ 1617.173329][T24069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4760'. [ 1617.186093][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1617.187034][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1617.204318][ T6218] usb 3-1: USB disconnect, device number 125 [ 1617.244680][ T2351] pvrusb2: Invalid write control endpoint [ 1617.244694][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1617.244702][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1617.244710][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1617.244720][ T2351] pvrusb2: Device being rendered inoperable [ 1617.253652][ T2351] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1617.253699][ T2351] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 1617.261216][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1617.261230][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1617.261240][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1618.046316][T24081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4764'. [ 1618.046340][T24081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4764'. [ 1618.208923][T24081] xt_CT: No such helper "netbios-ns" [ 1618.221824][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1618.222379][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1618.622371][T21687] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1618.772197][T21687] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1618.773206][T21687] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.776127][T21687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.776151][T21687] usb 2-1: Product: syz [ 1618.776166][T21687] usb 2-1: Manufacturer: syz [ 1618.776180][T21687] usb 2-1: SerialNumber: syz [ 1618.840748][T21687] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1619.028996][T24108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4776'. [ 1619.029070][T24108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4776'. [ 1619.050772][T24105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4774'. [ 1619.050794][T24105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4774'. [ 1619.147164][T24108] xt_CT: No such helper "netbios-ns" [ 1619.148858][T24105] xt_CT: No such helper "netbios-ns" [ 1619.201586][T20285] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1619.262470][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1619.262853][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1619.376192][T20285] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1619.378194][T20285] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.378246][T20285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1619.378344][T20285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.430055][T20285] usb 3-1: config 0 descriptor?? [ 1619.454859][T20285] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1619.454955][T20285] dvb-usb: bulk message failed: -22 (3/0) [ 1619.477734][T20285] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1619.494744][T20285] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1619.494846][T20285] usb 3-1: media controller created [ 1619.504309][T20285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1619.547202][T20285] dvb-usb: bulk message failed: -22 (6/0) [ 1619.547655][T24123] binder: 24122:24123 ioctl c0306201 0 returned -14 [ 1619.548741][T20285] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1619.589575][T20285] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input159 [ 1619.614365][T24123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.614779][T20285] dvb-usb: schedule remote query interval to 150 msecs. [ 1619.614815][T20285] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1619.627220][T24123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.640546][T24123] dvb-usb: bulk message failed: -22 (2/0) [ 1619.751972][T21687] gspca_mr97310a: reg read [21] error -110 [ 1619.752056][T21687] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -110 [ 1619.777343][T20285] dvb-usb: bulk message failed: -22 (1/0) [ 1619.777408][T20285] dvb-usb: error while querying for an remote control event. [ 1619.933229][T20285] dvb-usb: bulk message failed: -22 (1/0) [ 1619.933296][T20285] dvb-usb: error while querying for an remote control event. [ 1619.985243][T24134] syzkaller1: entered promiscuous mode [ 1619.985289][T24134] syzkaller1: entered allmulticast mode [ 1620.102041][T20285] dvb-usb: bulk message failed: -22 (1/0) [ 1620.102074][T20285] dvb-usb: error while querying for an remote control event. [ 1620.138716][T24136] binder: 24135:24136 ioctl c0306201 0 returned -14 [ 1620.261499][T20285] dvb-usb: bulk message failed: -22 (1/0) [ 1620.261566][T20285] dvb-usb: error while querying for an remote control event. [ 1620.301565][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1620.301920][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1620.431478][T20285] dvb-usb: bulk message failed: -22 (1/0) [ 1620.431545][T20285] dvb-usb: error while querying for an remote control event. [ 1620.601510][T20285] dvb-usb: bulk message failed: -22 (1/0) [ 1620.601551][T20285] dvb-usb: error while querying for an remote control event. [ 1620.771522][T20285] dvb-usb: bulk message failed: -22 (1/0) [ 1620.771589][T20285] dvb-usb: error while querying for an remote control event. [ 1620.866979][T24144] syzkaller1: entered promiscuous mode [ 1620.867020][T24144] syzkaller1: entered allmulticast mode [ 1620.953448][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 1620.953483][ T6206] dvb-usb: error while querying for an remote control event. [ 1621.111565][T20285] dvb-usb: bulk message failed: -22 (1/0) [ 1621.111598][T20285] dvb-usb: error while querying for an remote control event. [ 1621.138627][T21687] usb 3-1: USB disconnect, device number 126 [ 1621.219928][T21687] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1621.341851][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1621.342144][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1621.393205][ T6218] usb 2-1: USB disconnect, device number 121 [ 1621.799983][T24155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4793'. [ 1622.016750][T24161] binder: 24160:24161 ioctl c0306201 0 returned -14 [ 1622.271597][ T6218] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1622.381534][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1622.381881][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1622.421484][ T6218] usb 3-1: Using ep0 maxpacket: 8 [ 1622.422194][ T6218] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1622.424922][ T6218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.474160][ T6218] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1622.474177][ T6218] pvrusb2: ********** [ 1622.474184][ T6218] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1622.474196][ T6218] pvrusb2: Important functionality might not be entirely working. [ 1622.474205][ T6218] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1622.474216][ T6218] pvrusb2: ********** [ 1622.631004][T24164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4797'. [ 1622.631029][T24164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4797'. [ 1622.677691][ T2351] pvrusb2: Invalid write control endpoint [ 1622.838483][ T2351] pvrusb2: Invalid write control endpoint [ 1622.838496][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1622.838521][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1622.838529][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1622.838555][ T2351] pvrusb2: Device being rendered inoperable [ 1622.838693][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1622.838791][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 1622.840396][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1622.840425][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1622.840450][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1622.942072][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1622.942089][ T31] audit: type=1326 audit(1791322256.252:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24174 comm="syz.3.4800" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5399e199 code=0x7ffc0000 [ 1622.942145][ T31] audit: type=1326 audit(1791322256.252:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24174 comm="syz.3.4800" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5399e199 code=0x7ffc0000 [ 1622.943173][ T31] audit: type=1326 audit(1791322256.252:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24174 comm="syz.3.4800" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5399e199 code=0x7ffc0000 [ 1622.943218][ T31] audit: type=1326 audit(1791322256.252:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24174 comm="syz.3.4800" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5399e199 code=0x7ffc0000 [ 1622.944438][ T31] audit: type=1326 audit(1791322256.252:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24174 comm="syz.3.4800" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcb5399e199 code=0x7ffc0000 [ 1622.944481][ T31] audit: type=1326 audit(1791322256.252:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24174 comm="syz.3.4800" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5399e199 code=0x7ffc0000 [ 1622.944519][ T31] audit: type=1326 audit(1791322256.252:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24174 comm="syz.3.4800" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5399e199 code=0x7ffc0000 [ 1622.947226][ T31] audit: type=1326 audit(1791322256.252:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24174 comm="syz.3.4800" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb5395e9ce code=0x7ffc0000 [ 1622.948858][ T31] audit: type=1326 audit(1791322256.252:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24174 comm="syz.3.4800" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5399e199 code=0x7ffc0000 [ 1622.948902][ T31] audit: type=1326 audit(1791322256.252:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24174 comm="syz.3.4800" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5399e199 code=0x7ffc0000 [ 1622.959663][T24164] xt_CT: No such helper "netbios-ns" [ 1622.988338][ T6218] usb 3-1: USB disconnect, device number 127 [ 1623.421809][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1623.422077][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1623.430671][ T6252] IPVS: starting estimator thread 0... [ 1623.511469][T24187] IPVS: using max 34 ests per chain, 81600 per kthread [ 1623.640051][T24189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.657500][T24189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.844418][T24196] netlink: 964 bytes leftover after parsing attributes in process `syz.1.4807'. [ 1623.844444][T24196] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1623.876584][T17340] IPVS: stop unused estimator thread 0... [ 1623.889826][T24199] binder: 24198:24199 ioctl c0306201 0 returned -14 [ 1623.922787][T24197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4806'. [ 1623.922842][T24197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4806'. [ 1624.059188][T24203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1624.461544][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1624.461840][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1624.818060][T24210] binder: 24209:24210 ioctl c0306201 0 returned -14 [ 1624.851960][T24210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1624.855814][T24210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1625.501985][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1625.502383][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1625.946942][T24222] binder: 24221:24222 ioctl c0306201 0 returned -14 [ 1625.973470][T24220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4815'. [ 1625.973498][T24220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4815'. [ 1625.989589][T24222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1625.990377][T24222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.160564][T24220] xt_CT: No such helper "netbios-ns" [ 1626.541620][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1627.139611][T24236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4819'. [ 1627.139653][T24236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4819'. [ 1627.356582][T24236] xt_CT: No such helper "netbios-ns" [ 1627.581998][ C0] net_ratelimit: 1 callbacks suppressed [ 1627.582022][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1627.582400][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1627.782948][T24255] netlink: 'syz.1.4830': attribute type 1 has an invalid length. [ 1627.815239][T24255] bond2: entered promiscuous mode [ 1627.815710][T24255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1627.849492][T24255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1627.849845][T24255] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1627.849858][T24255] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1627.859484][T24255] bond2: (slave ip6gre1): making interface the new active one [ 1627.859524][T24255] ip6gre1: entered promiscuous mode [ 1627.869945][T24255] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 1627.961766][ T6218] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1628.091409][ T6218] usb 3-1: device descriptor read/64, error -71 [ 1628.202293][T21687] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1628.331603][ T6218] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1628.352168][T21687] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1628.354002][T21687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.354032][T21687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1628.354052][T21687] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1628.354091][T21687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.360486][T21687] usb 2-1: config 0 descriptor?? [ 1628.481466][ T6218] usb 3-1: device descriptor read/64, error -71 [ 1628.591881][ T6218] usb usb3-port1: attempt power cycle [ 1628.621667][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1628.621941][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1628.820673][T21687] hid_parser_main: 455 callbacks suppressed [ 1628.820699][T21687] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1628.820729][T21687] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1628.820755][T21687] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1628.820781][T21687] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1628.820808][T21687] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1628.820833][T21687] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1628.820857][T21687] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1628.820882][T21687] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1628.820917][T21687] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1628.820943][T21687] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1628.921402][T21687] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1628.931572][ T6218] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1628.972283][ T6218] usb 3-1: device descriptor read/8, error -71 [ 1629.160924][T24274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4838'. [ 1629.160948][T24274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4838'. [ 1629.211546][ T6218] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1629.232163][ T6218] usb 3-1: device descriptor read/8, error -71 [ 1629.232776][T24274] xt_CT: No such helper "netbios-ns" [ 1629.341870][ T6218] usb usb3-port1: unable to enumerate USB device [ 1629.662069][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1629.662457][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1629.737646][T24284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4841'. [ 1629.737670][T24284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4841'. [ 1629.827735][T24284] xt_CT: No such helper "netbios-ns" [ 1629.892730][T24290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4843'. [ 1629.900789][T24290] ip6gre1: entered promiscuous mode [ 1629.900812][T24290] ip6gre1: entered allmulticast mode [ 1629.925814][T17336] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1629.930426][T17336] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1629.948408][T24290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4843'. [ 1629.971882][ T6218] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1630.092025][T24292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4844'. [ 1630.092077][T24292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4844'. [ 1630.194617][ T6218] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1630.492368][T24280] usb 2-1: string descriptor 0 read error: -71 [ 1630.511614][T22294] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1630.517744][T24300] binder: 24299:24300 ioctl c0306201 0 returned -14 [ 1630.663326][T24302] xt_CT: No such helper "netbios-ns" [ 1630.701643][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1630.702001][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1631.131636][T22294] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1631.245441][T24314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1631.250457][T24314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1631.273168][T21687] usb 2-1: USB disconnect, device number 122 [ 1631.292855][T22294] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1631.294050][T22294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.294078][T22294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.294114][T22294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.299115][T22294] usb 3-1: config 0 descriptor?? [ 1631.741869][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1631.742146][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1631.765144][T22294] hid-steam 0003:28DE:1142.002E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1632.255579][T24323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1632.256010][T24323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1632.408244][T22294] usb 3-1: USB disconnect, device number 6 [ 1632.548399][T24326] __nla_validate_parse: 2 callbacks suppressed [ 1632.548421][T24326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4857'. [ 1632.548437][T24326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4857'. [ 1632.616426][T24326] xt_CT: No such helper "netbios-ns" [ 1632.781502][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1632.781785][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1633.651388][T22294] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1633.794788][T24352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4867'. [ 1633.794811][T24352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4867'. [ 1633.803961][T22294] usb 3-1: Using ep0 maxpacket: 8 [ 1633.806033][T22294] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1633.807157][T22294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.811731][T22294] usb 3-1: config 0 descriptor?? [ 1633.821930][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1633.822277][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1633.827922][T22294] usb 3-1: probing VID:PID(0424:012C) [ 1633.851869][T24351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4863'. [ 1633.851898][T24351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4863'. [ 1633.894292][T22294] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 1633.894319][T22294] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1633.894337][T22294] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 1633.894354][T22294] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1633.894375][T22294] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1634.038905][T24351] xt_CT: No such helper "netbios-ns" [ 1634.141580][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1634.247770][T22294] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1634.447288][T22294] usb 3-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 1634.713875][T24361] binder: 24360:24361 ioctl c0306201 0 returned -14 [ 1634.861530][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1634.861872][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1634.915953][T24365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4871'. [ 1634.915996][T24365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4871'. [ 1634.973572][ T6218] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1635.121467][ T6218] usb 2-1: Using ep0 maxpacket: 8 [ 1635.122179][ T6218] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1635.126211][ T6218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.170829][ T6218] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1635.170846][ T6218] pvrusb2: ********** [ 1635.170853][ T6218] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1635.170865][ T6218] pvrusb2: Important functionality might not be entirely working. [ 1635.170874][ T6218] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1635.170885][ T6218] pvrusb2: ********** [ 1635.367758][ T2351] pvrusb2: Invalid write control endpoint [ 1635.477480][ T6218] usb 3-1: USB disconnect, device number 7 [ 1635.479269][T22294] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 1635.499038][T22294] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 1635.510023][T22294] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 1635.574804][ T2351] pvrusb2: Invalid write control endpoint [ 1635.574819][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1635.574829][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1635.574837][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1635.574847][ T2351] pvrusb2: Device being rendered inoperable [ 1635.578595][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1635.578647][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 1635.584345][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1635.584358][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1635.584368][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1635.636063][T21685] usb 2-1: USB disconnect, device number 123 [ 1635.902028][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1635.902431][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1636.192504][T24370] syzkaller1: entered promiscuous mode [ 1636.192519][T24370] syzkaller1: entered allmulticast mode [ 1636.195440][ T6218] USB vub300 remote SDIO host controller[0] now disconnected [ 1636.541511][ C0] ------------[ cut here ]------------ [ 1636.541529][ C0] do not call blocking ops when !TASK_RUNNING; state=2001 set at [] do_nanosleep+0x7e/0x6a0 [ 1636.541574][ C0] WARNING: kernel/sched/core.c:9191 at __might_sleep+0x92/0xf0, CPU#0: syz-executor/5627 [ 1636.578424][ C0] Modules linked in: [ 1636.584595][ C0] CPU: 0 UID: 0 PID: 5627 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1636.595735][ C0] Tainted: [L]=SOFTLOCKUP [ 1636.600082][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1636.610208][ C0] RIP: 0010:__might_sleep+0xac/0xf0 [ 1636.615504][ C0] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 de b4 e6 0e 43 80 3c 3c 00 74 08 48 89 df e8 ff 73 a1 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 1636.635218][ C0] RSP: 0018:ffffc90000007c08 EFLAGS: 00010246 [ 1636.641357][ C0] RAX: 0000000000000000 RBX: ffff88807f49b7f0 RCX: ffffffff8be9ec3e [ 1636.649397][ C0] RDX: ffffffff8be9ec3e RSI: 0000000000002001 RDI: ffffffff907d6490 [ 1636.657433][ C0] RBP: 0000000000002001 R08: 0000000000000100 R09: 1ffffffff20f4caf [ 1636.665473][ C0] R10: dffffc0000000000 R11: fffffbfff20f4cb0 R12: 1ffff1100fe936fe [ 1636.673504][ C0] R13: 00000000000011d1 R14: ffffffff907d6490 R15: dffffc0000000000 [ 1636.681539][ C0] FS: 0000555557873500(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000 [ 1636.690548][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1636.697199][ C0] CR2: 0000200000315030 CR3: 00000000662cc000 CR4: 00000000003526f0 [ 1636.705239][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1636.713289][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1636.721326][ C0] Call Trace: [ 1636.724628][ C0] [ 1636.727498][ C0] __cancel_work_sync+0x6d/0x110 [ 1636.732506][ C0] mmc_free_host+0x19/0x40 [ 1636.736964][ C0] call_timer_fn+0x18d/0x5f0 [ 1636.741614][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1636.748335][ C0] ? call_timer_fn+0xd5/0x5f0 [ 1636.753069][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1636.758233][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1636.763506][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1636.770225][ C0] __run_timer_base+0x652/0x8b0 [ 1636.775164][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1636.780583][ C0] ? ktime_get+0x1f5/0x220 [ 1636.785052][ C0] ? lapic_next_event+0x11/0x20 [ 1636.789943][ C0] run_timer_softirq+0xb7/0x170 [ 1636.794940][ C0] handle_softirqs+0x226/0x860 [ 1636.799749][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1636.804593][ C0] __irq_exit_rcu+0xcb/0x220 [ 1636.809227][ C0] irq_exit_rcu+0x9/0x30 [ 1636.813534][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1636.819213][ C0] [ 1636.822185][ C0] [ 1636.825144][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1636.831169][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1636.837652][ C0] Code: f7 e8 3d ff b9 f5 f7 c3 00 02 00 00 74 05 e8 b0 4d e6 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 74 fc aa f5 65 48 8b 05 0c 90 ab 07 48 85 c0 74 18 5b 41 5e e9 [ 1636.857492][ C0] RSP: 0018:ffffc90003e6fbb8 EFLAGS: 00000206 [ 1636.863615][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 8000000000000001 [ 1636.871653][ C0] RDX: 0000000000000000 RSI: ffffffff8e4173d3 RDI: 0000000000000001 [ 1636.879681][ C0] RBP: 0000000000000001 R08: ffffffff907a657f R09: 1ffffffff20f4caf [ 1636.887731][ C0] R10: dffffc0000000000 R11: fffffbfff20f4cb0 R12: 000000000000c350 [ 1636.895798][ C0] R13: dffffc0000000000 R14: ffff8880b8628280 R15: 0000000000000246 [ 1636.903867][ C0] hrtimer_start_range_ns_user+0x2ba/0x430 [ 1636.909746][ C0] do_nanosleep+0x16c/0x6a0 [ 1636.914329][ C0] ? do_nanosleep+0x7e/0x6a0 [ 1636.918960][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 1636.924048][ C0] ? __asan_memset+0x22/0x50 [ 1636.928687][ C0] ? __hrtimer_setup+0x1b7/0x260 [ 1636.933687][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1636.938927][ C0] hrtimer_nanosleep+0x18f/0x3a0 [ 1636.943937][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1636.949458][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1636.954742][ C0] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 1636.960363][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1636.966536][ C0] do_syscall_64+0x166/0x520 [ 1636.971179][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.977321][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1636.982054][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.987989][ C0] RIP: 0033:0x7fd68f55e9ce [ 1636.992460][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1637.012185][ C0] RSP: 002b:00007fd68f94fd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1637.020673][ C0] RAX: ffffffffffffffda RBX: 0000555557873500 RCX: 00007fd68f55e9ce [ 1637.028710][ C0] RDX: 00007fd68f94fd80 RSI: 0000000000000000 RDI: 0000000000000000 [ 1637.036746][ C0] RBP: 00007fd68f94fdec R08: 0000000000000000 R09: 0000000000000000 [ 1637.044776][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1637.052806][ C0] R13: 00000000000927c0 R14: 000000000018f5b3 R15: 00007fd68f94fe40 [ 1637.060838][ C0] [ 1637.063919][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1637.071203][ C0] CPU: 0 UID: 0 PID: 5627 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1637.082237][ C0] Tainted: [L]=SOFTLOCKUP [ 1637.086557][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1637.096612][ C0] Call Trace: [ 1637.099895][ C0] [ 1637.102740][ C0] vpanic+0x56d/0xa60 [ 1637.106747][ C0] ? __pfx__printk+0x10/0x10 [ 1637.111346][ C0] ? __pfx_vpanic+0x10/0x10 [ 1637.115865][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1637.121160][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1637.126383][ C0] panic+0xc5/0xd0 [ 1637.130121][ C0] ? __pfx_panic+0x10/0x10 [ 1637.134567][ C0] __warn+0x315/0x4c0 [ 1637.138565][ C0] ? __might_sleep+0x92/0xf0 [ 1637.143173][ C0] ? __might_sleep+0x92/0xf0 [ 1637.147785][ C0] __report_bug+0x276/0x570 [ 1637.152313][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1637.157110][ C0] ? __might_sleep+0x92/0xf0 [ 1637.161737][ C0] ? __pfx___report_bug+0x10/0x10 [ 1637.166783][ C0] ? do_nanosleep+0x7e/0x6a0 [ 1637.171387][ C0] ? do_nanosleep+0x7e/0x6a0 [ 1637.175998][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1637.181137][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1637.186964][ C0] ? debug_object_assert_init+0x20d/0x380 [ 1637.192708][ C0] report_bug_entry+0x19b/0x290 [ 1637.197576][ C0] ? __might_sleep+0xac/0xf0 [ 1637.202187][ C0] ? __might_sleep+0xb1/0xf0 [ 1637.206792][ C0] handle_bug+0xce/0x200 [ 1637.211041][ C0] exc_invalid_op+0x1a/0x50 [ 1637.215549][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1637.220409][ C0] RIP: 0010:__might_sleep+0xac/0xf0 [ 1637.225625][ C0] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 de b4 e6 0e 43 80 3c 3c 00 74 08 48 89 df e8 ff 73 a1 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 1637.245238][ C0] RSP: 0018:ffffc90000007c08 EFLAGS: 00010246 [ 1637.251313][ C0] RAX: 0000000000000000 RBX: ffff88807f49b7f0 RCX: ffffffff8be9ec3e [ 1637.259287][ C0] RDX: ffffffff8be9ec3e RSI: 0000000000002001 RDI: ffffffff907d6490 [ 1637.267263][ C0] RBP: 0000000000002001 R08: 0000000000000100 R09: 1ffffffff20f4caf [ 1637.275236][ C0] R10: dffffc0000000000 R11: fffffbfff20f4cb0 R12: 1ffff1100fe936fe [ 1637.283211][ C0] R13: 00000000000011d1 R14: ffffffff907d6490 R15: dffffc0000000000 [ 1637.291200][ C0] ? do_nanosleep+0x7e/0x6a0 [ 1637.295802][ C0] ? do_nanosleep+0x7e/0x6a0 [ 1637.300410][ C0] __cancel_work_sync+0x6d/0x110 [ 1637.305367][ C0] mmc_free_host+0x19/0x40 [ 1637.309797][ C0] call_timer_fn+0x18d/0x5f0 [ 1637.314400][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1637.321085][ C0] ? call_timer_fn+0xd5/0x5f0 [ 1637.325774][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1637.330911][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1637.336120][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1637.342810][ C0] __run_timer_base+0x652/0x8b0 [ 1637.347682][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1637.353071][ C0] ? ktime_get+0x1f5/0x220 [ 1637.357497][ C0] ? lapic_next_event+0x11/0x20 [ 1637.362366][ C0] run_timer_softirq+0xb7/0x170 [ 1637.367228][ C0] handle_softirqs+0x226/0x860 [ 1637.372012][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1637.376812][ C0] __irq_exit_rcu+0xcb/0x220 [ 1637.381414][ C0] irq_exit_rcu+0x9/0x30 [ 1637.385668][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1637.391319][ C0] [ 1637.394249][ C0] [ 1637.397191][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1637.403196][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1637.409627][ C0] Code: f7 e8 3d ff b9 f5 f7 c3 00 02 00 00 74 05 e8 b0 4d e6 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 74 fc aa f5 65 48 8b 05 0c 90 ab 07 48 85 c0 74 18 5b 41 5e e9 [ 1637.429235][ C0] RSP: 0018:ffffc90003e6fbb8 EFLAGS: 00000206 [ 1637.435309][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 8000000000000001 [ 1637.443279][ C0] RDX: 0000000000000000 RSI: ffffffff8e4173d3 RDI: 0000000000000001 [ 1637.451251][ C0] RBP: 0000000000000001 R08: ffffffff907a657f R09: 1ffffffff20f4caf [ 1637.459222][ C0] R10: dffffc0000000000 R11: fffffbfff20f4cb0 R12: 000000000000c350 [ 1637.467195][ C0] R13: dffffc0000000000 R14: ffff8880b8628280 R15: 0000000000000246 [ 1637.475193][ C0] hrtimer_start_range_ns_user+0x2ba/0x430 [ 1637.481029][ C0] do_nanosleep+0x16c/0x6a0 [ 1637.485545][ C0] ? do_nanosleep+0x7e/0x6a0 [ 1637.490149][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 1637.495190][ C0] ? __asan_memset+0x22/0x50 [ 1637.499790][ C0] ? __hrtimer_setup+0x1b7/0x260 [ 1637.504746][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1637.509949][ C0] hrtimer_nanosleep+0x18f/0x3a0 [ 1637.514906][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1637.520388][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1637.525604][ C0] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 1637.531180][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1637.537275][ C0] do_syscall_64+0x166/0x520 [ 1637.541883][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.547959][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1637.552648][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.558547][ C0] RIP: 0033:0x7fd68f55e9ce [ 1637.562968][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1637.582575][ C0] RSP: 002b:00007fd68f94fd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1637.590994][ C0] RAX: ffffffffffffffda RBX: 0000555557873500 RCX: 00007fd68f55e9ce [ 1637.598970][ C0] RDX: 00007fd68f94fd80 RSI: 0000000000000000 RDI: 0000000000000000 [ 1637.606949][ C0] RBP: 00007fd68f94fdec R08: 0000000000000000 R09: 0000000000000000 [ 1637.614939][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1637.622914][ C0] R13: 00000000000927c0 R14: 000000000018f5b3 R15: 00007fd68f94fe40 [ 1637.630910][ C0] [ 1637.634201][ C0] Kernel Offset: disabled [ 1637.638527][ C0] Rebooting in 86400 seconds..