last executing test programs: 6.697174623s ago: executing program 3 (id=2232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 5.622700601s ago: executing program 2 (id=2233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) waitid(0x1, r3, 0x0, 0x4, 0x0) 5.306563636s ago: executing program 1 (id=2237): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x400000000000f01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\x86\xd7\xb5r\x03z\xf5\xe42\xad\xed\x122\x9db}\xd1\xff\xff\xff\x812\xd4\xef\xcd.\x8b\xf4\xa71iQA\x8d5\x8d\xaf\xe1\xd8\xae-\n\x95\x98\x96\xe8\x0e^\x80S\x9a\xca\xbf\x0e4C\'~_\xd0X\xb9\x94[\xf5,\xe0\xcd\x89\x1c\t\xd0\xf2\xfb\xf8\xfbe\xb2\r\xeeI\x86\xca\xd0k\xb0\x1b\xe96\xedpm\xcc\xdc\x91\xb9\xbft\xfb\x98\xe2\x02!\xfeq\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009\xf7\x81\xf4\xa9j\xc9\xbb\xf8\xf2K\"\x86\xf5h\xf5;\xd2\xaf\x9b\xea\xef-\xd7\xd6\xfa\x97-*\\\x98bE\r\xdc\x89\xd8&\x91\x1c+\x15\x89\xd7\xa7ceT\xea`5\xf9\x88\n \xdcA\xa6\x10\x93\"\xa4Y\x84\xee\xb2\xf9\xa9\x80uf\xab\xb3\xd1\x10i\x94x\x0f\xee\x94j2\xf9\x9ah\xf3b\x19P4\\\xad\xbaX]\xbc\xbbTA\x17d\a\x8fa\xe0\xc3K\x959'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b0074fbf80de701b0728381f07c35183b8242af6ed8d42a819bf58c54c07408000c6cfa4ae3c32d5bf33639adc46109626b2ed71cd479ebddcbfda19e0e6ca9eb13d38b47"}, 0x160) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 5.141710986s ago: executing program 1 (id=2240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'netdevsim0\x00'}) 4.940656373s ago: executing program 1 (id=2242): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 4.688938301s ago: executing program 1 (id=2243): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x1e, &(0x7f0000000180)={@local, @broadcast, @void, {@can={0xc, {{0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "dea68e14fe0356d7"}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) read$FUSE(r1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=ANY=[@ANYBLOB="1400000020000900000000000000000005000000344e78c2e3e0e8f9398d90149b10f3dd1ff8dcb28ad09b44c88ffb744ea25876d5701944eee4054b864866bd8f176199aa907153170b5e884b5b52c32558a626dbc2549c73013e94bb5ca9a6bc80ab206a1cffcc3301819c6e102dd9260f6e1e933742d5a450d97b7540f00214f65d1184b9d37ea60766c2e89ae5faa3bad840e8053cd5d85d89c940d5ee4de8929f860c675b68358714b3ef915d88ef1b35ac4f807058370762a983e926b83920c0916d6bab7ea37e3f1fa122ab66ce91ddf55f23bfe9afcf7eee72a992b29769f7f32595b690c78ca2fa80119eee73d526d1474d749e60830ba2dbd208e47a1d90a1dcfd8da12e36b4027df5a7557ce8290d430c95810b8a5f"], 0x14}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000140)=""/53) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x80000003) socket$packet(0x11, 0x2, 0x300) r4 = accept4$packet(r3, &(0x7f00000001c0), &(0x7f0000000200)=0x14, 0x80000) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0xffff, 0x1000, 0x3a, 0x1000, 0x0, 0x7}, 0x1c) r5 = dup2(r3, r3) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) add_key$keyring(&(0x7f00000023c0), &(0x7f0000002400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) syz_fuse_handle_req(r5, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x0) madvise(&(0x7f00003b1000/0x1000)=nil, 0x1000, 0xc) 4.150682044s ago: executing program 3 (id=2244): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 3.960643604s ago: executing program 3 (id=2245): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b900000000109021200"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000380), 0x1, 0x402) read(r1, 0x0, 0x3c) 3.091822042s ago: executing program 2 (id=2252): r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000280)={0xf0f027, 0x1, "f518c06de2f3ecdd28a1e25f08802a54e0f74f581e8647efe664688bfe21e964", 0x3, 0x5, 0x4, 0x522, 0x4, 0x8001, 0x9, 0x2, [0x800, 0x1, 0x7, 0x21a7]}) 2.959681605s ago: executing program 2 (id=2254): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "d4e9e1c90d89691c"}, 0x38) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/46, 0x2e}], 0x1}, 0x6}], 0x1, 0x100, 0x0) 2.912669715s ago: executing program 0 (id=2255): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x12, 0x0, 0x0) 2.880724911s ago: executing program 0 (id=2256): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000024c0)=0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000580)={0x1}) r1 = io_uring_setup(0x2d19, &(0x7f0000000200)={0x0, 0xb0d4, 0x800, 0x1, 0x248}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000340)="ee6d414d06c12cfcf1b71ed3e046732e4285e6bb5dbc151c4b2f1570733f1cba449ed16e0468b8ce0c090fe42550d1e418297d8fe2b1d7eed5a818b8216d78c80be0840b15ef9a1952d4a02cc627fa413009bbac53a1059f058a8348df6d7a4da6296d24f27dd7e7cce5a7e4fd32aa514e0f440c81dd5592c54402135c4eb4393b10068039a822", 0x87) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 2.566743924s ago: executing program 0 (id=2257): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, 0x0, 0x8000) openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r1, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0xffff, 0x100}}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x99) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x27ffff7, 0x4010, 0xffffffffffffffff, 0xfffff000) 1.998441792s ago: executing program 4 (id=2259): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 1.709897675s ago: executing program 1 (id=2260): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x349}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x400d, @fd_index=0x3, 0x400006, &(0x7f0000000580)=""/207, 0xcf, 0xe}) io_uring_enter(0xffffffffffffffff, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1.462615233s ago: executing program 4 (id=2261): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x400000000000f01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\x86\xd7\xb5r\x03z\xf5\xe42\xad\xed\x122\x9db}\xd1\xff\xff\xff\x812\xd4\xef\xcd.\x8b\xf4\xa71iQA\x8d5\x8d\xaf\xe1\xd8\xae-\n\x95\x98\x96\xe8\x0e^\x80S\x9a\xca\xbf\x0e4C\'~_\xd0X\xb9\x94[\xf5,\xe0\xcd\x89\x1c\t\xd0\xf2\xfb\xf8\xfbe\xb2\r\xeeI\x86\xca\xd0k\xb0\x1b\xe96\xedpm\xcc\xdc\x91\xb9\xbft\xfb\x98\xe2\x02!\xfeq\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009\xf7\x81\xf4\xa9j\xc9\xbb\xf8\xf2K\"\x86\xf5h\xf5;\xd2\xaf\x9b\xea\xef-\xd7\xd6\xfa\x97-*\\\x98bE\r\xdc\x89\xd8&\x91\x1c+\x15\x89\xd7\xa7ceT\xea`5\xf9\x88\n \xdcA\xa6\x10\x93\"\xa4Y\x84\xee\xb2\xf9\xa9\x80uf\xab\xb3\xd1\x10i\x94x\x0f\xee\x94j2\xf9\x9ah\xf3b\x19P4\\\xad\xbaX]\xbc\xbbTA\x17d\a\x8fa\xe0\xc3K\x959'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b0074fbf80de701b0728381f07c35183b8242af6ed8d42a819bf58c54c07408000c6cfa4ae3c32d5bf33639adc46109626b2ed71cd479ebddcbfda19e0e6ca9eb13d38b47"}, 0x160) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 1.310081607s ago: executing program 4 (id=2262): recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1}, 0x8}], 0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.108792802s ago: executing program 2 (id=2263): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000014) 1.08413819s ago: executing program 0 (id=2264): r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000280)={0xf0f027, 0x1, "f518c06de2f3ecdd28a1e25f08802a54e0f74f581e8647efe664688bfe21e964", 0x3, 0x5, 0x4, 0x522, 0x4, 0x8001, 0x9, 0x2, [0x800, 0x1, 0x7, 0x21a7]}) 1.054229781s ago: executing program 4 (id=2265): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) unshare(0x2c020400) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 930.674458ms ago: executing program 0 (id=2266): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000440)={{0x2, 0x0, 0x0, 0xee01, 0x0, 0x100}, 0x0, 0x0, 0x2, 0xf2b, 0x101, 0xd, 0x7, 0x8, 0xd, 0x4}) 930.42602ms ago: executing program 2 (id=2267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'netdevsim0\x00'}) 900.052622ms ago: executing program 2 (id=2268): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r7, &(0x7f0000000100), 0x2) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) r9 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4712, 0x1032c0) close_range(r0, r9, 0x0) r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) mmap(&(0x7f0000fea000/0xb000)=nil, 0xb000, 0x3000001, 0x4010, r10, 0x452c5000) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 767.15674ms ago: executing program 3 (id=2269): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x200000c0) recvmsg$kcm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000007c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/108, 0x6c}, {&(0x7f0000002d80)=""/196, 0xc4}, {&(0x7f0000001d80)=""/4081, 0xff1}, {&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f00000003c0)=""/125, 0x7d}, {&(0x7f0000000740)=""/81, 0x51}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f00000009c0)=""/126, 0x7e}, {&(0x7f0000000c40)=""/222, 0xde}, {&(0x7f0000000240)=""/97, 0x61}], 0xc}, 0x2122) 682.48091ms ago: executing program 1 (id=2270): socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(0xffffffffffffffff, &(0x7f0000000040)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x8}, 0xfff, 0x0, 0x34, 0x2, 0x1, 0x0, "", [{0x1, 0x7fffffff, 0x7, 0x8}, {0x6, 0x8, 0x1, 0x7fffffff}]}, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00', @ANYBLOB="010000000000000000001e0000000c000180080001", @ANYRES32, @ANYBLOB="050003"], 0x28}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2) socket$netlink(0x10, 0x3, 0xc) r5 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1c4f, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x7f}}}}}]}}]}}, 0x0) 682.293347ms ago: executing program 4 (id=2271): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 587.333442ms ago: executing program 3 (id=2272): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x400000000000f01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\x86\xd7\xb5r\x03z\xf5\xe42\xad\xed\x122\x9db}\xd1\xff\xff\xff\x812\xd4\xef\xcd.\x8b\xf4\xa71iQA\x8d5\x8d\xaf\xe1\xd8\xae-\n\x95\x98\x96\xe8\x0e^\x80S\x9a\xca\xbf\x0e4C\'~_\xd0X\xb9\x94[\xf5,\xe0\xcd\x89\x1c\t\xd0\xf2\xfb\xf8\xfbe\xb2\r\xeeI\x86\xca\xd0k\xb0\x1b\xe96\xedpm\xcc\xdc\x91\xb9\xbft\xfb\x98\xe2\x02!\xfeq\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009\xf7\x81\xf4\xa9j\xc9\xbb\xf8\xf2K\"\x86\xf5h\xf5;\xd2\xaf\x9b\xea\xef-\xd7\xd6\xfa\x97-*\\\x98bE\r\xdc\x89\xd8&\x91\x1c+\x15\x89\xd7\xa7ceT\xea`5\xf9\x88\n \xdcA\xa6\x10\x93\"\xa4Y\x84\xee\xb2\xf9\xa9\x80uf\xab\xb3\xd1\x10i\x94x\x0f\xee\x94j2\xf9\x9ah\xf3b\x19P4\\\xad\xbaX]\xbc\xbbTA\x17d\a\x8fa\xe0\xc3K\x959'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b0074fbf80de701b0728381f07c35183b8242af6ed8d42a819bf58c54c07408000c6cfa4ae3c32d5bf33639adc46109626b2ed71cd479ebddcbfda19e0e6ca9eb13d38b47"}, 0x160) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 37.721155ms ago: executing program 0 (id=2273): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "d4e9e1c90d89691c"}, 0x38) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/46, 0x2e}], 0x1}, 0x6}], 0x1, 0x100, 0x0) 1.017003ms ago: executing program 3 (id=2274): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x2) r0 = syz_clone(0x82001000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x8, 0x0) syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 0s ago: executing program 4 (id=2275): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000010401010000000000000000010000050a00020000000005e4ffffff0500010001"], 0x28}, 0x1, 0x2000000, 0x0, 0x4040000}, 0x0) kernel console output (not intermixed with test programs): fo: UDP 224.0.0.2:0 - no destination available [ 468.713776][ T5962] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 468.720472][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 468.736877][T10504] usb 3-1: Using ep0 maxpacket: 16 [ 468.761221][T10504] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 468.771497][T10504] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.792559][T10504] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 468.805256][ T5950] vhci_hcd: vhci_device speed not set [ 468.807808][ T5962] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 468.829655][T10504] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 468.841656][T11606] vhci_hcd: connection closed [ 468.844140][ T13] vhci_hcd: stop threads [ 468.852996][T10504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.854218][ T13] vhci_hcd: release socket [ 468.867299][ T5950] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 468.888435][ T5962] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 468.898836][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.916015][ T5962] usb 5-1: Product: syz [ 468.920427][T10504] usb 3-1: Product: syz [ 468.924991][ T13] vhci_hcd: disconnect device [ 468.931310][ T5962] usb 5-1: Manufacturer: syz [ 468.939688][ T5962] usb 5-1: SerialNumber: syz [ 468.945203][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 468.969149][T11616] fuse: Unknown parameter 'fd0x0000000000000003' [ 469.003909][T10504] usb 3-1: Manufacturer: syz [ 469.027221][T10504] usb 3-1: SerialNumber: syz [ 469.105151][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.425204][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.456434][T10504] usb 3-1: 0:2 : does not exist [ 469.745125][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.747065][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 469.747080][ T30] audit: type=1326 audit(1756728662.547:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11613 comm="syz.3.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6e38ebe9 code=0x7ffc0000 [ 469.752808][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.785256][ T30] audit: type=1326 audit(1756728662.547:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11613 comm="syz.3.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a6e38d550 code=0x7ffc0000 [ 469.913462][ T30] audit: type=1326 audit(1756728662.547:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11613 comm="syz.3.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6e38ebe9 code=0x7ffc0000 [ 469.935877][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.985202][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.145140][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.155292][ T30] audit: type=1326 audit(1756728662.547:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11613 comm="syz.3.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6e38ebe9 code=0x7ffc0000 [ 470.209387][ T30] audit: type=1326 audit(1756728662.557:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11613 comm="syz.3.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a6e38ebe9 code=0x7ffc0000 [ 470.268413][ T30] audit: type=1326 audit(1756728662.557:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11613 comm="syz.3.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6e38ebe9 code=0x7ffc0000 [ 470.361074][ T30] audit: type=1326 audit(1756728662.557:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11613 comm="syz.3.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6e38ebe9 code=0x7ffc0000 [ 470.464476][T11630] tipc: Enabling of bearer rejected, already enabled [ 471.206493][T11593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.224158][T11593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.677709][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1524'. [ 471.687001][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1524'. [ 471.730047][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1524'. [ 472.262890][T11653] tipc: Enabling of bearer rejected, already enabled [ 472.394415][T10504] usb 3-1: USB disconnect, device number 55 [ 472.511333][ T5962] usb 5-1: 0:2 : does not exist [ 472.551448][T11655] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1528'. [ 472.578802][ T5962] usb 5-1: USB disconnect, device number 48 [ 472.839709][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 472.850590][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.872448][ T5866] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 472.881051][T11659] fuse: Unknown parameter 'group_id00000000000000000000' [ 473.048032][ T5866] usb 4-1: unable to get BOS descriptor or descriptor too short [ 473.066695][ T5866] usb 4-1: not running at top speed; connect to a high speed hub [ 473.092917][ T5866] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 473.113567][ T5866] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 473.162120][ T5866] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 473.193658][ T5866] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 473.221425][ T5866] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.231578][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.246772][ T5866] usb 4-1: Product: syz [ 473.263061][T11675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1533'. [ 473.272614][T11675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1533'. [ 473.322433][ T5962] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 473.352922][ T5866] usb 4-1: Manufacturer: syz [ 473.366194][ T5866] usb 4-1: SerialNumber: syz [ 473.469341][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 473.515128][ T5962] usb 5-1: Using ep0 maxpacket: 32 [ 473.547550][ T5962] usb 5-1: config 0 has an invalid interface number: 235 but max is 0 [ 473.556270][ T5962] usb 5-1: config 0 has no interface number 0 [ 473.564618][ T5962] usb 5-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 473.577061][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.585245][ C1] net_ratelimit: 15 callbacks suppressed [ 473.585261][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 473.615270][ T5962] usb 5-1: Product: syz [ 473.619661][ T5962] usb 5-1: Manufacturer: syz [ 473.622097][T10504] hid (null): bogus close delimiter [ 473.625396][ T5962] usb 5-1: SerialNumber: syz [ 473.633841][T10504] hid (null): unknown global tag 0xc [ 473.643825][T10504] hid (null): unknown global tag 0xc [ 473.652619][T10504] hid (null): global environment stack underflow [ 473.659297][ T5962] usb 5-1: config 0 descriptor?? [ 473.662457][T10504] hid (null): unknown global tag 0xe [ 473.665117][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 473.673247][T10504] hid (null): nested delimiters [ 473.696892][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.707948][T11678] pim6reg1: entered promiscuous mode [ 473.713395][ T10] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 473.723012][T11678] pim6reg1: entered allmulticast mode [ 473.728862][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.743589][T10504] hid-generic FFF6:0000:0000.0013: bogus close delimiter [ 473.760529][T10504] hid-generic FFF6:0000:0000.0013: item 0 0 2 10 parsing failed [ 473.776378][T10504] hid-generic FFF6:0000:0000.0013: probe with driver hid-generic failed with error -22 [ 473.831225][ T10] usb 3-1: config 0 descriptor?? [ 473.905229][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 473.912390][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 473.914531][ T5962] kaweth 5-1:0.235: Firmware present in device. [ 473.985475][ T5950] vhci_hcd: vhci_device speed not set [ 473.995262][ T5866] usb 4-1: 0:2 : does not exist [ 474.049206][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.071994][ T5866] usb 4-1: USB disconnect, device number 51 [ 474.104101][ T5962] kaweth 5-1:0.235: Statistics collection: 0 [ 474.121368][ T5962] kaweth 5-1:0.235: Multicast filter limit: 0 [ 474.145302][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 474.151517][ T5962] kaweth 5-1:0.235: MTU: 0 [ 474.173072][ T5962] kaweth 5-1:0.235: Read MAC address 00:00:00:00:00:00 [ 474.257155][T11674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.275660][T11674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.305121][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 474.306003][ T10] holtek 0003:1241:5015.0014: unknown main item tag 0x0 [ 474.335275][ T10] holtek 0003:1241:5015.0014: unknown main item tag 0x4 [ 474.345155][ T10] holtek 0003:1241:5015.0014: item fetching failed at offset 2/5 [ 474.374146][ T10] holtek 0003:1241:5015.0014: parse failed [ 474.383469][ T10] holtek 0003:1241:5015.0014: probe with driver holtek failed with error -22 [ 474.539610][ T5866] usb 3-1: USB disconnect, device number 56 [ 474.563546][ T5962] kaweth 5-1:0.235: Error setting SOFS wait [ 474.598985][ T5962] kaweth 5-1:0.235: probe with driver kaweth failed with error -5 [ 474.625479][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 474.646732][ T5962] usb 5-1: USB disconnect, device number 49 [ 474.704523][T11694] pim6reg1: entered promiscuous mode [ 474.726878][T11694] pim6reg1: entered allmulticast mode [ 474.945435][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 474.952448][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 475.185274][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 475.295183][ T5950] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 475.341361][ T5948] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 475.349021][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 475.539125][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 475.566653][ T5950] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 475.591436][ T5950] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0x67, changing to 0x7 [ 475.630101][ T5950] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 253, changing to 11 [ 475.712408][ T5950] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 58047, setting to 1024 [ 475.732952][ T5950] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 475.749875][ T5948] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 475.765767][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.781396][ T5950] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 475.792974][ T5948] usb 1-1: Product: syz [ 475.803018][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.813444][ T5948] usb 1-1: Manufacturer: syz [ 475.823081][ T5948] usb 1-1: SerialNumber: syz [ 475.839044][ T5950] usb 2-1: Product: syz [ 475.852165][ T5950] usb 2-1: Manufacturer: syz [ 475.860497][ T5948] usb 1-1: config 0 descriptor?? [ 475.884713][ T5950] usb 2-1: SerialNumber: syz [ 475.933958][ T5950] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 475.964036][ T5950] imon 2-1:155.0: unable to initialize intf0, err -19 [ 475.982975][ T5950] imon:imon_probe: failed to initialize context! [ 476.001247][ T5950] imon 2-1:155.0: unable to register, err -19 [ 476.109662][ T5950] usb 1-1: USB disconnect, device number 46 [ 476.187137][ T5948] usb 2-1: USB disconnect, device number 73 [ 476.811255][T11751] netlink: 'syz.2.1562': attribute type 3 has an invalid length. [ 476.819484][T11751] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1562'. [ 477.405221][ T5948] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 477.574264][ T5948] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 477.619478][ T5948] usb 2-1: config 0 has no interface number 0 [ 477.656789][ T5948] usb 2-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=87.f7 [ 477.695163][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.709901][ T5948] usb 2-1: Product: syz [ 477.720432][ T5948] usb 2-1: Manufacturer: syz [ 477.730162][ T5948] usb 2-1: SerialNumber: syz [ 477.742043][ T5948] usb 2-1: config 0 descriptor?? [ 477.762715][ T5948] ttusb_dec_send_command: command bulk message failed: error -22 [ 477.781011][ T5948] ttusb-dec 2-1:0.50: probe with driver ttusb-dec failed with error -22 [ 478.121302][ T10] usb 2-1: USB disconnect, device number 74 [ 478.785179][ C1] net_ratelimit: 15 callbacks suppressed [ 478.785200][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 479.105286][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 479.112288][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 479.355163][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 479.505135][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 479.825322][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 480.155134][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 480.162177][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 480.385535][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 480.536715][ T5962] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 480.555111][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 480.723622][ T5962] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 480.740621][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.759602][ T5962] usb 4-1: Product: syz [ 480.768528][ T5962] usb 4-1: Manufacturer: syz [ 480.777517][ T5962] usb 4-1: SerialNumber: syz [ 480.799646][ T5962] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 480.821656][ T983] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 481.086898][T11822] input: syz0 as /devices/virtual/input/input33 [ 481.248091][ T5962] usb 4-1: USB disconnect, device number 52 [ 481.906719][ T983] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 481.964533][ T983] ath9k_htc: Failed to initialize the device [ 481.979128][ T5962] usb 4-1: ath9k_htc: USB layer deinitialized [ 482.395240][ T5948] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 482.405199][ T5924] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 482.555189][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 482.585496][ T5948] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 482.595279][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 482.615827][ T5948] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 482.628076][ T5924] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 482.635172][ T5948] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 482.638137][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.650794][ T5948] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.673106][ T5948] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 482.690146][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.719395][ T5924] pvrusb2: Hardware description: Terratec Grabster AV400 [ 482.747292][ T5924] pvrusb2: ********** [ 482.751373][ T5924] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 482.785976][ T5924] pvrusb2: Important functionality might not be entirely working. [ 482.805438][ T5924] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 482.829475][ T5924] pvrusb2: ********** [ 482.908185][ T5948] usb 2-1: GET_CAPABILITIES returned 0 [ 482.914251][ T2345] pvrusb2: Invalid write control endpoint [ 482.923985][ T5948] usbtmc 2-1:16.0: can't read capabilities [ 483.051050][ T2345] pvrusb2: Invalid write control endpoint [ 483.101964][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 483.135042][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.146623][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.155749][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.164843][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.195419][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 483.213234][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 483.224711][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.233838][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.242944][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.251995][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.295191][ T2345] pvrusb2: Device being rendered inoperable [ 483.298347][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.310887][T11841] pvrusb2: Attempted to execute control transfer when device not ok [ 483.329167][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 483.369886][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.379031][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.388112][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.397160][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.406236][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.556254][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.565396][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.574486][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.630904][ T983] usb 2-1: USB disconnect, device number 75 [ 483.681881][T11877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1606'. [ 483.706574][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 483.751113][ T2345] pvrusb2: Attached sub-driver cx25840 [ 483.765394][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 483.985198][ C1] net_ratelimit: 15 callbacks suppressed [ 483.985216][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 484.022917][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 484.305111][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 484.312166][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 484.545193][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 484.705097][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 484.912448][T11909] vxcan1: tx address claim with dlc 0 [ 484.965824][ T983] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 485.025227][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 485.065175][ T5948] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 485.150610][ T5924] usb 5-1: USB disconnect, device number 50 [ 485.184865][ T983] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.206720][ T983] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.246928][ T5948] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.269530][ T5948] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 485.301456][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.345221][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 485.352253][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 485.361786][ T5948] usb 4-1: config 0 descriptor?? [ 485.365649][ T983] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 485.378237][ T5948] pwc: Askey VC010 type 2 USB webcam detected. [ 485.395922][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.431709][ T983] usb 3-1: config 0 descriptor?? [ 485.458286][ T983] qmi_wwan 3-1:0.0: bogus CDC Union: master=0, slave=101 [ 485.481638][ T983] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 485.585223][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 485.671858][ T983] usb 3-1: USB disconnect, device number 57 [ 485.745184][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 485.780831][ T5948] pwc: recv_control_msg error -32 req 02 val 2b00 [ 485.790392][ T5948] pwc: recv_control_msg error -32 req 02 val 2700 [ 485.806479][ T5948] pwc: recv_control_msg error -32 req 02 val 2c00 [ 485.815509][ T5948] pwc: recv_control_msg error -32 req 04 val 1000 [ 485.830649][ T5948] pwc: recv_control_msg error -32 req 04 val 1300 [ 485.847904][ T5948] pwc: recv_control_msg error -32 req 04 val 1400 [ 485.853964][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1631'. [ 485.966274][ T5948] pwc: recv_control_msg error -32 req 02 val 2000 [ 485.994842][ T5948] pwc: recv_control_msg error -32 req 02 val 2100 [ 486.251671][ T5948] pwc: recv_control_msg error -71 req 02 val 2500 [ 486.261874][ T5948] pwc: recv_control_msg error -71 req 02 val 2400 [ 486.296654][ T5948] pwc: recv_control_msg error -71 req 02 val 2600 [ 486.323867][ T5948] pwc: recv_control_msg error -71 req 02 val 2900 [ 486.347791][ T5948] pwc: recv_control_msg error -71 req 02 val 2800 [ 486.384471][ T5948] pwc: recv_control_msg error -71 req 04 val 1100 [ 486.404670][ T5948] pwc: recv_control_msg error -71 req 04 val 1200 [ 486.416826][ T5948] pwc: Registered as video103. [ 486.448985][ T5948] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 486.530223][ T5948] usb 4-1: USB disconnect, device number 53 [ 487.311307][T11962] IPv6: sit1: Disabled Multicast RS [ 488.943712][ T5950] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 489.136562][ T5950] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 489.185171][ C1] net_ratelimit: 15 callbacks suppressed [ 489.185191][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 489.238727][ T5950] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 489.295189][ T5950] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 489.304301][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.489430][T11984] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 489.505195][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 489.512199][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 489.523160][ T5950] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 489.644145][T11990] openvswitch: netlink: IP tunnel dst address not specified [ 489.745181][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 489.905099][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 490.225197][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 490.302467][T11986] syz.3.1645: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 490.355208][T11986] CPU: 0 UID: 0 PID: 11986 Comm: syz.3.1645 Not tainted syzkaller #0 PREEMPT(full) [ 490.355233][T11986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 490.355247][T11986] Call Trace: [ 490.355255][T11986] [ 490.355266][T11986] dump_stack_lvl+0x189/0x250 [ 490.355296][T11986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.355317][T11986] ? __pfx__printk+0x10/0x10 [ 490.355341][T11986] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 490.355364][T11986] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 490.355386][T11986] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 490.355410][T11986] warn_alloc+0x214/0x310 [ 490.355443][T11986] ? __pfx_warn_alloc+0x10/0x10 [ 490.355477][T11986] ? __get_vm_area_node+0x28f/0x300 [ 490.355524][T11986] ? hash_ipport4_resize+0x1ec/0x1a50 [ 490.355553][T11986] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 490.355600][T11986] ? alloc_pages_mpol+0x3cd/0x4a0 [ 490.355626][T11986] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 490.355654][T11986] ? rcu_is_watching+0x15/0xb0 [ 490.355672][T11986] ? hash_ipport4_resize+0x1ec/0x1a50 [ 490.355695][T11986] ? hash_ipport4_resize+0x1ec/0x1a50 [ 490.355717][T11986] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 490.355742][T11986] ? hash_ipport4_resize+0x1ec/0x1a50 [ 490.355775][T11986] hash_ipport4_resize+0x1ec/0x1a50 [ 490.355810][T11986] ? __pfx_hash_ipport4_add+0x10/0x10 [ 490.355867][T11986] call_ad+0x44b/0xb00 [ 490.355899][T11986] ? __pfx_call_ad+0x10/0x10 [ 490.355936][T11986] ? __nla_parse+0x40/0x60 [ 490.355967][T11986] ip_set_ad+0x791/0x930 [ 490.355999][T11986] ? __pfx_ip_set_ad+0x10/0x10 [ 490.356061][T11986] nfnetlink_rcv_msg+0xb4a/0x1130 [ 490.356086][T11986] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 490.356128][T11986] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 490.356149][T11986] ? kasan_save_free_info+0x46/0x50 [ 490.356218][T11986] netlink_rcv_skb+0x205/0x470 [ 490.356245][T11986] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 490.356269][T11986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.356306][T11986] ? bpf_lsm_capable+0x9/0x20 [ 490.356327][T11986] ? security_capable+0x7e/0x2e0 [ 490.356360][T11986] nfnetlink_rcv+0x26a/0x2520 [ 490.356386][T11986] ? __dev_queue_xmit+0x1d79/0x3b50 [ 490.356419][T11986] ? __dev_queue_xmit+0x27b/0x3b50 [ 490.356453][T11986] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 490.356476][T11986] ? __pfx___dev_queue_xmit+0x10/0x10 [ 490.356511][T11986] ? ref_tracker_free+0x63a/0x7d0 [ 490.356535][T11986] ? __asan_memcpy+0x40/0x70 [ 490.356555][T11986] ? __pfx_ref_tracker_free+0x10/0x10 [ 490.356576][T11986] ? __skb_clone+0x63/0x7a0 [ 490.356601][T11986] ? __skb_clone+0x483/0x7a0 [ 490.356627][T11986] ? skb_clone+0x246/0x3a0 [ 490.356650][T11986] ? __netlink_deliver_tap+0x807/0x850 [ 490.356675][T11986] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.356706][T11986] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.356738][T11986] netlink_unicast+0x82c/0x9e0 [ 490.356769][T11986] ? __pfx_netlink_unicast+0x10/0x10 [ 490.356794][T11986] ? netlink_sendmsg+0x642/0xb30 [ 490.356808][T11986] ? skb_put+0x11b/0x210 [ 490.356829][T11986] netlink_sendmsg+0x805/0xb30 [ 490.356861][T11986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.356882][T11986] ? aa_sock_msg_perm+0xf1/0x1d0 [ 490.356902][T11986] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.356920][T11986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.356939][T11986] __sock_sendmsg+0x219/0x270 [ 490.356966][T11986] ____sys_sendmsg+0x505/0x830 [ 490.356991][T11986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.357020][T11986] ? import_iovec+0x74/0xa0 [ 490.357044][T11986] ___sys_sendmsg+0x21f/0x2a0 [ 490.357066][T11986] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.357123][T11986] ? __fget_files+0x2a/0x420 [ 490.357138][T11986] ? __fget_files+0x3a0/0x420 [ 490.357164][T11986] __x64_sys_sendmsg+0x19b/0x260 [ 490.357187][T11986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.357217][T11986] ? rcu_is_watching+0x15/0xb0 [ 490.357241][T11986] ? do_syscall_64+0xbe/0x3b0 [ 490.357263][T11986] do_syscall_64+0xfa/0x3b0 [ 490.357279][T11986] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.357303][T11986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.357321][T11986] ? clear_bhb_loop+0x60/0xb0 [ 490.357344][T11986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.357369][T11986] RIP: 0033:0x7f2a6e38ebe9 [ 490.357387][T11986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.357403][T11986] RSP: 002b:00007f2a6c5b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.357424][T11986] RAX: ffffffffffffffda RBX: 00007f2a6e5c6180 RCX: 00007f2a6e38ebe9 [ 490.357437][T11986] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000007 [ 490.357449][T11986] RBP: 00007f2a6e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 490.357461][T11986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.357472][T11986] R13: 00007f2a6e5c6218 R14: 00007f2a6e5c6180 R15: 00007f2a6e6efa28 [ 490.357502][T11986] [ 490.357601][T11986] Mem-Info: [ 490.545135][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 490.727988][T11986] active_anon:10299 inactive_anon:0 isolated_anon:0 [ 490.727988][T11986] active_file:5839 inactive_file:40331 isolated_file:0 [ 490.727988][T11986] unevictable:768 dirty:61 writeback:0 [ 490.727988][T11986] slab_reclaimable:11015 slab_unreclaimable:100644 [ 490.727988][T11986] mapped:34555 shmem:4269 pagetables:1305 [ 490.727988][T11986] sec_pagetables:0 bounce:0 [ 490.727988][T11986] kernel_misc_reclaimable:0 [ 490.727988][T11986] free:1301026 free_pcp:23651 free_cma:0 [ 490.728459][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 490.740159][T11986] Node 0 active_anon:41196kB inactive_anon:0kB active_file:23308kB inactive_file:161120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140096kB dirty:244kB writeback:0kB shmem:15540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12132kB pagetables:5084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 490.785227][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 490.946735][T11986] Node 1 active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 490.976952][T11986] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 491.012731][T11986] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 491.019414][T11986] Node 0 DMA32 free:1322684kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42092kB inactive_anon:0kB active_file:23308kB inactive_file:159560kB unevictable:1536kB writepending:312kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:47412kB local_pcp:21364kB free_cma:0kB [ 491.112682][T11986] lowmem_reserve[]: 0 0 1 1 1 [ 491.281545][T11986] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 491.310684][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.319337][ T5950] usb 2-1: USB disconnect, device number 76 [ 491.375491][T11986] lowmem_reserve[]: 0 0 0 0 0 [ 491.380502][T11986] Node 1 Normal free:3868012kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:44636kB local_pcp:34496kB free_cma:0kB [ 491.435670][T12010] loop2: detected capacity change from 0 to 8 [ 491.443086][T11986] lowmem_reserve[]: 0 0 0 0 0 [ 491.448957][T11986] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 491.494036][T11986] Node 0 DMA32: 1190*4kB (UM) 440*8kB (UME) 322*16kB (UM) 657*32kB (UM) 187*64kB (UME) 12*128kB (UM) 7*256kB (UME) 7*512kB (UME) 7*1024kB (ME) 3*2048kB (ME) 308*4096kB (M) = 1328216kB [ 491.544911][T11986] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 491.582990][T11986] Node 1 Normal: 135*4kB (UME) 48*8kB (UME) 33*16kB (UME) 138*32kB (UME) 46*64kB (UME) 16*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UM) 2*2048kB (ME) 939*4096kB (M) = 3868012kB [ 491.623878][T11986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.643762][T11986] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 491.654272][T11986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.667066][T11986] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 491.678104][T11986] 50397 total pagecache pages [ 491.682898][T11986] 0 pages in swap cache [ 491.687439][T12010] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 491.692740][T12010] loop2: partition table partially beyond EOD, truncated [ 491.715518][T11986] Free swap = 124996kB [ 491.727687][T11986] Total swap = 124996kB [ 491.732737][T12010] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 491.742482][T11986] 2097051 pages RAM [ 491.755244][T11986] 0 pages HighMem/MovableOnly [ 491.762564][T11986] 425662 pages reserved [ 491.772340][T11986] 0 pages cma reserved [ 491.886968][T12013] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 491.894214][T12013] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 491.904170][T12013] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 491.911026][T12013] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 492.064329][T12013] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 492.074234][T12013] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 492.084553][ T6091] udevd[6091]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 493.595818][T12048] syzkaller1: entered promiscuous mode [ 493.621219][T12048] syzkaller1: entered allmulticast mode [ 493.905540][ T5868] Bluetooth: hci1: command 0x0c1a tx timeout [ 493.905778][T10355] Bluetooth: hci0: command 0x0c1a tx timeout [ 493.911612][T10375] Bluetooth: hci2: command 0x0c1a tx timeout [ 494.065312][T10355] Bluetooth: hci3: command 0x0c1a tx timeout [ 494.145604][T10355] Bluetooth: hci4: command 0x0405 tx timeout [ 494.285194][ T5950] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 494.327396][T12046] net_ratelimit: 16 callbacks suppressed [ 494.327410][T12046] openvswitch: netlink: Duplicate key (type 32). [ 494.385233][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 494.475414][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 494.488651][ T5950] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 494.500147][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.539601][ T5950] usb 4-1: config 0 descriptor?? [ 494.705118][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 494.865287][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 494.945166][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 494.952383][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'. [ 494.982953][ T5950] cypress 0003:04B4:07B1.0015: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.3-1/input0 [ 495.105274][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 495.309201][ T983] usb 4-1: USB disconnect, device number 54 [ 495.425207][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 495.479319][T12067] fido_id[12067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 495.745104][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 495.905317][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 495.985190][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 495.992259][T10355] Bluetooth: hci2: command 0x0c1a tx timeout [ 497.446391][ T5950] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 497.607218][ T5950] usb 1-1: Using ep0 maxpacket: 8 [ 497.623299][ T5950] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 497.632601][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.662976][ T5950] pvrusb2: Hardware description: Terratec Grabster AV400 [ 497.670486][ T5950] pvrusb2: ********** [ 497.674492][ T5950] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 497.694074][ T5950] pvrusb2: Important functionality might not be entirely working. [ 497.710853][ T5950] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 497.722576][ T5950] pvrusb2: ********** [ 497.859196][ T2345] pvrusb2: Invalid write control endpoint [ 497.956581][ T2345] pvrusb2: Invalid write control endpoint [ 497.962491][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 497.972925][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 497.980899][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 497.992935][ T2345] pvrusb2: Device being rendered inoperable [ 497.999246][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 498.008941][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 498.019888][ T2345] pvrusb2: Attached sub-driver cx25840 [ 498.025696][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 498.037984][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 498.080860][T12095] pvrusb2: Attempted to execute control transfer when device not ok [ 498.091368][ T983] usb 1-1: USB disconnect, device number 47 [ 498.698544][T12066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.776552][T12066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.800927][T12107] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1690'. [ 498.815731][T12066] batadv_slave_1 (unregistering): left promiscuous mode [ 498.824698][T12107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1690'. [ 498.834839][T12107] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1690'. [ 498.871312][T12107] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1690'. [ 499.173983][ T983] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 499.348247][ T983] usb 1-1: Using ep0 maxpacket: 8 [ 499.408037][ T983] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 499.433125][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.461196][ T983] pvrusb2: Hardware description: Terratec Grabster AV400 [ 499.498244][ T983] pvrusb2: ********** [ 499.558751][ T983] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 499.585406][ C1] net_ratelimit: 16 callbacks suppressed [ 499.585425][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 499.619517][ T983] pvrusb2: Important functionality might not be entirely working. [ 499.683662][ T983] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 499.711705][ T983] pvrusb2: ********** [ 499.732415][ T2345] pvrusb2: Invalid write control endpoint [ 499.849462][ T2345] pvrusb2: Invalid write control endpoint [ 499.869268][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 499.905090][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 499.922582][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 499.960355][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 499.977209][ T2345] pvrusb2: Device being rendered inoperable [ 499.989706][T12142] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 499.996663][T12142] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 500.006025][T12111] pvrusb2: Attempted to execute control transfer when device not ok [ 500.047663][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 500.061007][ T5924] usb 1-1: USB disconnect, device number 48 [ 500.065323][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 500.110028][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 500.145218][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 500.159167][ T2345] pvrusb2: Attached sub-driver cx25840 [ 500.185158][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 500.250548][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 500.305099][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 500.625384][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 500.945123][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 501.036185][T12155] GUP no longer grows the stack in syz.0.1705 (12155): 200000005000-200000008000 (200000004000) [ 501.056513][T12155] CPU: 0 UID: 0 PID: 12155 Comm: syz.0.1705 Not tainted syzkaller #0 PREEMPT(full) [ 501.056544][T12155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.056556][T12155] Call Trace: [ 501.056564][T12155] [ 501.056573][T12155] dump_stack_lvl+0x189/0x250 [ 501.056599][T12155] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.056626][T12155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.056647][T12155] ? __pfx__printk+0x10/0x10 [ 501.056685][T12155] fixup_user_fault+0x661/0x720 [ 501.056713][T12155] fault_in_user_writeable+0x72/0xe0 [ 501.056736][T12155] futex_lock_pi+0x773/0xa90 [ 501.056770][T12155] ? __pfx_futex_lock_pi+0x10/0x10 [ 501.056798][T12155] ? __switch_to+0xdae/0x1670 [ 501.056840][T12155] ? __pfx_futex_wake_mark+0x10/0x10 [ 501.056865][T12155] ? finish_task_switch+0x266/0x950 [ 501.056884][T12155] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.056910][T12155] ? trace_sched_exit_tp+0x36/0x110 [ 501.056929][T12155] do_futex+0x292/0x420 [ 501.056950][T12155] ? __pfx_do_futex+0x10/0x10 [ 501.056973][T12155] __se_sys_futex+0x36f/0x400 [ 501.056990][T12155] ? __pfx___schedule+0x10/0x10 [ 501.057010][T12155] ? __pfx___se_sys_futex+0x10/0x10 [ 501.057033][T12155] ? __x64_sys_futex+0x21/0xf0 [ 501.057051][T12155] do_syscall_64+0xfa/0x3b0 [ 501.057064][T12155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.057077][T12155] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 501.057090][T12155] ? clear_bhb_loop+0x60/0xb0 [ 501.057106][T12155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.057120][T12155] RIP: 0033:0x7f5a1518ebe9 [ 501.057133][T12155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.057144][T12155] RSP: 002b:00007f5a12fb2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 501.057160][T12155] RAX: ffffffffffffffda RBX: 00007f5a153c6270 RCX: 00007f5a1518ebe9 [ 501.057170][T12155] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 501.057179][T12155] RBP: 00007f5a15211e19 R08: 0000000000000000 R09: 0000000000000000 [ 501.057188][T12155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.057196][T12155] R13: 00007f5a153c6308 R14: 00007f5a153c6270 R15: 00007f5a154efa28 [ 501.057219][T12155] [ 501.105207][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 501.105641][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.298254][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.304243][ C0] hrtimer: interrupt took 239219824 ns [ 501.404264][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.511116][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.517620][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.235407][ T5924] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 503.555995][ T5924] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 503.566955][ T5924] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 503.810875][ T5924] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 503.905871][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.226207][T12198] vivid-002: disconnect [ 504.235826][T12198] vivid-002: reconnect [ 504.406480][ T30] audit: type=1326 audit(1756728697.207:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2fd8ebe9 code=0x7ffc0000 [ 504.491571][ T30] audit: type=1326 audit(1756728697.207:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fac2fd8ebe9 code=0x7ffc0000 [ 504.611178][ T30] audit: type=1326 audit(1756728697.207:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2fd8ebe9 code=0x7ffc0000 [ 504.745282][ T30] audit: type=1326 audit(1756728697.207:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fac2fd8ebe9 code=0x7ffc0000 [ 504.785320][ C1] net_ratelimit: 17 callbacks suppressed [ 504.785339][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 504.923337][ T30] audit: type=1326 audit(1756728697.207:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2fd8ebe9 code=0x7ffc0000 [ 505.016127][ T30] audit: type=1326 audit(1756728697.207:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2fd8ebe9 code=0x7ffc0000 [ 505.115120][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 505.150399][T12205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1723'. [ 505.275219][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 505.345304][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 505.515094][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 505.835348][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 505.864543][T12221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1727'. [ 506.155091][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 506.305441][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 506.385192][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 506.545167][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 506.654765][ T5950] usb 2-1: USB disconnect, device number 77 [ 508.566040][ T5950] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 508.755721][ T5950] usb 2-1: Using ep0 maxpacket: 8 [ 508.857345][ T5950] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 508.870189][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.963896][ T5950] pvrusb2: Hardware description: Terratec Grabster AV400 [ 508.982753][ T5950] pvrusb2: ********** [ 508.994239][ T5950] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 509.016667][ T5950] pvrusb2: Important functionality might not be entirely working. [ 509.245200][ T5950] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 509.322698][ T5950] pvrusb2: ********** [ 509.348907][ T2345] pvrusb2: Invalid write control endpoint [ 509.548622][ T2345] pvrusb2: Invalid write control endpoint [ 509.550171][ T5950] usb 2-1: USB disconnect, device number 78 [ 509.554405][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 509.700042][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 509.727675][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 509.768946][ T2345] pvrusb2: Device being rendered inoperable [ 509.791562][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 509.817436][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 509.849902][ T2345] pvrusb2: Attached sub-driver cx25840 [ 509.877264][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 509.910851][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 509.985317][ C1] net_ratelimit: 15 callbacks suppressed [ 509.985336][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 510.126295][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1740'. [ 510.305093][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 510.465370][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 510.545175][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 510.655160][ T5950] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 510.705113][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 511.025581][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 511.086245][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 198, changing to 7 [ 511.111035][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 33535, setting to 1024 [ 511.146417][ T5950] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 511.157946][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.178187][ T5950] usb 4-1: Product: syz [ 511.182392][ T5950] usb 4-1: Manufacturer: syz [ 511.205173][ T5950] usb 4-1: SerialNumber: syz [ 511.345196][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 511.505188][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 511.585198][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 511.643720][ T5950] usb 4-1: config 0 descriptor?? [ 511.745504][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 512.123462][ T5950] usb 4-1: USB disconnect, device number 55 [ 512.255716][ T983] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 512.320147][T12300] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1748'. [ 512.332949][T12300] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1748'. [ 512.425563][ T983] usb 3-1: Using ep0 maxpacket: 8 [ 512.433788][ T983] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 512.443462][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.464428][ T983] pvrusb2: Hardware description: Terratec Grabster AV400 [ 512.504398][ T983] pvrusb2: ********** [ 512.529684][ T983] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 512.542800][ T983] pvrusb2: Important functionality might not be entirely working. [ 512.595785][ T983] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 512.622776][ T983] pvrusb2: ********** [ 512.663021][ T2345] pvrusb2: Invalid write control endpoint [ 512.880121][ T5950] usb 3-1: USB disconnect, device number 58 [ 512.920130][ T2345] pvrusb2: Invalid write control endpoint [ 512.935114][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 512.944440][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 513.015142][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 513.050168][ T2345] pvrusb2: Device being rendered inoperable [ 513.087330][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 513.103379][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 513.175775][ T2345] pvrusb2: Attached sub-driver cx25840 [ 513.181278][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 513.452744][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 513.475645][ T983] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 513.675940][ T983] usb 4-1: Using ep0 maxpacket: 32 [ 513.703155][ T983] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 513.719860][ T983] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 513.767446][ T983] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 253, changing to 11 [ 513.847862][ T983] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 58047, setting to 1024 [ 514.000066][ T983] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 514.036138][ T983] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 514.046930][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.066411][ T983] usb 4-1: Product: syz [ 514.074028][ T983] usb 4-1: Manufacturer: syz [ 514.086448][ T983] usb 4-1: SerialNumber: syz [ 514.124274][ T983] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input36 [ 514.312606][ T983] imon:send_packet: packet tx failed (-71) [ 514.337150][ T983] imon 4-1:155.0: panel buttons/knobs setup failed [ 514.343840][ T983] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 514.413072][ T983] (id 0x00) [ 515.185352][ C1] net_ratelimit: 15 callbacks suppressed [ 515.185372][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 515.505106][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 515.665188][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 515.685615][ T983] rc_core: IR keymap rc-imon-pad not found [ 515.691631][ T983] Registered IR keymap rc-empty [ 515.713450][ T983] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 515.745190][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 515.757561][ T983] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 515.787106][ T983] imon:send_packet: packet tx failed (-71) [ 515.821895][ T983] imon 4-1:155.0: remote input dev register failed [ 515.905228][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 515.925406][ T983] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 516.006663][ T983] imon 4-1:155.0: unable to initialize intf0, err 0 [ 516.156271][ T983] imon:imon_probe: failed to initialize context! [ 516.162820][ T983] imon 4-1:155.0: unable to register, err -19 [ 516.204864][ T983] usb 4-1: USB disconnect, device number 56 [ 516.225358][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 516.545438][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 516.605733][ T983] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 516.705336][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 516.778609][ T983] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 516.785210][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 516.791443][ T983] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 516.836040][ T983] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 516.873732][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.935578][ T5924] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 516.945091][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 516.983182][T12343] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 517.030877][ T983] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 517.130904][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 517.159964][ T5924] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 517.178377][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.291069][ T5924] pvrusb2: Hardware description: Terratec Grabster AV400 [ 517.306885][ T5924] pvrusb2: ********** [ 517.311121][ T5924] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 517.339222][ T5924] pvrusb2: Important functionality might not be entirely working. [ 517.352515][ T5924] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 517.393323][ T5924] pvrusb2: ********** [ 517.489684][ T2345] pvrusb2: Invalid write control endpoint [ 517.691981][ T5924] usb 5-1: USB disconnect, device number 51 [ 518.233411][ T2345] pvrusb2: Invalid write control endpoint [ 518.375487][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 518.812866][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 518.902239][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 518.962967][ T2345] pvrusb2: Device being rendered inoperable [ 519.015570][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 519.073538][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 519.115235][ T2345] pvrusb2: Attached sub-driver cx25840 [ 519.158499][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 519.219241][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 519.898518][ T5950] usb 4-1: USB disconnect, device number 57 [ 520.385195][ C1] net_ratelimit: 15 callbacks suppressed [ 520.385215][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 520.705184][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 520.865345][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 520.945180][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 521.105099][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 521.425166][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 521.745138][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 521.905176][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 521.985617][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 522.145130][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 522.375230][ T5950] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 522.547888][ T5950] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 522.569355][ T5950] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 522.643055][ T5950] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 522.694412][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.765603][T12423] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 522.808956][ T5950] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 523.221462][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1787'. [ 525.450026][ T5950] usb 4-1: USB disconnect, device number 58 [ 525.585204][ C1] net_ratelimit: 15 callbacks suppressed [ 525.585223][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 525.905149][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 526.029829][T10504] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 526.065183][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 526.145208][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 526.239536][T10504] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 526.256885][T10504] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.276826][T10504] usb 3-1: config 0 descriptor?? [ 526.305123][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 526.504872][T10504] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 526.625173][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 526.945084][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 527.105580][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 527.185182][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 527.345086][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 528.015814][ T5924] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 528.177078][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 528.195785][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.237605][ T5924] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 528.269560][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.304719][ T5924] usb 1-1: config 0 descriptor?? [ 528.534655][T10504] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 528.555357][T10504] asix 3-1:0.0: probe with driver asix failed with error -71 [ 528.581756][T10504] usb 3-1: USB disconnect, device number 59 [ 528.751903][ T5924] hid-alps 0003:044E:120C.0016: unbalanced delimiter at end of report description [ 528.782512][ T5924] hid-alps 0003:044E:120C.0016: parse failed [ 528.798811][ T5924] hid-alps 0003:044E:120C.0016: probe with driver hid-alps failed with error -22 [ 529.020786][ T5924] usb 1-1: USB disconnect, device number 49 [ 530.785189][ C1] net_ratelimit: 15 callbacks suppressed [ 530.785209][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 531.105092][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 531.265394][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 531.345176][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 531.506076][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 531.835204][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 532.145176][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 532.315141][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 532.385173][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 532.555131][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 535.865368][T10504] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 535.995220][ C1] net_ratelimit: 16 callbacks suppressed [ 535.995241][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 536.315098][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 536.465180][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 536.545161][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 536.686527][T10504] usb 1-1: Using ep0 maxpacket: 8 [ 536.701197][T10504] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 536.710371][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 536.723717][T10504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.740991][T10504] pvrusb2: Hardware description: Terratec Grabster AV400 [ 536.749102][T10504] pvrusb2: ********** [ 536.753077][T10504] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 536.773617][T10504] pvrusb2: Important functionality might not be entirely working. [ 536.820578][T10504] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 536.851432][T10504] pvrusb2: ********** [ 536.955587][ T2345] pvrusb2: Invalid write control endpoint [ 537.025320][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 537.136232][ T2345] pvrusb2: Invalid write control endpoint [ 537.142004][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 537.198177][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 537.219080][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 537.242850][ T2345] pvrusb2: Device being rendered inoperable [ 537.261100][T12619] pvrusb2: Attempted to execute control transfer when device not ok [ 537.271986][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 537.282018][T10504] usb 1-1: USB disconnect, device number 50 [ 537.301657][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 537.323467][ T2345] pvrusb2: Attached sub-driver cx25840 [ 537.345709][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 537.390610][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 537.409265][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 537.515312][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 537.534420][T12653] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 537.554349][T12640] loop2: detected capacity change from 0 to 7 [ 537.585208][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 537.610533][T12640] Dev loop2: unable to read RDB block 7 [ 537.685283][T12640] loop2: unable to read partition table [ 537.694948][T12640] loop2: partition table beyond EOD, truncated [ 537.703224][T12640] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5) [ 537.745124][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 539.747088][T12687] netlink: 'syz.2.1874': attribute type 10 has an invalid length. [ 539.767870][T12687] veth0_vlan: left promiscuous mode [ 539.777281][T12687] veth0_vlan: entered promiscuous mode [ 539.786889][T12687] team0: Device veth0_vlan failed to register rx_handler [ 540.795128][ T5948] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 541.005109][ T5948] usb 5-1: Using ep0 maxpacket: 8 [ 541.096277][ T5948] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 541.106122][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.140032][ T5948] pvrusb2: Hardware description: Terratec Grabster AV400 [ 541.181391][ T5948] pvrusb2: ********** [ 541.185597][ C1] net_ratelimit: 15 callbacks suppressed [ 541.185611][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 541.315668][ T5948] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 541.326123][ T5948] pvrusb2: Important functionality might not be entirely working. [ 541.336912][ T5948] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 541.366031][ T5948] pvrusb2: ********** [ 541.379935][ T2345] pvrusb2: Invalid write control endpoint [ 541.493296][ T2345] pvrusb2: Invalid write control endpoint [ 541.505136][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 541.556073][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 541.601519][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 541.642390][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 541.665316][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 541.709958][ T2345] pvrusb2: Device being rendered inoperable [ 541.736428][T12697] pvrusb2: Attempted to execute control transfer when device not ok [ 541.744674][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 541.745194][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 541.760107][ T5948] usb 5-1: USB disconnect, device number 52 [ 541.798631][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 541.841379][ T2345] pvrusb2: Attached sub-driver cx25840 [ 541.873406][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 541.905080][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 541.938753][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 542.225193][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 542.404089][T12726] loop2: detected capacity change from 0 to 7 [ 542.427683][T12726] Dev loop2: unable to read RDB block 7 [ 542.444469][T12726] loop2: unable to read partition table [ 542.467084][T12726] loop2: partition table beyond EOD, truncated [ 542.484985][T12726] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5) [ 542.545157][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 542.705261][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 542.785141][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 542.945136][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 542.975490][ T5924] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 543.166340][ T5924] usb 4-1: config 0 interface 0 altsetting 237 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 543.196847][ T5924] usb 4-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.251104][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 543.286386][ T5924] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 543.309448][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.327211][ T5924] usb 4-1: config 0 descriptor?? [ 543.406086][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 543.423350][ C1] vcan0: j1939_session_tx_dat: 0xffff888057b1a400: queue data error: -100 [ 543.434032][ C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 543.441904][ C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 543.449628][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.457481][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.465439][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.473261][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.481223][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.489105][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.497025][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.504831][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.512770][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.520618][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.528565][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.536410][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.544327][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.552233][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.560184][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.568025][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.575947][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.583756][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.591673][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.599515][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.607557][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.615420][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.623340][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.631190][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.639156][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.647092][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.655032][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.662853][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.670796][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.678622][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.686533][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.694358][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.702323][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.710170][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.718095][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.725924][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.733808][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.741652][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.749569][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.757417][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.765348][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.773159][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.781126][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.788958][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.796875][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.804679][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.812586][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.820435][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.828472][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.836298][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.844174][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.852016][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.859920][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.867845][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.875767][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.883597][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.891543][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.899371][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.907299][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.915124][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.923025][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.930869][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.938777][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.946602][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.954497][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.962324][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.970327][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.978164][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 543.986076][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 543.993867][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.001779][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.009593][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.017483][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.025313][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.033212][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.041038][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.049023][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.056856][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.064718][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.072563][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.080467][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.088347][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.096289][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.104095][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.112004][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.119825][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.127731][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.135560][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.143435][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.151263][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.159174][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.166993][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.174866][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.182717][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.190730][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.198576][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.206472][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.214278][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.222192][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.230039][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.237947][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.245768][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.253635][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.261569][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.269462][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.277301][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.285224][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.293032][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.300929][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.308767][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.316688][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.324485][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.332419][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.340248][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.348168][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.356010][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.363952][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.371803][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.379739][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.387697][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.395613][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.403433][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.411351][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.419208][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.427136][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.434931][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.446987][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.454826][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.462792][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.470651][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.478587][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.486425][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.494339][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.502175][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.510139][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.517995][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.525950][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.533750][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.541683][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 544.549520][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 544.829653][ T5924] sony 0003:054C:024B.0017: unbalanced delimiter at end of report description [ 544.858593][ T5924] sony 0003:054C:024B.0017: parse failed [ 544.864403][ T5924] sony 0003:054C:024B.0017: probe with driver sony failed with error -22 [ 545.031928][ T5924] usb 4-1: USB disconnect, device number 59 [ 545.215289][T10504] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 545.545104][T10504] usb 3-1: Using ep0 maxpacket: 16 [ 545.551893][T10504] usb 3-1: config 0 has no interfaces? [ 545.560888][T10504] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 545.575108][T10504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.583136][T10504] usb 3-1: Product: syz [ 545.606640][T10504] usb 3-1: Manufacturer: syz [ 545.625083][T10504] usb 3-1: SerialNumber: syz [ 545.632540][T10504] usb 3-1: config 0 descriptor?? [ 545.667797][ T30] audit: type=1326 audit(1756728738.477:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12766 comm="syz.0.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 545.725139][ T30] audit: type=1326 audit(1756728738.477:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12766 comm="syz.0.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 545.769840][ T30] audit: type=1326 audit(1756728738.477:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12766 comm="syz.0.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 545.811968][ T30] audit: type=1326 audit(1756728738.477:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12766 comm="syz.0.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 545.874729][T10504] usb 3-1: USB disconnect, device number 60 [ 545.912951][ T30] audit: type=1326 audit(1756728738.477:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12766 comm="syz.0.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 545.989982][ T30] audit: type=1326 audit(1756728738.477:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12766 comm="syz.0.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 546.042840][ T30] audit: type=1326 audit(1756728738.477:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12766 comm="syz.0.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 546.104723][ T30] audit: type=1326 audit(1756728738.477:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12766 comm="syz.0.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 546.175311][ T30] audit: type=1326 audit(1756728738.477:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12766 comm="syz.0.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 546.211072][ T30] audit: type=1326 audit(1756728738.477:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12766 comm="syz.0.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 546.362893][T12778] netlink: 'syz.1.1910': attribute type 1 has an invalid length. [ 546.545721][ C1] net_ratelimit: 11 callbacks suppressed [ 546.545740][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 546.558751][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 546.565836][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 546.572786][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 546.579856][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 546.592055][T12778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.631700][T12784] bond0: entered promiscuous mode [ 546.901086][T12796] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 546.907655][T12796] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 546.919756][T12796] vhci_hcd vhci_hcd.0: Device attached [ 547.167737][ T5924] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 547.179725][T12797] vhci_hcd: connection reset by peer [ 547.216721][ T13] vhci_hcd: stop threads [ 547.261836][ T13] vhci_hcd: release socket [ 547.268130][ T13] vhci_hcd: disconnect device [ 547.585650][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 547.592677][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 547.599697][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 547.606714][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 547.613701][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 547.875757][ T983] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 548.099008][ T983] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 548.110717][ T5948] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 548.112132][ T983] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 548.172287][ T983] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 548.264091][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.302889][ T5948] usb 3-1: Using ep0 maxpacket: 16 [ 548.333345][ T5948] usb 3-1: config 0 has no interfaces? [ 548.341716][ T5948] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 548.351724][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.365370][ T5948] usb 3-1: Product: syz [ 548.372331][ T5948] usb 3-1: Manufacturer: syz [ 548.374935][T12812] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 548.759187][ T983] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 548.784598][ T5948] usb 3-1: SerialNumber: syz [ 548.822791][ T5948] usb 3-1: config 0 descriptor?? [ 549.067634][T10504] usb 3-1: USB disconnect, device number 61 [ 550.915530][ T983] usb 2-1: USB disconnect, device number 79 [ 550.978318][T10504] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 551.355284][T10504] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 551.445550][T10504] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 551.745158][ C1] net_ratelimit: 15 callbacks suppressed [ 551.745178][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 551.757876][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 551.764868][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 551.771944][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 551.779153][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 552.215136][T10504] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 552.224231][T10504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.305913][ T5924] vhci_hcd: vhci_device speed not set [ 552.566632][T12849] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 552.579035][T10504] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 552.785113][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 552.792394][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 552.799484][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 552.806463][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 552.813471][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 554.413406][T12871] loop2: detected capacity change from 0 to 8 [ 554.429787][T12871] Dev loop2: unable to read RDB block 8 [ 554.448892][T12871] loop2: unable to read partition table [ 554.454701][T12871] loop2: partition table beyond EOD, truncated [ 554.489588][T12871] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5) [ 554.885906][ T5948] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 555.105622][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 555.108863][ T5948] usb 5-1: config 0 has no interfaces? [ 555.110834][ T5948] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 555.110851][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.110862][ T5948] usb 5-1: Product: syz [ 555.110869][ T5948] usb 5-1: Manufacturer: syz [ 555.110893][ T5948] usb 5-1: SerialNumber: syz [ 555.113464][ T5948] usb 5-1: config 0 descriptor?? [ 555.171820][ T5948] usb 1-1: USB disconnect, device number 51 [ 555.329499][T10504] usb 5-1: USB disconnect, device number 53 [ 556.705975][T12900] block device autoloading is deprecated and will be removed. [ 556.758369][T12901] net_ratelimit: 15 callbacks suppressed [ 556.758385][T12901] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 556.794960][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1950'. [ 556.945089][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 556.952312][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 556.959463][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 556.966464][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 556.973502][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 557.260429][T12910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.330448][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 557.330461][ T30] audit: type=1326 audit(1756728750.137:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0678ebe9 code=0x7ffc0000 [ 557.373128][ T30] audit: type=1326 audit(1756728750.137:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f0d0678ebe9 code=0x7ffc0000 [ 557.415238][ T5948] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 557.505414][ T30] audit: type=1326 audit(1756728750.137:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0678ebe9 code=0x7ffc0000 [ 557.530694][ T30] audit: type=1326 audit(1756728750.137:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0678ebe9 code=0x7ffc0000 [ 557.580969][ T30] audit: type=1326 audit(1756728750.137:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0d0678ebe9 code=0x7ffc0000 [ 557.608249][ T30] audit: type=1326 audit(1756728750.137:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0678ebe9 code=0x7ffc0000 [ 557.630573][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.698800][ T30] audit: type=1326 audit(1756728750.137:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0d0678ebe9 code=0x7ffc0000 [ 557.766673][ T30] audit: type=1326 audit(1756728750.137:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0678ebe9 code=0x7ffc0000 [ 557.822522][ T30] audit: type=1326 audit(1756728750.137:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f0d0678ebe9 code=0x7ffc0000 [ 557.891043][ T30] audit: type=1326 audit(1756728750.137:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0678ebe9 code=0x7ffc0000 [ 557.913436][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.955432][ T5948] usb 3-1: Using ep0 maxpacket: 8 [ 557.985252][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 557.992260][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 557.999289][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 558.006340][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 558.104919][T12916] loop2: detected capacity change from 0 to 8 [ 558.135585][ T5948] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 558.143604][T12916] Dev loop2: unable to read RDB block 8 [ 558.165694][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.182642][T12916] loop2: unable to read partition table [ 558.206814][T12916] loop2: partition table beyond EOD, truncated [ 558.242635][ T5948] pvrusb2: Hardware description: Terratec Grabster AV400 [ 558.243703][T12916] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5) [ 558.310896][ T5948] pvrusb2: ********** [ 558.314927][ T5948] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 558.412487][ T5948] pvrusb2: Important functionality might not be entirely working. [ 558.454003][ T5948] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 558.515093][ T5948] pvrusb2: ********** [ 558.529863][ T2345] pvrusb2: Invalid write control endpoint [ 558.667124][ T2345] pvrusb2: Invalid write control endpoint [ 558.681746][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 558.718148][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 558.739198][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 558.835195][ T2345] pvrusb2: Device being rendered inoperable [ 558.846574][T12905] pvrusb2: Attempted to execute control transfer when device not ok [ 558.860990][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 558.875559][T10504] usb 3-1: USB disconnect, device number 62 [ 558.896909][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 558.916814][ T2345] pvrusb2: Attached sub-driver cx25840 [ 558.922378][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 558.939443][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 558.995675][ T5924] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 559.145528][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 559.157144][ T5924] usb 1-1: config 0 has no interfaces? [ 559.164732][ T5924] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 559.174805][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.194846][ T5924] usb 1-1: Product: syz [ 559.202737][ T5924] usb 1-1: Manufacturer: syz [ 559.210928][ T5924] usb 1-1: SerialNumber: syz [ 559.228075][ T5924] usb 1-1: config 0 descriptor?? [ 559.440547][ T5924] usb 1-1: USB disconnect, device number 52 [ 560.379999][T10355] Bluetooth: hci0: unexpected event for opcode 0x200b [ 560.496073][ T5924] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 560.647235][ T5924] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 560.666386][ T5924] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 66 [ 560.679026][ T5924] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.704154][ T5924] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.740673][ T5924] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 560.764632][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.794395][ T5924] usb 2-1: Product: syz [ 560.803763][ T5924] usb 2-1: Manufacturer: syz [ 560.819798][ T5924] usb 2-1: SerialNumber: syz [ 560.875285][T10504] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 561.046069][T10504] usb 1-1: Using ep0 maxpacket: 8 [ 561.060829][T10504] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 561.072777][T10504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.107825][T10504] pvrusb2: Hardware description: Terratec Grabster AV400 [ 561.130213][T10504] pvrusb2: ********** [ 561.134248][T10504] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 561.145437][T10504] pvrusb2: Important functionality might not be entirely working. [ 561.153592][T10504] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 561.173783][T10504] pvrusb2: ********** [ 561.309927][ T2345] pvrusb2: Invalid write control endpoint [ 561.421277][ T2345] pvrusb2: Invalid write control endpoint [ 561.432413][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 561.448114][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 561.456404][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 561.467269][ T2345] pvrusb2: Device being rendered inoperable [ 561.473584][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 561.481591][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 561.492188][ T2345] pvrusb2: Attached sub-driver cx25840 [ 561.498466][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 561.509198][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 561.521475][T12962] pvrusb2: Attempted to execute control transfer when device not ok [ 561.531680][T10504] usb 1-1: USB disconnect, device number 53 [ 561.875216][ T5924] cdc_ncm 2-1:1.0: bind() failure [ 561.899194][ T5924] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 561.926511][ T5924] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 561.935701][ T5924] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 562.071332][ T5924] usb 2-1: USB disconnect, device number 80 [ 562.145201][ C1] net_ratelimit: 17 callbacks suppressed [ 562.145219][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 562.157962][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 562.164969][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 562.172141][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 562.179303][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 562.290144][T12992] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 562.656008][T13004] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1989'. [ 562.690172][T12998] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1989'. [ 562.953153][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.959864][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.185070][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 563.192347][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 563.199381][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 563.206302][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 563.916750][T13040] binder: 13032:13040 ioctl c0306201 200000000080 returned -14 [ 566.685623][ T5962] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 566.835828][ T5924] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 566.876805][ T5962] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 566.888942][ T5962] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 566.923674][ T5962] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 566.957636][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.970156][T13089] loop2: detected capacity change from 0 to 8 [ 566.991069][T13078] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 566.999832][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 567.007063][ T5962] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 567.018669][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 567.031998][ T6091] Dev loop2: unable to read RDB block 8 [ 567.042671][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 567.054471][ T6091] loop2: unable to read partition table [ 567.062690][ T6091] loop2: partition table beyond EOD, truncated [ 567.078507][ T5924] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 567.091437][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.103068][T13089] Dev loop2: unable to read RDB block 8 [ 567.116835][ T5924] usb 1-1: Product: syz [ 567.122524][T13089] loop2: unable to read partition table [ 567.128952][ T5924] usb 1-1: Manufacturer: syz [ 567.133733][ T5924] usb 1-1: SerialNumber: syz [ 567.139509][T13089] loop2: partition table beyond EOD, truncated [ 567.185262][T13089] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5) [ 567.281518][ T5924] usb 1-1: config 0 descriptor?? [ 567.342412][ T5924] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 567.345199][ C1] net_ratelimit: 16 callbacks suppressed [ 567.345216][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 567.364352][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 567.371310][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 567.378221][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 567.385204][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 567.462582][ T5924] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 567.980354][ T5924] em28xx 1-1:0.0: unknown em28xx chip ID (232) [ 568.178838][ T5924] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 568.385073][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 568.392126][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 568.399174][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 568.406199][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 568.414060][ T5924] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 568.465241][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 568.524505][ T5924] em28xx 1-1:0.0: No AC97 audio processor [ 568.650319][ T5924] usb 1-1: USB disconnect, device number 54 [ 568.703433][ T5924] em28xx 1-1:0.0: Disconnecting em28xx [ 568.912587][ T5924] em28xx 1-1:0.0: Freeing device [ 569.261414][ T5948] usb 3-1: USB disconnect, device number 63 [ 569.353860][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 569.353878][ T30] audit: type=1326 audit(1756728762.167:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 569.383236][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.642353][ T30] audit: type=1326 audit(1756728762.177:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 569.717326][ T30] audit: type=1326 audit(1756728762.187:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 569.845277][ T30] audit: type=1326 audit(1756728762.187:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 569.958846][ T30] audit: type=1326 audit(1756728762.187:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 570.072595][ T30] audit: type=1326 audit(1756728762.187:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 570.176597][ T30] audit: type=1326 audit(1756728762.187:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 570.301595][ T30] audit: type=1326 audit(1756728762.187:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1518ebe9 code=0x7ffc0000 [ 570.869946][T13130] vlan0: entered promiscuous mode [ 570.894542][T13130] vlan0: entered allmulticast mode [ 570.921878][T13130] hsr_slave_1: entered allmulticast mode [ 570.946317][T13133] IPv6: NLM_F_CREATE should be specified when creating new route [ 571.083723][T13134] PKCS7: Unknown OID: [5] (bad) [ 571.089748][T13134] PKCS7: Only support pkcs7_signedData type [ 571.807583][T13144] IPVS: length: 225 != 8 [ 572.545239][ C1] net_ratelimit: 15 callbacks suppressed [ 572.545259][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 572.558001][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 572.565105][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 572.572312][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 572.625273][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 573.585072][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 573.592354][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 573.599472][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 573.606461][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 573.665163][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 575.894940][T13231] loop2: detected capacity change from 0 to 8 [ 575.939214][T13231] Dev loop2: unable to read RDB block 8 [ 575.963036][T13231] loop2: unable to read partition table [ 576.000272][T13231] loop2: partition table beyond EOD, truncated [ 576.026300][T13231] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5) [ 577.755066][ C1] net_ratelimit: 15 callbacks suppressed [ 577.755087][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 577.767817][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 577.774730][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 577.781633][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 577.825159][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 578.105648][ T5924] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 578.255854][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 578.280851][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.302360][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.328320][ T5924] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 578.445786][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.464880][ T5924] usb 3-1: config 0 descriptor?? [ 578.592208][ T30] audit: type=1326 audit(1756728771.297:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13287 comm="syz.1.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2fd8ebe9 code=0x7ffc0000 [ 578.614565][ C0] vkms_vblank_simulate: vblank timer overrun [ 578.629093][ T30] audit: type=1326 audit(1756728771.297:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13287 comm="syz.1.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2fd8ebe9 code=0x7ffc0000 [ 578.785068][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 578.792138][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 578.799228][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 578.806365][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 578.865194][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 579.063961][ T5924] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0 [ 579.078573][ T5924] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0 [ 579.107405][ T5924] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0 [ 579.132705][ T5924] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0 [ 579.159721][ T5924] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0 [ 579.209250][ T5924] koneplus 0003:1E7D:2D51.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 579.482685][ T5924] usb 3-1: USB disconnect, device number 64 [ 580.987045][T13326] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2110'. [ 582.561112][T10504] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 582.740849][T10504] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.838201][T10504] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 582.945048][ C1] net_ratelimit: 15 callbacks suppressed [ 582.945066][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 582.957770][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 582.964820][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 582.971979][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 583.033894][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 583.041785][T10504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.058590][T10504] usb 5-1: config 0 descriptor?? [ 583.695785][T10504] hid_mf 0003:0079:1846.0019: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.4-1/input0 [ 583.784238][T10504] hid_mf 0003:0079:1846.0019: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 583.875191][T10504] usb 5-1: USB disconnect, device number 54 [ 583.983542][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2119'. [ 583.995044][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 584.002299][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 584.009461][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 584.016430][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 584.043219][T13355] fido_id[13355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 584.065731][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 584.212609][ T30] audit: type=1326 audit(1756728777.027:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.3.2121" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a6e38ebe9 code=0x0 [ 584.683742][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2127'. [ 585.441349][T13404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2140'. [ 585.996803][ T983] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 586.167450][ T983] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 586.176395][ T5924] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 586.189166][ T983] usb 5-1: config 0 has no interface number 0 [ 586.196624][ T983] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 586.218418][ T983] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 586.263713][ T983] usb 5-1: config 0 interface 255 has no altsetting 0 [ 586.276703][ T983] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 586.290840][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.312254][ T983] usb 5-1: config 0 descriptor?? [ 586.322447][ T983] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 586.338457][ T5924] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 586.350135][ T5924] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 586.362713][ T5924] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 586.405962][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.423544][T13422] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 586.467338][ T5924] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 586.495765][ T5962] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 586.536979][T10504] usb 5-1: USB disconnect, device number 55 [ 586.635621][ T5962] usb 3-1: device descriptor read/64, error -71 [ 586.885642][ T5962] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 587.035622][ T5962] usb 3-1: device descriptor read/64, error -71 [ 587.149212][ T5962] usb usb3-port1: attempt power cycle [ 587.447681][T13460] binder: 13459:13460 ioctl c0306201 200000000080 returned -14 [ 587.606511][ T5962] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 587.650203][ T5962] usb 3-1: device descriptor read/8, error -71 [ 588.145069][ C1] net_ratelimit: 16 callbacks suppressed [ 588.145089][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 588.157875][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 588.164829][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 588.171783][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 588.225146][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 588.292918][ T5962] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 588.366893][ T5962] usb 3-1: device descriptor read/8, error -71 [ 588.594456][ T5962] usb usb3-port1: unable to enumerate USB device [ 589.193983][ T5962] usb 4-1: USB disconnect, device number 60 [ 589.195177][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 589.206850][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 589.213779][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 589.220783][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 589.265148][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 589.891928][T13490] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 590.291981][T13496] random: crng reseeded on system resumption [ 590.571398][T13505] use of bytesused == 0 is deprecated and will be removed in the future, [ 590.594302][T13505] use the actual size instead. [ 591.045527][T10504] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 591.215207][T10504] usb 5-1: device descriptor read/64, error -71 [ 591.555577][T10504] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 591.763914][ T5948] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 591.781766][T10504] usb 5-1: device descriptor read/64, error -71 [ 591.907606][T10504] usb usb5-port1: attempt power cycle [ 591.967754][ T5948] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 591.981384][ T5948] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 592.001683][ T5948] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 592.030827][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.111800][T13514] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 592.129844][ T5948] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 592.137049][ T5866] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 592.295165][T10504] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 592.302822][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 592.314686][ T5866] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.330110][ T5866] usb 4-1: config 0 has no interfaces? [ 592.339156][ T5866] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 592.366101][T10504] usb 5-1: device descriptor read/8, error -71 [ 592.392617][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.406153][ T5866] usb 4-1: config 0 descriptor?? [ 592.645132][T10504] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 592.676461][T10504] usb 5-1: device descriptor read/8, error -71 [ 592.826331][T10504] usb usb5-port1: unable to enumerate USB device [ 593.163734][T13543] net_ratelimit: 17 callbacks suppressed [ 593.163754][T13543] openvswitch: netlink: Flow actions attr not present in new flow. [ 593.190542][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2194'. [ 593.283055][T13549] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 593.289617][T13549] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 593.305690][T13549] vhci_hcd vhci_hcd.0: Device attached [ 593.318357][T13550] vhci_hcd: connection closed [ 593.321233][ T61] vhci_hcd: stop threads [ 593.341107][ T61] vhci_hcd: release socket [ 593.345680][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 593.345830][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 593.345970][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 593.346170][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 593.388058][ T61] vhci_hcd: disconnect device [ 593.425287][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 593.930412][T13563] loop2: detected capacity change from 0 to 8 [ 593.942474][T13563] Dev loop2: unable to read RDB block 8 [ 593.951191][T13563] loop2: unable to read partition table [ 593.959538][T13563] loop2: partition table beyond EOD, truncated [ 593.971450][T13563] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5) [ 594.249821][ T5962] usb 1-1: USB disconnect, device number 55 [ 594.363627][T13571] openvswitch: netlink: Flow key attr not present in new flow. [ 594.376859][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 594.395048][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 594.402250][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 594.409309][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 594.571302][T13582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2210'. [ 594.584056][T13582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2210'. [ 594.936413][ T5962] usb 4-1: USB disconnect, device number 61 [ 594.996761][ T983] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 595.640765][ T983] usb 1-1: device descriptor read/64, error -71 [ 595.907062][ T983] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 596.086227][ T983] usb 1-1: device descriptor read/64, error -71 [ 596.206017][ T983] usb usb1-port1: attempt power cycle [ 596.655733][ T983] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 596.676214][ T983] usb 1-1: device descriptor read/8, error -71 [ 596.690830][T13614] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2220'. [ 596.915747][ T983] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 596.946336][ T983] usb 1-1: device descriptor read/8, error -71 [ 597.076040][ T983] usb usb1-port1: unable to enumerate USB device [ 597.415118][T10504] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 597.511298][T13629] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2224'. [ 597.574528][T10504] usb 5-1: Using ep0 maxpacket: 8 [ 597.594301][T10504] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.632923][T10504] usb 5-1: config 0 has no interfaces? [ 597.644447][T10504] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 597.686678][T10504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.739591][T10504] usb 5-1: config 0 descriptor?? [ 598.555050][ C1] net_ratelimit: 17 callbacks suppressed [ 598.555071][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 598.567958][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 598.575054][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 598.582019][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 598.625170][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 598.767462][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2231'. [ 599.595052][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 599.602144][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 599.609261][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 599.616450][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 599.665267][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 600.084900][ T5962] usb 5-1: USB disconnect, device number 60 [ 600.762131][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'. [ 602.001988][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2248'. [ 602.014836][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2248'. [ 602.024942][ T5924] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 602.039134][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2248'. [ 602.051523][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2248'. [ 602.195864][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 602.206012][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.243494][ T5924] usb 4-1: config 0 has no interfaces? [ 602.260011][ T5924] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 602.291114][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.332467][ T5924] usb 4-1: config 0 descriptor?? [ 603.745058][ C1] net_ratelimit: 16 callbacks suppressed [ 603.745079][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 603.757722][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 603.764699][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 603.771740][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 603.835175][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 604.780841][T10504] usb 4-1: USB disconnect, device number 62 [ 604.786892][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 604.787301][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 604.787450][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 604.787522][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 604.875144][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 605.272261][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2271'. [ 605.827026][ T6541] ================================================================== [ 605.835188][ T6541] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 605.843178][ T6541] Read of size 1 at addr ffff888057b78770 by task kworker/u8:13/6541 [ 605.851244][ T6541] [ 605.853570][ T6541] CPU: 1 UID: 0 PID: 6541 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 605.853590][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.853603][ T6541] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 605.853633][ T6541] Call Trace: [ 605.853640][ T6541] [ 605.853649][ T6541] dump_stack_lvl+0x189/0x250 [ 605.853670][ T6541] ? __kasan_check_byte+0x12/0x40 [ 605.853693][ T6541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.853712][ T6541] ? lock_release+0x4b/0x3e0 [ 605.853738][ T6541] ? __virt_addr_valid+0x4a5/0x5c0 [ 605.853759][ T6541] print_report+0xca/0x240 [ 605.853776][ T6541] ? xfrm_state_find+0x2cf2/0x5400 [ 605.853793][ T6541] kasan_report+0x118/0x150 [ 605.853816][ T6541] ? xfrm_state_find+0x2cf2/0x5400 [ 605.853835][ T6541] xfrm_state_find+0x2cf2/0x5400 [ 605.853852][ T6541] ? check_noncircular+0xe0/0x160 [ 605.853871][ T6541] ? validate_chain+0x897/0x2140 [ 605.853892][ T6541] ? xfrm_state_find+0x1da/0x5400 [ 605.853911][ T6541] ? __pfx_xfrm_state_find+0x10/0x10 [ 605.853935][ T6541] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 605.853965][ T6541] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 605.853988][ T6541] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 605.854010][ T6541] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 605.854031][ T6541] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 605.854066][ T6541] ? xfrm_expand_policies+0x41f/0x6a0 [ 605.854087][ T6541] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 605.854111][ T6541] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 605.854133][ T6541] ? inet_confirm_addr+0x5a/0x300 [ 605.854154][ T6541] xfrm_lookup_route+0x3c/0x1c0 [ 605.854173][ T6541] send4+0x445/0xe20 [ 605.854194][ T6541] ? __lock_acquire+0xab9/0xd20 [ 605.854217][ T6541] ? send4+0x201/0xe20 [ 605.854239][ T6541] ? __pfx_send4+0x10/0x10 [ 605.854259][ T6541] ? wg_socket_send_skb_to_peer+0x54/0x1d0 [ 605.854285][ T6541] ? wg_socket_send_buffer_to_peer+0x13b/0x1c0 [ 605.854305][ T6541] wg_socket_send_skb_to_peer+0xd1/0x1d0 [ 605.854330][ T6541] wg_packet_handshake_send_worker+0x1db/0x320 [ 605.854355][ T6541] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 605.854387][ T6541] ? _raw_spin_unlock_irq+0x23/0x50 [ 605.854408][ T6541] ? process_scheduled_works+0x9ef/0x17b0 [ 605.854424][ T6541] ? process_scheduled_works+0x9ef/0x17b0 [ 605.854441][ T6541] process_scheduled_works+0xae1/0x17b0 [ 605.854469][ T6541] ? __pfx_process_scheduled_works+0x10/0x10 [ 605.854492][ T6541] worker_thread+0x8a0/0xda0 [ 605.854517][ T6541] kthread+0x70e/0x8a0 [ 605.854545][ T6541] ? __pfx_worker_thread+0x10/0x10 [ 605.854561][ T6541] ? __pfx_kthread+0x10/0x10 [ 605.854580][ T6541] ? _raw_spin_unlock_irq+0x23/0x50 [ 605.854601][ T6541] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.854622][ T6541] ? __pfx_kthread+0x10/0x10 [ 605.854641][ T6541] ret_from_fork+0x3fc/0x770 [ 605.854661][ T6541] ? __pfx_ret_from_fork+0x10/0x10 [ 605.854680][ T6541] ? __switch_to_asm+0x39/0x70 [ 605.854700][ T6541] ? __switch_to_asm+0x33/0x70 [ 605.854719][ T6541] ? __pfx_kthread+0x10/0x10 [ 605.854738][ T6541] ret_from_fork_asm+0x1a/0x30 [ 605.854765][ T6541] [ 605.854772][ T6541] [ 606.154964][ T6541] Allocated by task 11795: [ 606.159370][ T6541] kasan_save_track+0x3e/0x80 [ 606.164028][ T6541] __kasan_slab_alloc+0x6c/0x80 [ 606.168858][ T6541] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 606.174294][ T6541] xfrm_state_alloc+0x24/0x2f0 [ 606.179045][ T6541] xfrm_state_find+0x37d4/0x5400 [ 606.183967][ T6541] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 606.190108][ T6541] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 606.195466][ T6541] xfrm_lookup_route+0x3c/0x1c0 [ 606.200304][ T6541] rawv6_sendmsg+0xdab/0x1820 [ 606.204976][ T6541] __sock_sendmsg+0x19c/0x270 [ 606.209648][ T6541] ____sys_sendmsg+0x52d/0x830 [ 606.214391][ T6541] ___sys_sendmsg+0x21f/0x2a0 [ 606.219046][ T6541] __sys_sendmmsg+0x227/0x430 [ 606.223701][ T6541] __x64_sys_sendmmsg+0xa0/0xc0 [ 606.228535][ T6541] do_syscall_64+0xfa/0x3b0 [ 606.233017][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.239034][ T6541] [ 606.241342][ T6541] Freed by task 983: [ 606.245217][ T6541] kasan_save_track+0x3e/0x80 [ 606.249902][ T6541] kasan_save_free_info+0x46/0x50 [ 606.254913][ T6541] __kasan_slab_free+0x5b/0x80 [ 606.259657][ T6541] kmem_cache_free+0x18f/0x400 [ 606.264424][ T6541] xfrm_state_gc_task+0x52d/0x6b0 [ 606.269436][ T6541] process_scheduled_works+0xae1/0x17b0 [ 606.274960][ T6541] worker_thread+0x8a0/0xda0 [ 606.279537][ T6541] kthread+0x70e/0x8a0 [ 606.283586][ T6541] ret_from_fork+0x3fc/0x770 [ 606.288148][ T6541] ret_from_fork_asm+0x1a/0x30 [ 606.292890][ T6541] [ 606.295192][ T6541] The buggy address belongs to the object at ffff888057b78440 [ 606.295192][ T6541] which belongs to the cache xfrm_state of size 928 [ 606.309145][ T6541] The buggy address is located 816 bytes inside of [ 606.309145][ T6541] freed 928-byte region [ffff888057b78440, ffff888057b787e0) [ 606.322918][ T6541] [ 606.325228][ T6541] The buggy address belongs to the physical page: [ 606.331635][ T6541] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057b7bb80 pfn:0x57b78 [ 606.341684][ T6541] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 606.350162][ T6541] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 606.358641][ T6541] page_type: f5(slab) [ 606.362607][ T6541] raw: 00fff00000000240 ffff88801bf33140 ffff88801afb3708 ffffea0001627f10 [ 606.371166][ T6541] raw: ffff888057b7bb80 00000000000f0003 00000000f5000000 0000000000000000 [ 606.379726][ T6541] head: 00fff00000000240 ffff88801bf33140 ffff88801afb3708 ffffea0001627f10 [ 606.388374][ T6541] head: ffff888057b7bb80 00000000000f0003 00000000f5000000 0000000000000000 [ 606.397025][ T6541] head: 00fff00000000002 ffffea00015ede01 00000000ffffffff 00000000ffffffff [ 606.405673][ T6541] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 606.414329][ T6541] page dumped because: kasan: bad access detected [ 606.420728][ T6541] page_owner tracks the page as allocated [ 606.426423][ T6541] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7658, tgid 7647 (syz.1.445), ts 196961855323, free_ts 96246878772 [ 606.445513][ T6541] post_alloc_hook+0x240/0x2a0 [ 606.450267][ T6541] get_page_from_freelist+0x21e4/0x22c0 [ 606.455787][ T6541] __alloc_frozen_pages_noprof+0x181/0x370 [ 606.461567][ T6541] alloc_pages_mpol+0x232/0x4a0 [ 606.466399][ T6541] allocate_slab+0x8a/0x370 [ 606.470878][ T6541] ___slab_alloc+0xbeb/0x1410 [ 606.475538][ T6541] kmem_cache_alloc_noprof+0x283/0x3c0 [ 606.480975][ T6541] xfrm_state_alloc+0x24/0x2f0 [ 606.485746][ T6541] xfrm_state_find+0x37d4/0x5400 [ 606.490662][ T6541] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 606.496790][ T6541] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 606.502138][ T6541] xfrm_lookup_route+0x3c/0x1c0 [ 606.506962][ T6541] udp_sendmsg+0x142e/0x2170 [ 606.511528][ T6541] __sock_sendmsg+0x19c/0x270 [ 606.516182][ T6541] ____sys_sendmsg+0x52d/0x830 [ 606.520922][ T6541] ___sys_sendmsg+0x21f/0x2a0 [ 606.525573][ T6541] page last free pid 5235 tgid 5235 stack trace: [ 606.531894][ T6541] __free_frozen_pages+0xbc4/0xd30 [ 606.536986][ T6541] __put_partials+0x156/0x1a0 [ 606.541639][ T6541] put_cpu_partial+0x17c/0x250 [ 606.546374][ T6541] __slab_free+0x2d5/0x3c0 [ 606.550764][ T6541] qlist_free_all+0x97/0x140 [ 606.555329][ T6541] kasan_quarantine_reduce+0x148/0x160 [ 606.560776][ T6541] __kasan_slab_alloc+0x22/0x80 [ 606.565607][ T6541] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 606.571064][ T6541] getname_flags+0xb8/0x540 [ 606.575545][ T6541] do_sys_openat2+0xbc/0x1c0 [ 606.580116][ T6541] __x64_sys_openat+0x138/0x170 [ 606.584939][ T6541] do_syscall_64+0xfa/0x3b0 [ 606.589421][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.595299][ T6541] [ 606.597613][ T6541] Memory state around the buggy address: [ 606.603243][ T6541] ffff888057b78600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 606.611296][ T6541] ffff888057b78680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 606.619333][ T6541] >ffff888057b78700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 606.627367][ T6541] ^ [ 606.635061][ T6541] ffff888057b78780: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 606.643110][ T6541] ffff888057b78800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 606.651143][ T6541] ================================================================== [ 606.659304][ T6541] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 606.666480][ T6541] CPU: 1 UID: 0 PID: 6541 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 606.675995][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 606.686030][ T6541] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 606.692966][ T6541] Call Trace: [ 606.696224][ T6541] [ 606.699134][ T6541] dump_stack_lvl+0x99/0x250 [ 606.703701][ T6541] ? __asan_memcpy+0x40/0x70 [ 606.708269][ T6541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.713446][ T6541] ? __pfx__printk+0x10/0x10 [ 606.718022][ T6541] vpanic+0x281/0x750 [ 606.721980][ T6541] ? __pfx_vpanic+0x10/0x10 [ 606.726464][ T6541] ? irqentry_exit+0x74/0x90 [ 606.731040][ T6541] panic+0xb9/0xc0 [ 606.734737][ T6541] ? __pfx_panic+0x10/0x10 [ 606.739126][ T6541] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 606.745001][ T6541] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 606.750894][ T6541] ? xfrm_state_find+0x2cf2/0x5400 [ 606.755985][ T6541] check_panic_on_warn+0x89/0xb0 [ 606.760905][ T6541] ? xfrm_state_find+0x2cf2/0x5400 [ 606.765991][ T6541] end_report+0x78/0x160 [ 606.770213][ T6541] kasan_report+0x129/0x150 [ 606.774693][ T6541] ? xfrm_state_find+0x2cf2/0x5400 [ 606.779782][ T6541] xfrm_state_find+0x2cf2/0x5400 [ 606.784696][ T6541] ? check_noncircular+0xe0/0x160 [ 606.789699][ T6541] ? validate_chain+0x897/0x2140 [ 606.794622][ T6541] ? xfrm_state_find+0x1da/0x5400 [ 606.799634][ T6541] ? __pfx_xfrm_state_find+0x10/0x10 [ 606.804907][ T6541] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 606.811071][ T6541] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 606.816956][ T6541] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 606.823528][ T6541] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 606.829403][ T6541] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 606.835383][ T6541] ? xfrm_expand_policies+0x41f/0x6a0 [ 606.840748][ T6541] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 606.846101][ T6541] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 606.851887][ T6541] ? inet_confirm_addr+0x5a/0x300 [ 606.856893][ T6541] xfrm_lookup_route+0x3c/0x1c0 [ 606.861756][ T6541] send4+0x445/0xe20 [ 606.865646][ T6541] ? __lock_acquire+0xab9/0xd20 [ 606.870508][ T6541] ? send4+0x201/0xe20 [ 606.874560][ T6541] ? __pfx_send4+0x10/0x10 [ 606.878960][ T6541] ? wg_socket_send_skb_to_peer+0x54/0x1d0 [ 606.884751][ T6541] ? wg_socket_send_buffer_to_peer+0x13b/0x1c0 [ 606.890909][ T6541] wg_socket_send_skb_to_peer+0xd1/0x1d0 [ 606.896554][ T6541] wg_packet_handshake_send_worker+0x1db/0x320 [ 606.902691][ T6541] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 606.909353][ T6541] ? _raw_spin_unlock_irq+0x23/0x50 [ 606.914532][ T6541] ? process_scheduled_works+0x9ef/0x17b0 [ 606.920226][ T6541] ? process_scheduled_works+0x9ef/0x17b0 [ 606.925922][ T6541] process_scheduled_works+0xae1/0x17b0 [ 606.931452][ T6541] ? __pfx_process_scheduled_works+0x10/0x10 [ 606.937410][ T6541] worker_thread+0x8a0/0xda0 [ 606.941984][ T6541] kthread+0x70e/0x8a0 [ 606.946031][ T6541] ? __pfx_worker_thread+0x10/0x10 [ 606.951118][ T6541] ? __pfx_kthread+0x10/0x10 [ 606.955684][ T6541] ? _raw_spin_unlock_irq+0x23/0x50 [ 606.960865][ T6541] ? lockdep_hardirqs_on+0x9c/0x150 [ 606.966042][ T6541] ? __pfx_kthread+0x10/0x10 [ 606.970609][ T6541] ret_from_fork+0x3fc/0x770 [ 606.975181][ T6541] ? __pfx_ret_from_fork+0x10/0x10 [ 606.980286][ T6541] ? __switch_to_asm+0x39/0x70 [ 606.985040][ T6541] ? __switch_to_asm+0x33/0x70 [ 606.989883][ T6541] ? __pfx_kthread+0x10/0x10 [ 606.994460][ T6541] ret_from_fork_asm+0x1a/0x30 [ 606.999212][ T6541] [ 607.002514][ T6541] Kernel Offset: disabled [ 607.006828][ T6541] Rebooting in 86400 seconds..