last executing test programs: 12.674802891s ago: executing program 0 (id=1448): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x446982, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224000100007f0009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, &(0x7f00000000c0)={0x60, 0x2, 0xb, {0xb, 0xd, "1d29125fa36bc2857d"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000025c0)) r3 = open(&(0x7f0000000100)='./bus\x00', 0x3c3140, 0xa2) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES8], 0x48) 9.421756892s ago: executing program 0 (id=1459): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./cgroup/../file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100ac1414aa000000000000000000000000fc000000000000000000000000000000000000fe80000000000000aa000000000000000f02000a00"/88], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030103030303130303030302c757365725f69643d", @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRES64=r5, @ANYRESOCT=r2]) umount2(&(0x7f0000000300)='./file0\x00', 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 8.654683692s ago: executing program 2 (id=1463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xd, &(0x7f0000000340)={0xcf44, 0xfffffffffffffff7}, 0x0) r2 = io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x6a0d, 0x3000, 0x1, 0x3cb}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0x10, 0x2, 0x377, 0x0, r2}, 0x1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x700, 0x7800, 0x81, 0x2, {{0x1f, 0x4, 0x0, 0x5, 0x7c, 0x67, 0x0, 0x96, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@cipso={0x86, 0x14, 0x2, [{0x1, 0xe, "702454d248dcc1a9d3fa5435"}]}, @timestamp_prespec={0x44, 0x1c, 0x4d, 0x3, 0xf, [{@empty, 0x7}, {@empty, 0x3}, {@remote, 0x4}]}, @end, @ssrr={0x89, 0x7, 0xe8, [@broadcast]}, @rr={0x7, 0x7, 0xb7, [@multicast2]}, @timestamp={0x44, 0x8, 0x17, 0x0, 0x1, [0x2]}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0xe, "f0fdb21ce322529c8ceda69f"}, @generic={0x89, 0xe, "82d0093adf5381e198d726c3"}]}}}}}) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) pread64(r3, &(0x7f0000000100)=""/70, 0x46, 0x8002) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r5 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000002380)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000004c0)="a309c8d869a339bd69ae2d9d65bafaf9fcbcadb40d63363aeaca23a9a48f6f2051161f9a6e25849b960f4be9e727cb7b5c7d69375695e2226dc546bb18fabf9bed02a4c16f7cf80510e17616115ffe3c320dd92d860727c781f4f32c4137e256d9e4b9ba0382a45999b91917edea4101f41779e952faea706af44f0cb18493ab1c62ca3d63922d83c509614308a2d91aa9358fde269a22b6b121323e5e5a6f12e86e2ae8", 0xa4}, {&(0x7f0000000040)="b605483b63efcc7162b74a692cc3a5ae106af42ef2bf6e32a9dd47405c799968d2261f", 0x23}, {&(0x7f0000000580)="edffeafd96fa50baad956ab94ceef4a3c758ec216a18d5b0faf6d2be9142d013760db81406ac336d89a284b0e509ebc1652dfe3770fce13705db8bba0d6ceefbb8ebe99605b58212dbea96361a3920de0d0dc5ba47531b79d2389f4c2e9f52618e9e8e9231a56e936cf43cc87ae78488b820f41774d3959fd4823a46773edc51c44860ccaffc922ef1929d247cc1a85e2c81eee199c4bc59ed140b385cc776c57046cf452dcbdc5ad3f98656457332e2e452cd71b9d6bccfaf60eade94eb818c", 0xc0}, {&(0x7f0000000640)="bdb47bc9e1c60ffda9e3b1f3ec1f98d1fd878a322fab6b51bc18473beb2327770435b902b97b57314975e7af413b8f6e4bd04a572399238e006b9b68c26f5d4738a148e4c3777fa2daa391ea53a78160d964ac1019f18eed39f47d9affda93bf877890293367df29cbc96dc4cd34425821acb5655fedbea64bf95e7e0390492f318730d997bffc8ae7f9f181d8f7843637b34ec00e58c2dacfda7411500f4ed8329b7277402196be7393db03c8002f9a12f54ddcdfd36fec7e73c45f507b98a3fb8ff5aa9c2c61102da9da6185a969eb", 0xd0}], 0x4, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000740)="59257daa8e4dd2209028fed55c056b06349098e564c73901de6f8f95a12f5b5aad5faf4bdbf02c52b1d2cdb02550047b4caa72d26176ea46dacb1fde1ffac253ea5bcaded6b511395772ed45b0448972ce7a015bbdefbd855dd5f1eb638cd599823c84", 0x63}, {&(0x7f00000007c0)="9c520e098d824f784ced551a79aa03dfac76f1fb44ac3be69a8d2dc12a966843d2aa3ca83f0f6c32dbf56eec7c2db160d911571ee571072d5d903e96faa28ad9780a0dfe289a7aeb1eed3639267771e3aa73ff9122a96fb5b16ed8e181cc3203086ea4c27c27bece17d8a9fc6f424b71237237f4544fb563ef79d6b944a1be29ba66815720d1875e86c47e7acf14f8702db077b71b1e9a98d51a719200f120179a4021fee5168572f934701fe0c5fdaac7a4582f742c74af66", 0xb9}, {&(0x7f0000000880)="23c98bd35ba5f61a380a7d25b8137aa277231e709000d4eb1845ee02a2c8c3ad7722cef4a4dbd877f09ca0c858efd4d83c64a3930efe4d62ab490c2609f9b99dbf2e279a49907ee32b375e966ebaec50ae3d5c81884cb3f9e8226ed1055c7226d82e25cdc17286eea4285d2fd2b925ffbfb1219a727d168d645856a71eff1de6f0b1e7b41a546989685a59b76e9820ade2caece2fd122d9cff9436e3ad8d4a7e72c8c056a721f3a26cc53a5a0959f039bbe678421cfafd92fb70a458cef26c6884e7", 0xc2}, {&(0x7f0000000980)="8b5160c01ebd7a3023bc2edbf1572388a82428a3192f0662160eadab5745d207edac029f150f1c70cc9ea7cab33fe026f302fccebf8b96c2088249517b3875ebe93a17a20707787767293fd5181768b32e15e398abcedc7634ac1e9d0619c90cbc62e519c21f50874c32af170caa342b0c8ad4c342b7c72bb1155282cbb275b39f274b37084e782d3e8a518324f6609c27000d79cd66b9f01c199b9c892e88d33a1f81a9", 0xa4}, {&(0x7f0000000a40)="4c5207e5f939a410139b3da5cdc4222083bc15f0dd956732d4caf003d3159cdf1aec791e42aea1a439772a5b74cce62f51f1d5a533a78489340b1bbb1f4f0c82d103a8c32876a86ccc981c374ea8acd5e7371b1bcf24294bed58a23ca268a2804e3ddee9963648ac87fca936d1c74b1b0b6f", 0x72}, {&(0x7f0000000ac0)="65cad02d96a64dc21e054df3985034251d3aef46077fceab0ecbc18b48ae2073fcb7484ecbb57f238c8ea36f6b05f28b9dec5be722dd8e66586bf6f24e206ee19341d2ce358536b4200954a1f4ae7c329577477984747d03b45af56af8de32a0372445744d0b6feb49b4b0fc9cd0f518807679190ccf9c78acb8b573d201ad1b0ef7520692423817f6f21fcd6bbe91bfbbfabe89a82537c6980f153b10ff7e08c82e49ecec132e426d8c7a0f5795525480287631212c9c4de03ca6d9d48a384d6948eb35b75b5592d36255e93d4284e390", 0xd1}, {&(0x7f0000000bc0)="e70503de8d2012df442980f14e4469de5286c05fabd87e8e0c36dacdf1be9cc903e60794f80fc07f6c23cf9a7dea6201f08512902b7fbab42c1c9d81be48c7e25b32a5e1f901b2db3e17c3fde574e21139a9ec94e668d41a7b816906ec3fd4424b5db1efc8e55d95dcd489da5e1291e639829dac24d39b1aae7cfb5f38b7ca7af35d2950e4276b6aafa25ad377677f342686139313d0cbc209a0a9e6e0184a387749d92f77df77b97fe5227150f66162532372a380252f1c9d11d6c63276aa801c75dbe3e5d3695379895c98d884077beb8d3ff9e6e8", 0xd6}], 0x7, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r4, r0, r0, r1]}}], 0x40, 0x400c842}}, {{&(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000dc0)="b91c31d82aadf8", 0x7}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)="da2b4bfade775ad0ac89d1504505477dd3fd1752f5ee7bd2b684014039a552407a2d70f8", 0x24}, {&(0x7f0000000f00)="4f0c3696518d30382c2ce588ff199248339a73c56abf220b998d90705465f83fde0bd5644d612a08e4612140204755321b04bbe4c7780e66ad86b4f532215ed45b14702914a69d286616eef66c66bd1a4fe3be7171c05eacde8340e289cb0e77177d3d0bf269080545df06522afcec3a755d02f6bbf10f20fe8bef6991f353db539040a05f4faff871a761e6ac2024a93154fd1ac39894800fe8e4f4e6115d51cc3be611411b5496d177556edccb15185abd2f94979908d0a3a56d", 0xbb}], 0x4, &(0x7f00000011c0)=[@rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4, 0xffffffffffffffff, r6, r7, r5, r7]}}, @rights={{0x18, 0x1, 0x1, [r7, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70, 0x2400c8c4}}], 0x3, 0x8000) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 8.466641203s ago: executing program 2 (id=1464): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000800000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x11f, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xe9, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd, [{0x3, 0x9, "bd3e6d4706598080a8030037ff0b00ffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d34ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x10, "77f9290b6e87290b6e87f278e94724e20c43c95f9b49204a64d614d4cc9d0d46d954fda9a75d076993e3b87aa99b2454a86662e37b42678a74974ddd50b21e499efae61e3a816a367d019bc7f892d8975f1fc8a3e27139041cd21d2d12f30ee6f029d8d73f80f9b19d138598345b9c0feda226b333c55c668fb17b5b39603e"}]}}}}}}, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\b \x00\x00\x00\x00\x00\x00\v\x00'/20, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r5, &(0x7f0000001600)=[{{&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}], 0x38}}, {{&(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x2, 0x40) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x70ad26, 0x0, {0x60, 0x0, 0x0, r6, {}, {0x8, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r7 = socket(0x11, 0x3, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r10 = fcntl$dupfd(r8, 0x406, r8) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000003c0)={0x2, 0x3, 0x4, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r9, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/160, 0xfffffcc2}, {0x0}], 0x2) sendmmsg(r7, &(0x7f0000000000)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000025c0)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c80), r11) sendmsg$NL80211_CMD_DEL_KEY(r11, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000280)={0x2c, r13, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040c5}, 0x80) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="0e", 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 7.568492706s ago: executing program 2 (id=1466): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000804) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) mkdir(0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "c94ffb00"}]}}, 0x0}, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000380)={0x1, 0x7, 0x6, &(0x7f0000000300)={0x9, "5cb061db75089733179c8f75d91044055a6c7cd9268b432b842dca4b727aac8c84"}}) r8 = socket$key(0xf, 0x3, 0x2) bind$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) sendmsg$key(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x2, 0x16, 0x4, 0x6, 0x5, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x6c, 0x20, 0x0, @in={0x2, 0x4e22, @multicast1}}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, r5, 0x209, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x401, 0x3, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xe0e6, 0x848a}, [@IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x30}}, 0x400c0c4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r11, 0x303, 0x70bd27, 0x25dfdbfb, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 7.162850743s ago: executing program 1 (id=1467): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffd, 0x6, 0x8, @scatter={0x0, 0x900, 0x0}, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)=""/4103, 0x0, 0x10001, 0x0, 0x0}) 6.989867868s ago: executing program 1 (id=1468): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB, @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 6.986889309s ago: executing program 0 (id=1469): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x446982, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224000100007f0009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, &(0x7f00000000c0)={0x60, 0x2, 0xb, {0xb, 0xd, "1d29125fa36bc2857d"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000025c0)) r3 = open(&(0x7f0000000100)='./bus\x00', 0x3c3140, 0xa2) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES8], 0x48) 6.888482385s ago: executing program 1 (id=1470): openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) syz_usb_connect(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000077f1c910720c0c0059f6010203010902240001000000000904000002d31a3a00090501"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r1, &(0x7f0000000140)="e3a5", 0x2) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000000)={0x1, 0x1fffffe, 0x7, 0x80000000006, 0x9, 0x100000001, 0xfffdfffffffffffe, 0x4, 0x3, 0x2, 0xfffffffd, 0x1}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 6.128736769s ago: executing program 4 (id=1473): r0 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0x5ffd11b8fd4b414e) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000}) 5.826519899s ago: executing program 4 (id=1474): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = dup(r0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0, 0x0, 0x4}) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240008c0}, 0x80) io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, {0xa, 0x4e24, 0x9, @mcast2, 0x9}}}, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r8, &(0x7f0000000080)=[{&(0x7f00000020c0)=""/4082, 0xff2}], 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000340)={'some', 0x20, 0x6, 0x20, 0x101}, 0x2f) r10 = openat$cgroup_pressure(r5, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) write$cgroup_pressure(r10, &(0x7f0000000340)={'full', 0x20, 0x4, 0x20, 0xffffd}, 0x2f) close(r10) socket$alg(0x26, 0x5, 0x0) 5.393929682s ago: executing program 2 (id=1476): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@gettaction={0x18, 0x5a, 0x1, 0x0, 0xffff, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83ac55324dcd8cdde11b71f986ea0c28be9", 0x28, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r5, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x11, @loopback, 0x8000001}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="0100", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)='>', 0x1}], 0x1}}], 0x2, 0x8090) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000040)={0x6, {{0xa, 0x1, 0xade, @mcast2, 0x80000000}}}, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = accept$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000380)=0x1c) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRES64=r8, @ANYRES16=r8, @ANYRES8=r3, @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r10, 0x4010ae68, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x8, "ddd6d29b1f15e144"}, &(0x7f00000002c0)=0x10) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r13 = dup3(r12, r11, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x1c, &(0x7f0000000580)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @tail_call, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0xd, 0x3, 0x8, 0x80}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], &(0x7f0000000680)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x0, 0x0, 0xd}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, r10, r13, r14, r3], &(0x7f0000000980)=[{0x3, 0x3, 0xb, 0x7}, {0x1, 0x4, 0xf, 0x2}, {0x3, 0x3, 0x8, 0x9}, {0x0, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x9, 0xa}, {0x0, 0x4, 0x6, 0xa}, {0x5, 0x5, 0x5, 0xc}, {0x0, 0x5, 0xf, 0x2}, {0x5, 0x3, 0xb, 0x4}, {0x2, 0x4, 0x8}], 0x10, 0xb9c}, 0x94) 4.888096107s ago: executing program 1 (id=1478): timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x77359400}, {r4, r5+10000000}}, &(0x7f00000002c0)) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r9, 0x0, 0x7}, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000001c0)={r9, @in={{0x2, 0x4e24, @local}}, 0x401, 0x9}, &(0x7f0000000000)=0x90) ioctl$KVM_RUN(r6, 0xae80, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d8229720009058202"], 0x0) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002540)=ANY=[@ANYBLOB="4800000040000100fcff070004000000010000000800cb8004000880200001801c00108018000b8014000100fc0000000000000000000000000000000c0002"], 0x48}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$inet(0xa, 0x801, 0x84) listen(r11, 0x8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x15883d8a7a54aef8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) ppoll(&(0x7f0000000040)=[{r11, 0x108}], 0x1, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000480)='.--.\x00\xf6b\xac\xfcG\x89\xd2p\xddC\xd8\xb3\xec+*\x1e\xc8\x90W\xf5\xfb*x\xf2@\xfaeP\xb6\xb4\xae^\xe3iB\x84X\xe1\xc1c2\xf6\x9ee\xb9\x19\x81\xadU\xeaK\x85l\xb6\xe9]\xf7\x04\x03Y|\xc7i\x93\x1b{\x00'/96, 0xc0, 0x0, 0x0) 4.530158841s ago: executing program 2 (id=1479): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x53, {0x53, 0x2, "2cbcfb9a2991aba97ced7e813471929d6f7296027ed0b031f5bfd680e2225b49058c04c5bd334cf3efd8a1f2e4e7d751f3ddd80e5e4c6b8ee900005cf1f5f8f469f4993223006ae8411542617af2364f0d"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x40, 0x12, 0x45, "a13a21589d1b530a67cac861b51218b8974d73062a18e45f24ae385a856a8bccacb8f52e62753715bcd83aa7458985d2c1a725e286403b083fd4b6d96b5f07fef8efa12a8a"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x1aa, 0x8000, 0x1f, 0x5, 0x0, 0x6, 0xc15, 0x9, 0xfff, 0x1, 0x9, 0x800}}, &(0x7f0000000240)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000280)={0x20, 0x83, 0x2}, &(0x7f00000002c0)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000300)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.864134606s ago: executing program 0 (id=1482): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000000000000000000000f21f000000000a03000000000000000000070000040900010073797a3000000000140000001000010000000000000000000084000a"], 0x48}}, 0x0) r0 = socket(0x22, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0x174}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r3, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="00000200"/28], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b73ef572e52c7d292d02000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff0040000000000000000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1cfee735, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) symlink(0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = accept(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r10, 0x89f6, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={@multicast1, 0x0, 0x0, 0x70, 0x0, [{@remote}, {}, {@multicast1}, {@multicast2}, {@loopback}, {@dev}, {@empty}]}}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_int(r11, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) 3.662543715s ago: executing program 3 (id=1485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000140)=""/199, 0xc7}, {0x0}], 0x2, 0x5, 0x0) r5 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000140)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xb}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x600, 0x400a, 0x0, 0xfffffffd, 0x7e, 0xffffffffffffff26}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x4, 0x8, 0x40d, 0x0, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000010000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000090a0300000000000000000002000007140000001100010000000000000041000100000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.590719835s ago: executing program 3 (id=1486): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x41, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 3.503030914s ago: executing program 3 (id=1487): r0 = socket(0x400000000010, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000032c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0xffe0, 0xf}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0xc, 0x0, 0xffeff038}, {0x6}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r4, 0x1, 0x4070bd2b, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}]}, 0x24}}, 0x18) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044881}, 0x8055) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000440)={0x0, 0x79a8, 0x8, 0x1, 0x29a}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) r11 = socket$kcm(0x2, 0x5, 0x84) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r11, 0x84, 0x78, &(0x7f0000000040)=r12, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x400, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0xffffffffffff2ea6, 0xfffffffffffffffc, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f00000005c0), 0x10) recvmmsg(r13, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}, 0xfffffff6}, {{0x0, 0x0, 0x0}, 0xe26f}], 0x2, 0x10010, 0x0) sendmsg$can_bcm(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r14 = open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x80100) sendto$inet(r14, &(0x7f0000000380)="5358335a3631e7e8289da5d2204d81c0bc987bb7a66c138b37107e732bd77d78dbbaf764924a59", 0x27, 0x1, &(0x7f00000003c0)={0x2, 0x4e23, @multicast1}, 0x10) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.069525598s ago: executing program 4 (id=1488): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000170a0108"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x21, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002300)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30", @ANYRES32=0x0, @ANYRES16, @ANYRESDEC, @ANYRES32, @ANYRES16, @ANYRES32=r0, @ANYBLOB="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", @ANYRES32], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.962303918s ago: executing program 0 (id=1489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000170a0108"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x21, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002300)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30", @ANYRES32=0x0, @ANYRES16, @ANYRESDEC, @ANYRES32, @ANYRES16, @ANYRES32=r0, @ANYBLOB="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", @ANYRES32], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.898723852s ago: executing program 4 (id=1490): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[], 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x800000000000000) 2.751177573s ago: executing program 4 (id=1491): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x4, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x80000000, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x80000, 0x8000, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0x9, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x1, 0x0, 0x7, 0xfffffffc, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x4, 0x9, 0x8, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x103, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x4000000d, 0xfdffffff, 0x0, 0x9, 0x3, 0x0, 0x5, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0xffffffd, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000009, 0x0, 0x0, 0x40, 0x0, 0x7, 0xd, 0x0, 0x0, 0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_SREGS2(r0, 0x8140aecc, &(0x7f0000000080)) r1 = fspick(r0, &(0x7f00000001c0)='./file0\x00', 0x0) ioctl$KVM_SET_SREGS2(r0, 0x4140aecd, &(0x7f0000000200)={{0x2, 0x7000, 0xb, 0x1, 0x0, 0x5, 0x6, 0x6, 0x8, 0x15, 0x90, 0x1c}, {0x1000, 0xfec00000, 0xa, 0x9, 0x2, 0x13, 0x0, 0x5, 0xb2, 0x9, 0x8}, {0xfec00000, 0xf000, 0xc, 0x0, 0x7f, 0x3, 0x44, 0x80, 0x9, 0x1, 0x0, 0x5}, {0x800f000, 0xdddd0000, 0xd54e466824905103, 0x3, 0xfc, 0x81, 0x2, 0xa6, 0x9, 0x4, 0x4, 0xa}, {0x1000, 0x0, 0x8, 0x93, 0x8, 0x5, 0x0, 0x7, 0x3, 0x2, 0xf8, 0x20}, {0x7000, 0xeeee0000, 0x0, 0x10, 0x75, 0x2, 0x10, 0x1, 0x5, 0x8, 0x0, 0x1c}, {0x77514f7720f8d409, 0x0, 0x1e, 0x6, 0x8, 0x6, 0xfd, 0x0, 0x79, 0x9c, 0xf3, 0x5}, {0x25000, 0xeeee8000, 0x10, 0x4, 0x1, 0x1, 0x7, 0x53, 0x8, 0x8, 0xdc}, {0x6000}, {0xdddd0000, 0x8bf}, 0x2004000c, 0x0, 0x54000, 0x100, 0xc, 0x1, 0xe000, 0x1, [0xdd4e, 0x0, 0x3, 0xfff]}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) 2.735369732s ago: executing program 4 (id=1492): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x446982, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224000100007f0009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, &(0x7f00000000c0)={0x60, 0x2, 0xb, {0xb, 0xd, "1d29125fa36bc2857d"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000025c0)) r3 = open(&(0x7f0000000100)='./bus\x00', 0x3c3140, 0xa2) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYRES8], 0x48) 2.697278782s ago: executing program 0 (id=1493): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./cgroup/../file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100ac1414aa000000000000000000000000fc000000000000000000000000000000000000fe80000000000000aa000000000000000f02000a00"/88], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030103030303130303030302c757365725f69643d", @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRES64=r5, @ANYRESOCT=r2]) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 2.623628715s ago: executing program 3 (id=1494): socket$kcm(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x4) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.356942228s ago: executing program 3 (id=1495): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x5, 0xbf8a, 0xfffffe0000000001, 0xfa11, 0xfff}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x3, 0x841, 0x3, 0x9, 0x100, 0x80000001, 0xffff}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x58, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}]}}]}, 0x58}}, 0x24040084) bind$inet(0xffffffffffffffff, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000005c0)={&(0x7f0000000140)=@canfd={{0x4, 0x0, 0x1}, 0x32, 0x2, 0x0, 0x0, "1a0f15a74ced1faed02d8eca4b9583bc785f35ec178ecc6b1505e76345becf55672f46211934eb4f58e9242778e88aa57dced2c654dd907a466d31f4b8149d71"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r8 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r6) 1.57491839s ago: executing program 1 (id=1496): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x5, 0xbf8a, 0xfffffe0000000001, 0xfa11, 0xfff}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x3, 0x841, 0x3, 0x9, 0x100, 0x80000001, 0xffff}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x58, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}]}}]}, 0x58}}, 0x24040084) bind$inet(0xffffffffffffffff, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000005c0)={&(0x7f0000000140)=@canfd={{0x4, 0x0, 0x1}, 0x32, 0x2, 0x0, 0x0, "1a0f15a74ced1faed02d8eca4b9583bc785f35ec178ecc6b1505e76345becf55672f46211934eb4f58e9242778e88aa57dced2c654dd907a466d31f4b8149d71"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r8 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r6) 832.377139ms ago: executing program 2 (id=1497): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x0) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r3, &(0x7f0000000480)=@random={'btrfs.', '\x00\x00\x00\x00 \x00\x00\x00fP'}) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x459, 0x10, r4, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x378, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x100000, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 54.44008ms ago: executing program 3 (id=1498): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/40, 0x28}], 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) read$midi(r0, 0x0, 0x14) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080), 0xc) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) 0s ago: executing program 1 (id=1499): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) close(r4) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) kernel console output (not intermixed with test programs): ) failed : -71 [ 276.475631][ T57] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 276.512831][ T57] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 276.594477][ T5901] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 276.602531][ T9243] fuse: Bad value for 'fd' [ 276.630638][ T57] usb 4-1: USB disconnect, device number 55 [ 276.775492][ T3452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.791272][ T5901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.804508][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 276.814193][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.846107][ T5901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.867253][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 276.885147][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.914459][ T5901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.941547][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 276.956949][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.974372][ T57] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 277.045851][ T5901] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 277.089699][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.116791][ T5901] usb 3-1: Product: syz [ 277.131331][ T5901] usb 3-1: Manufacturer: syz [ 277.139828][ T57] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 277.152677][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.162235][ T5901] usb 3-1: SerialNumber: syz [ 277.185800][ T5901] usb 3-1: config 0 descriptor?? [ 277.190803][ T57] usb 4-1: Product: syz [ 277.202441][ T57] usb 4-1: Manufacturer: syz [ 277.211425][ T5901] ti_usb_3410_5052 3-1:0.0: required endpoints missing [ 277.220052][ T57] usb 4-1: SerialNumber: syz [ 277.441725][ T9243] netlink: 64 bytes leftover after parsing attributes in process `syz.3.987'. [ 278.014403][ T5909] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 278.058229][ T9267] netlink: 32 bytes leftover after parsing attributes in process `syz.4.996'. [ 278.097846][ T57] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 278.130254][ T57] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 278.163515][ T57] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 278.164553][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 278.196813][ T57] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 278.205210][ T5909] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.218670][ T57] usb 4-1: USB disconnect, device number 56 [ 278.226076][ T5909] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.250160][ T5909] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 278.267940][ T5909] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 278.285878][ T5909] usb 2-1: Product: syz [ 278.293554][ T5909] usb 2-1: Manufacturer: syz [ 278.415873][ T5909] hub 2-1:4.0: USB hub found [ 278.711747][ T9275] fuse: Unknown parameter '0x000000000000000a' [ 278.767347][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.786743][ T5964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.829256][ T5909] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 279.304696][ T5909] usb 3-1: USB disconnect, device number 56 [ 279.335099][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 279.349255][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 279.846472][ T9296] openvswitch: netlink: Actions may not be safe on all matching packets [ 279.857538][ T9296] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 279.864191][ T9296] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 279.871966][ T9296] vhci_hcd vhci_hcd.0: Device attached [ 279.894639][ T5909] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 279.977470][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.030316][ T9302] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1007'. [ 280.045016][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 280.051902][ T5909] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 280.061759][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.073563][ T5909] usb 3-1: config 0 descriptor?? [ 280.114479][ T921] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 280.135256][ T5888] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 280.283908][ T5909] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 280.296668][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 280.314172][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 280.328922][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 280.344027][ T5909] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 280.354478][ T5888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 280.371242][ T5909] usb 3-1: media controller created [ 280.376805][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 280.406867][ T5888] usb 4-1: SerialNumber: syz [ 280.415998][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.437430][ T5888] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 280.461744][ T5888] usb-storage 4-1:1.0: USB Mass Storage device detected [ 280.487030][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 280.504154][ T9304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.511425][ T9304] IPv6: NLM_F_CREATE should be set when creating new route [ 280.548807][ T5888] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 280.568630][ T9] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 280.592405][ T5888] scsi host1: usb-storage 4-1:1.0 [ 280.934938][ T5888] usb 2-1: USB disconnect, device number 54 [ 281.060632][ T9318] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20001 [ 281.166563][ T9291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.179620][ T9291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.211124][ T5909] az6027: usb out operation failed. (-71) [ 281.225748][ T5909] az6027: usb out operation failed. (-71) [ 281.231665][ T5909] stb0899_attach: Driver disabled by Kconfig [ 281.238111][ T5909] az6027: no front-end attached [ 281.238111][ T5909] [ 281.246802][ T5909] az6027: usb out operation failed. (-71) [ 281.252674][ T5909] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 281.264476][ T6456] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 281.270629][ T5909] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 281.299256][ T5909] dvb-usb: schedule remote query interval to 400 msecs. [ 281.314100][ T5909] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 281.336109][ T5909] usb 3-1: USB disconnect, device number 57 [ 281.365517][ T5909] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 281.374879][ T5901] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 281.424444][ T6456] usb 5-1: Using ep0 maxpacket: 16 [ 281.502330][ T9325] fuse: Unknown parameter '0x000000000000000a' [ 281.610806][ T6456] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 281.622177][ T6456] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 281.632316][ T6456] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 281.650373][ T6456] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 281.664346][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 281.673907][ T5901] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 281.684890][ T6456] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 281.697108][ T5901] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 281.710408][ T6456] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.720805][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 281.732882][ T6456] usb 5-1: Product: syz [ 281.739380][ T6456] usb 5-1: Manufacturer: syz [ 281.744017][ T5901] usb 2-1: config 1 has no interface number 0 [ 281.751419][ T6456] usb 5-1: SerialNumber: syz [ 281.757498][ T5901] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 281.770665][ T6456] usb 5-1: config 0 descriptor?? [ 281.785284][ T9315] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 281.793472][ T5901] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 281.808343][ T6456] port100 5-1:0.0: NFC: Could not get supported command types [ 281.823230][ T5901] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 281.859588][ T5901] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 281.885026][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.948848][ T5901] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 282.158777][ T5901] snd_usb_pod 2-1:1.1: cannot start listening: -90 [ 282.173634][ T5901] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 282.198305][ T5901] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 282.339439][ T9332] xt_NFQUEUE: number of total queues is 0 [ 282.359077][ T9] usb 2-1: USB disconnect, device number 55 [ 282.414420][ T5901] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 282.535283][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.564368][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 282.571404][ T5901] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 282.579897][ T5901] usb 3-1: config 0 has no interface number 0 [ 282.586118][ T5901] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 282.607707][ T5901] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 282.621468][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.634447][ T5901] usb 3-1: Product: syz [ 282.640525][ T5901] usb 3-1: Manufacturer: syz [ 282.647772][ T5901] usb 3-1: SerialNumber: syz [ 282.659554][ T5901] usb 3-1: config 0 descriptor?? [ 282.671555][ T9328] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 282.887050][ T9328] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 282.926661][ T6456] usb 4-1: USB disconnect, device number 57 [ 282.950004][ T9297] vhci_hcd: connection reset by peer [ 282.955733][ T13] vhci_hcd vhci_hcd.3: stop threads [ 282.985440][ T13] vhci_hcd vhci_hcd.3: release socket [ 283.065314][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 283.287800][ T9340] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1018'. [ 283.440736][ T57] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 283.537576][ T5901] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 283.552102][ T5901] asix 3-1:0.188: probe with driver asix failed with error -71 [ 283.569020][ T5901] usb 3-1: USB disconnect, device number 58 [ 283.596428][ T57] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 283.609703][ T57] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.630891][ T57] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 283.640036][ T57] usb 2-1: config 1 has no interface number 1 [ 283.647113][ T57] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 283.660169][ T6456] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 283.673623][ T57] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.683053][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.691155][ T57] usb 2-1: Product: syz [ 283.695488][ T57] usb 2-1: Manufacturer: syz [ 283.700134][ T57] usb 2-1: SerialNumber: syz [ 283.820834][ T6456] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.831316][ T6456] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 283.841636][ T6456] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.844509][ T9343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.861811][ T9343] IPv6: NLM_F_CREATE should be set when creating new route [ 283.888511][ T6456] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.906715][ T5948] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.917754][ T6456] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 283.957695][ T5901] usb 5-1: USB disconnect, device number 55 [ 283.974501][ T6456] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.009629][ T57] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 284.035166][ T57] usb 2-1: MIDIStreaming interface descriptor not found [ 284.065980][ T6456] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.173747][ T6456] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 284.206889][ T57] usb 2-1: USB disconnect, device number 56 [ 284.254784][ T6456] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.324356][ T6460] udevd[6460]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.459032][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.556500][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.637328][ T6456] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 284.671149][ T6456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.720506][ T6456] usb 4-1: Product: syz [ 284.731606][ T6456] usb 4-1: Manufacturer: syz [ 284.754586][ T6456] usb 4-1: SerialNumber: syz [ 284.875591][ T6456] usb 4-1: config 0 descriptor?? [ 284.998508][ T6456] ti_usb_3410_5052 4-1:0.0: required endpoints missing [ 285.096927][ T5938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 285.264970][ T921] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 285.747117][ T5938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.327432][ T9377] loop4: detected capacity change from 0 to 7 [ 286.338017][ T9377] Dev loop4: unable to read RDB block 7 [ 286.344020][ T9377] loop4: unable to read partition table [ 286.350076][ T9377] loop4: partition table beyond EOD, truncated [ 286.359986][ T9377] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 286.495905][ T9382] fuse: Unknown parameter '0x000000000000000a' [ 286.552762][ T921] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 286.724353][ T921] usb 5-1: Using ep0 maxpacket: 32 [ 286.733427][ T921] usb 5-1: unable to get BOS descriptor or descriptor too short [ 286.743809][ T921] usb 5-1: config 244 has an invalid interface number: 68 but max is 0 [ 286.762284][ T921] usb 5-1: config 244 has an invalid descriptor of length 245, skipping remainder of the config [ 286.793235][ T921] usb 5-1: config 244 has no interface number 0 [ 286.800878][ T921] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0x3 has invalid maxpacket 34780, setting to 1024 [ 286.827892][ T921] usb 5-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1024 [ 286.849155][ T921] usb 5-1: config 244 interface 68 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 286.883225][ T921] usb 5-1: config 244 interface 68 has no altsetting 0 [ 286.903464][ T921] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 286.944799][ T921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.960080][ T921] usb 5-1: Product: syz [ 286.969553][ T921] usb 5-1: Manufacturer: syz [ 286.980660][ T921] usb 5-1: SerialNumber: syz [ 287.002173][ T9372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 287.107965][ T57] usb 4-1: USB disconnect, device number 58 [ 287.229436][ T9399] fuse: Bad value for 'fd' [ 287.237670][ T9399] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1037'. [ 287.260831][ T921] comedi comedi5: Wrong number of endpoints [ 287.294345][ T921] dt9812 5-1:244.68: driver 'dt9812' failed to auto-configure device. [ 287.318990][ T921] usb 5-1: USB disconnect, device number 56 [ 287.402825][ T9406] xt_NFQUEUE: number of total queues is 0 [ 287.655093][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.731948][ T9412] fuse: Bad value for 'user_id' [ 287.832536][ T9412] fuse: Bad value for 'user_id' [ 287.934424][ T921] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 288.092720][ T921] usb 3-1: Using ep0 maxpacket: 32 [ 288.334616][ T921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.334637][ T921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.334659][ T921] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 288.334672][ T921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.384201][ T921] usb 3-1: config 0 descriptor?? [ 288.424959][ T921] hub 3-1:0.0: USB hub found [ 288.609346][ T921] hub 3-1:0.0: 29 ports detected [ 288.609689][ T921] hub 3-1:0.0: insufficient power available to use all downstream ports [ 288.967928][ T921] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 288.967973][ T921] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 288.971595][ T921] usbhid 3-1:0.0: can't add hid device: -71 [ 288.971686][ T921] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 288.994940][ T921] usb 3-1: USB disconnect, device number 59 [ 289.185367][ T57] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 289.454358][ T57] usb 4-1: Using ep0 maxpacket: 32 [ 289.503229][ T9428] fuse: Unknown parameter '0x000000000000000a' [ 289.534831][ T57] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.534851][ T57] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.565368][ T57] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 289.565387][ T57] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 289.565398][ T57] usb 4-1: Product: syz [ 289.565405][ T57] usb 4-1: Manufacturer: syz [ 289.575316][ T3452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.577868][ T57] hub 4-1:4.0: USB hub found [ 289.778570][ T57] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 290.216654][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.216654][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.274372][ T9] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 290.443126][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.467261][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 290.503734][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.627220][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.656027][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 290.680365][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.722570][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.745628][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 290.808600][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.865557][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.923412][ T9] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 291.002833][ T9462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1056'. [ 291.035536][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.078165][ T9] usb 2-1: Product: syz [ 291.132954][ T9] usb 2-1: Manufacturer: syz [ 291.158029][ T9] usb 2-1: SerialNumber: syz [ 291.173491][ T9] usb 2-1: config 0 descriptor?? [ 291.183867][ T9] ti_usb_3410_5052 2-1:0.0: required endpoints missing [ 291.506319][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 291.799395][ T9475] fuse: Unknown parameter '0x000000000000000a' [ 292.085578][ T921] usb 4-1: USB disconnect, device number 59 [ 292.346437][ T9487] fuse: Unknown parameter '0x000000000000000a' [ 292.440004][ T9488] xt_NFQUEUE: number of total queues is 0 [ 292.776219][ T5941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.060254][ T6456] usb 2-1: USB disconnect, device number 57 [ 293.123855][ T9505] fuse: Bad value for 'fd' [ 293.144547][ T9505] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1067'. [ 293.814436][ T57] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 293.921983][ T9518] xt_NFQUEUE: number of total queues is 0 [ 293.937882][ T6456] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 294.104335][ T57] usb 4-1: Using ep0 maxpacket: 32 [ 294.114187][ T57] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 294.124536][ T6456] usb 5-1: Using ep0 maxpacket: 32 [ 294.130028][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.140120][ T6456] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.172014][ T57] usb 4-1: config 0 descriptor?? [ 294.178764][ T6456] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.204800][ T6456] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 294.226150][ T6456] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 294.244585][ T6456] usb 5-1: Product: syz [ 294.255333][ T6456] usb 5-1: Manufacturer: syz [ 294.287716][ T6456] hub 5-1:4.0: USB hub found [ 294.400443][ T57] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 294.421793][ T57] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 294.474392][ T57] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 294.486647][ T6456] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 294.497486][ T57] usb 4-1: media controller created [ 294.537960][ T57] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 294.666258][ T921] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 294.678358][ T921] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 294.744509][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 294.904380][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 294.915034][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 294.933398][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.960308][ T9] usb 2-1: config 0 descriptor?? [ 295.138309][ T9533] openvswitch: netlink: Actions may not be safe on all matching packets [ 295.192923][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 295.203614][ T9534] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 295.208358][ T9512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.210233][ T9534] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 295.213023][ T9534] vhci_hcd vhci_hcd.0: Device attached [ 295.220351][ T9512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.227164][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 295.253864][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 295.266930][ T9] usb 2-1: media controller created [ 295.274877][ T57] az6027: usb out operation failed. (-71) [ 295.286943][ T57] az6027: usb out operation failed. (-71) [ 295.288397][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.295546][ T57] stb0899_attach: Driver disabled by Kconfig [ 295.308238][ T57] az6027: no front-end attached [ 295.308238][ T57] [ 295.324379][ T57] az6027: usb out operation failed. (-71) [ 295.332104][ T57] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 295.341199][ T57] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 295.347921][ T5941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.354231][ T57] dvb-usb: schedule remote query interval to 400 msecs. [ 295.371172][ T57] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 295.387059][ T57] usb 4-1: USB disconnect, device number 60 [ 295.426825][ T5901] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 295.450765][ T5901] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 295.464412][ T5909] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 295.481526][ T57] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 295.524448][ T5888] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 295.695841][ T5888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.707078][ T5888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 295.717871][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 295.727428][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.735973][ T5888] usb 3-1: SerialNumber: syz [ 295.756351][ T5888] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 295.770434][ T5888] usb-storage 3-1:1.0: USB Mass Storage device detected [ 295.778485][ T9524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.788034][ T9524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.800590][ T5888] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 295.809483][ T9] az6027: usb out operation failed. (-71) [ 295.815680][ T9] az6027: usb out operation failed. (-71) [ 295.821478][ T5888] scsi host1: usb-storage 3-1:1.0 [ 295.827141][ T9] stb0899_attach: Driver disabled by Kconfig [ 295.833106][ T9] az6027: no front-end attached [ 295.833106][ T9] [ 295.844631][ T9] az6027: usb out operation failed. (-71) [ 295.851252][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 295.862065][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 295.878131][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 295.885779][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 295.900271][ T9] usb 2-1: USB disconnect, device number 58 [ 295.917150][ T5835] udevd[5835]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 295.965921][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 295.975876][ T312] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.990314][ T5938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 296.304457][ T5901] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 296.464936][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 296.475362][ T5901] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.489452][ T5901] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.501122][ T5901] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 296.517664][ T5901] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 296.528135][ T5901] usb 4-1: Product: syz [ 296.532664][ T5901] usb 4-1: Manufacturer: syz [ 296.549440][ T5901] hub 4-1:4.0: USB hub found [ 296.616718][ T3452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 296.757085][ T5901] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 296.895654][ T9552] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1080'. [ 296.934701][ T5901] usb 5-1: USB disconnect, device number 57 [ 297.264849][ T5948] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.711403][ T9559] usb usb8: usbfs: process 9559 (syz.0.1082) did not claim interface 0 before use [ 297.722778][ T9559] fuse: Bad value for 'group_id' [ 297.728055][ T9559] fuse: Bad value for 'group_id' [ 298.145724][ T5901] usb 3-1: USB disconnect, device number 60 [ 298.154050][ T9535] vhci_hcd: connection reset by peer [ 298.162788][ T3452] vhci_hcd vhci_hcd.2: stop threads [ 298.168582][ T3452] vhci_hcd vhci_hcd.2: release socket [ 298.174158][ T3452] vhci_hcd vhci_hcd.2: disconnect device [ 298.541009][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.514414][ T5901] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 299.623284][ T9594] xt_NFQUEUE: number of total queues is 0 [ 299.699761][ T57] usb 4-1: USB disconnect, device number 61 [ 299.725903][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 299.732812][ T5901] usb 5-1: config 37 has an invalid interface number: 13 but max is 0 [ 299.741456][ T5901] usb 5-1: config 37 has no interface number 0 [ 299.751565][ T5901] usb 5-1: config 37 interface 13 has no altsetting 0 [ 299.772426][ T5901] usb 5-1: New USB device found, idVendor=0421, idProduct=0420, bcdDevice=e4.c4 [ 299.802051][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.833787][ T5901] usb 5-1: Product: syz [ 299.842292][ T5901] usb 5-1: Manufacturer: syz [ 299.922749][ T5901] usb 5-1: SerialNumber: syz [ 300.332587][ T5901] usb 5-1: bad CDC descriptors [ 300.367195][ T5901] usb 5-1: USB disconnect, device number 58 [ 300.456849][ T3452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.650660][ T5909] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 301.310438][ T30] audit: type=1326 audit(1767996770.770:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be4b8f749 code=0x7ffc0000 [ 301.412499][ T30] audit: type=1326 audit(1767996770.800:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8be4b8f749 code=0x7ffc0000 [ 301.491893][ T30] audit: type=1326 audit(1767996770.800:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be4b8f749 code=0x7ffc0000 [ 301.545901][ T30] audit: type=1326 audit(1767996770.800:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be4b8f749 code=0x7ffc0000 [ 301.574672][ T30] audit: type=1326 audit(1767996770.800:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8be4b8f749 code=0x7ffc0000 [ 301.667760][ T30] audit: type=1326 audit(1767996770.800:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be4b8f749 code=0x7ffc0000 [ 301.739072][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.741189][ T5964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.769874][ T30] audit: type=1326 audit(1767996770.800:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be4b8f749 code=0x7ffc0000 [ 301.828221][ T30] audit: type=1326 audit(1767996770.800:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f8be4b8f749 code=0x7ffc0000 [ 301.923978][ T30] audit: type=1326 audit(1767996770.800:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be4b8f749 code=0x7ffc0000 [ 302.142321][ T30] audit: type=1326 audit(1767996770.800:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be4b8f749 code=0x7ffc0000 [ 302.247195][ T9646] xt_NFQUEUE: number of total queues is 0 [ 302.383006][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.027469][ T5901] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 303.124394][ T57] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 303.204517][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 303.211431][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 303.235403][ T5901] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 303.254301][ T5901] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 303.284346][ T57] usb 2-1: Using ep0 maxpacket: 32 [ 303.299909][ T5901] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.316028][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 303.327101][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.365145][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.375199][ T5901] usb 4-1: SerialNumber: syz [ 303.386681][ T9655] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 303.406485][ T57] usb 2-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 303.426720][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.445266][ T57] usb 2-1: config 0 descriptor?? [ 303.632721][ T5901] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 303.750671][ T57] usbhid 2-1:0.0: can't add hid device: -71 [ 303.771254][ T5901] usb 4-1: USB disconnect, device number 62 [ 303.780321][ T57] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 303.813378][ T57] usb 2-1: USB disconnect, device number 59 [ 303.984620][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 304.144428][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 304.151190][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.165723][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.198188][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.342792][ T5995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.374421][ T9] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 304.421107][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.433166][ T9] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 304.444049][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.471348][ T9] usb 3-1: config 0 descriptor?? [ 304.644342][ T57] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 304.764577][ T5909] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 304.834455][ T57] usb 4-1: Using ep0 maxpacket: 32 [ 304.841915][ T57] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 304.861756][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.899742][ T57] usb 4-1: config 0 descriptor?? [ 304.924343][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 304.933447][ T5909] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 304.954785][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.962825][ T5909] usb 2-1: Product: syz [ 304.967082][ T5909] usb 2-1: Manufacturer: syz [ 304.971696][ T5909] usb 2-1: SerialNumber: syz [ 304.979630][ T5909] usb 2-1: config 0 descriptor?? [ 304.989756][ T5909] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 305.150602][ T5965] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 305.155013][ T5965] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 305.303444][ T9698] xt_NFQUEUE: number of total queues is 0 [ 305.451618][ T5909] gspca_sonixj: reg_r err -32 [ 305.480223][ T5909] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 305.587691][ T5995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.641804][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 305.666503][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 305.714470][ T9] usb 3-1: USB disconnect, device number 61 [ 306.244170][ T9680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.253290][ T9680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.335196][ T57] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 306.386937][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 306.386952][ T30] audit: type=1326 audit(1767996775.850:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.2.1129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07a838f749 code=0x0 [ 306.426655][ T57] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 306.437226][ T57] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 306.804351][ T5901] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 306.857723][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.857921][ T5964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.939974][ T5901] usb 5-1: device descriptor read/64, error -71 [ 307.194379][ T5901] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 307.319042][ T9719] binder: 9718:9719 ioctl c0306201 200000001440 returned -11 [ 307.334520][ T5901] usb 5-1: device descriptor read/64, error -71 [ 307.444828][ T5901] usb usb5-port1: attempt power cycle [ 307.891344][ T5941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.969880][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 308.075837][ T5954] usb 2-1: USB disconnect, device number 60 [ 308.264168][ T5901] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 308.285012][ T5901] usb 5-1: device descriptor read/8, error -71 [ 308.524349][ T5901] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 308.546112][ T5901] usb 5-1: device descriptor read/8, error -71 [ 308.654702][ T5901] usb usb5-port1: unable to enumerate USB device [ 308.774531][ T5954] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 308.804377][ T5901] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 308.933820][ T5954] usb 3-1: Using ep0 maxpacket: 32 [ 308.957577][ T5954] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 308.965808][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 308.975778][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.986372][ T5954] usb 3-1: config 0 has no interface number 0 [ 308.992544][ T5901] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.004037][ T5954] usb 3-1: config 0 interface 89 has no altsetting 0 [ 309.010922][ T5901] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.025040][ T5901] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 309.045391][ T5954] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 309.055916][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.063954][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.070895][ T5901] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 309.080057][ T5954] usb 3-1: Product: syz [ 309.084491][ T5954] usb 3-1: Manufacturer: syz [ 309.089127][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.102726][ T5954] usb 3-1: SerialNumber: syz [ 309.109800][ T5954] usb 3-1: config 0 descriptor?? [ 309.122142][ T5901] usb 2-1: config 0 descriptor?? [ 309.132667][ T5954] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 309.148756][ T5954] em28xx 3-1:0.89: Video interface 89 found: bulk [ 309.703489][ T9745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1143'. [ 309.775626][ T5954] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 309.794235][ T9745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.801004][ T9752] bond2: option downdelay: invalid value (18446744071562067969) [ 309.801030][ T9752] bond2: option downdelay: allowed values 0 - 2147483647 [ 309.958037][ T5901] usbhid 2-1:0.0: can't add hid device: -71 [ 309.972329][ T5901] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 309.988003][ T5901] usb 2-1: USB disconnect, device number 61 [ 310.058507][ T5941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.499864][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 310.595741][ T9737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.632862][ T9737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.666673][ T5954] em28xx 3-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 310.681077][ T5954] em28xx 3-1:0.89: failed to read eeprom (err=-5) [ 310.697309][ T5954] em28xx 3-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 310.774415][ T5954] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 310.804306][ T5954] em28xx 3-1:0.89: analog set to bulk mode. [ 310.810339][ T5901] em28xx 3-1:0.89: Registering V4L2 extension [ 310.840273][ T5954] usb 3-1: USB disconnect, device number 62 [ 310.901249][ T5954] em28xx 3-1:0.89: Disconnecting em28xx [ 311.003321][ T5901] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 311.019483][ T5901] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 311.044740][ T5901] em28xx 3-1:0.89: No AC97 audio processor [ 311.055241][ T5901] usb 3-1: Decoder not found [ 311.059859][ T5901] em28xx 3-1:0.89: failed to create media graph [ 311.125585][ T5901] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 311.142370][ T5901] em28xx 3-1:0.89: Registering snapshot button... [ 311.161465][ T5901] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input18 [ 311.237193][ T5901] em28xx 3-1:0.89: Remote control support is not available for this card. [ 311.261200][ T5954] em28xx 3-1:0.89: Closing input extension [ 311.278691][ T5954] em28xx 3-1:0.89: Deregistering snapshot button [ 311.335489][ T5995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.449784][ T5954] em28xx 3-1:0.89: Freeing device [ 311.554375][ T5909] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 311.683829][ T9788] tipc: Enabled bearer , priority 0 [ 311.691819][ T9788] syzkaller0: entered promiscuous mode [ 311.704043][ T9788] syzkaller0: entered allmulticast mode [ 311.764452][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 311.772182][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 311.783541][ T5909] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 311.804582][ T9787] tipc: Resetting bearer [ 311.850134][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 311.875110][ T9786] tipc: Resetting bearer [ 311.907365][ T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.922741][ T9786] tipc: Disabling bearer [ 311.932787][ T5909] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 311.970678][ T5909] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 311.975970][ T3452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 312.011656][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.057945][ T5909] usb 5-1: Product: syz [ 312.114940][ T5909] usb 5-1: Manufacturer: syz [ 312.119640][ T5909] usb 5-1: SerialNumber: syz [ 312.154062][ T5909] usb 5-1: config 0 descriptor?? [ 312.171390][ T9780] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 312.193951][ T5909] port100 5-1:0.0: NFC: Could not get supported command types [ 312.364346][ T5954] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 312.439570][ T9799] binder: BINDER_SET_CONTEXT_MGR already set [ 312.466000][ T9799] binder: 9798:9799 ioctl 4018620d 200000000040 returned -16 [ 312.495385][ T9799] binder: 9798:9799 ioctl c0306201 200000001440 returned -11 [ 312.536003][ T5954] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 312.557516][ T5954] usb 3-1: config 0 has no interface number 0 [ 312.571742][ T5954] usb 3-1: config 0 interface 101 has no altsetting 0 [ 312.587497][ T5954] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 312.597406][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.610673][ T5954] usb 3-1: config 0 descriptor?? [ 312.618232][ T5954] cp210x 3-1:0.101: cp210x converter detected [ 312.704183][ T9802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1163'. [ 313.019106][ T5954] cp210x 3-1:0.101: failed to get vendor val 0x000e size 3: -32 [ 313.054373][ T6456] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 313.204470][ T6456] usb 2-1: Using ep0 maxpacket: 32 [ 313.212870][ T6456] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.224530][ T6456] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.235323][ T5954] cp210x 3-1:0.101: GPIO initialisation failed: -19 [ 313.258732][ T5995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.263198][ T5954] usb 3-1: cp210x converter now attached to ttyUSB0 [ 313.284002][ T6456] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 313.306338][ T6456] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 313.318890][ T6456] usb 2-1: Product: syz [ 313.323084][ T6456] usb 2-1: Manufacturer: syz [ 313.347548][ T6456] hub 2-1:4.0: USB hub found [ 313.438806][ T5954] usb 3-1: USB disconnect, device number 63 [ 313.448592][ T5954] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 313.458237][ T5954] cp210x 3-1:0.101: device disconnected [ 313.544957][ T6456] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 313.935418][ T5954] usb 5-1: USB disconnect, device number 63 [ 314.090242][ T9823] binder: BINDER_SET_CONTEXT_MGR already set [ 314.099550][ T9823] binder: 9822:9823 ioctl 4018620d 200000000040 returned -16 [ 314.109890][ T9823] binder: 9822:9823 ioctl c0306201 200000001440 returned -11 [ 314.514419][ T921] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 314.674331][ T921] usb 5-1: Using ep0 maxpacket: 32 [ 314.680952][ T921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.710453][ T921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.727590][ T921] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 314.742232][ T921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.761854][ T921] usb 5-1: config 0 descriptor?? [ 314.977012][ T921] usbhid 5-1:0.0: can't add hid device: -71 [ 314.983404][ T921] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 314.993335][ T921] usb 5-1: USB disconnect, device number 64 [ 315.142739][ T9840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1177'. [ 315.926349][ T6456] usb 2-1: USB disconnect, device number 62 [ 315.994441][ T5954] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 316.170664][ T9857] binder: BINDER_SET_CONTEXT_MGR already set [ 316.176946][ T9857] binder: 9856:9857 ioctl 4018620d 200000000040 returned -16 [ 316.190115][ T9857] binder: 9856:9857 ioctl c0306201 200000001440 returned -11 [ 316.206983][ T5954] usb 5-1: Using ep0 maxpacket: 32 [ 316.215869][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.264316][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.274114][ T5954] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 316.307952][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.318674][ T5954] usb 5-1: config 0 descriptor?? [ 316.339923][ T5954] hub 5-1:0.0: USB hub found [ 316.444648][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1188'. [ 316.455470][ T9868] openvswitch: netlink: Invalid VLAN frame [ 316.693639][ T5965] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 316.701390][ T5954] hub 5-1:0.0: 29 ports detected [ 316.707203][ T5954] hub 5-1:0.0: insufficient power available to use all downstream ports [ 316.722677][ T9876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1189'. [ 316.833922][ T5954] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 316.852936][ T5954] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 316.864351][ T5965] usb 2-1: Using ep0 maxpacket: 16 [ 316.874613][ T5965] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 316.887782][ T5965] usb 2-1: config 4 has no interface number 0 [ 316.895287][ T5954] usbhid 5-1:0.0: can't add hid device: -71 [ 316.907327][ T5965] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 316.918489][ T5954] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 316.957764][ T5965] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 316.985690][ T5954] usb 5-1: USB disconnect, device number 65 [ 316.991739][ T5965] usb 2-1: config 4 interface 9 has no altsetting 0 [ 317.011248][ T5965] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 317.032447][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.046604][ T5965] usb 2-1: Product: syz [ 317.056793][ T5965] usb 2-1: Manufacturer: syz [ 317.084601][ T5965] usb 2-1: SerialNumber: syz [ 317.098389][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.104710][ T5941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.104942][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.115948][ T3452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.132462][ T6030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.148769][ T9859] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 317.160620][ T9859] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 317.203618][ T5965] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 317.481571][ T9859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.495342][ T9859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.528105][ T6030] usb 2-1: Failed to submit usb control message: -71 [ 317.535349][ T5965] usb 2-1: USB disconnect, device number 63 [ 317.541319][ T6030] usb 2-1: unable to send the bmi data to the device: -71 [ 317.550779][ T6030] usb 2-1: unable to get target info from device [ 317.558793][ T6030] usb 2-1: could not get target info (-71) [ 317.568706][ T6030] usb 2-1: could not probe fw (-71) [ 317.734938][ T6030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.404897][ T5965] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 318.624383][ T5965] usb 3-1: Using ep0 maxpacket: 32 [ 318.641365][ T5965] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 318.650132][ T5965] usb 3-1: config 0 has no interface number 0 [ 318.662973][ T5965] usb 3-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 318.734018][ T5965] usb 3-1: config 0 interface 184 has no altsetting 0 [ 318.744740][ T5965] usb 3-1: New USB device found, idVendor=e724, idProduct=75ff, bcdDevice=69.ee [ 318.755724][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.782521][ T5965] usb 3-1: Product: syz [ 318.792379][ T5965] usb 3-1: Manufacturer: syz [ 318.797577][ T9910] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 318.804193][ T9910] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 318.835901][ T5965] usb 3-1: SerialNumber: syz [ 318.847500][ T9910] vhci_hcd vhci_hcd.0: Device attached [ 318.866839][ T5965] usb 3-1: config 0 descriptor?? [ 319.038756][ T6030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.123307][ T5965] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 319.164398][ T5909] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 319.326129][ T5909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 319.340086][ T5909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 319.352028][ T5909] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 319.362150][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 319.371349][ T5909] usb 2-1: SerialNumber: syz [ 319.391523][ T5909] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 319.418453][ T5909] usb-storage 2-1:1.0: USB Mass Storage device detected [ 319.431660][ T5909] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 319.451449][ T5909] scsi host1: usb-storage 2-1:1.0 [ 319.504409][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 319.676072][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 319.691122][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.713549][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 319.739347][ T9] usb 5-1: config 1 has no interface number 1 [ 319.760324][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 319.787292][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.797501][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.806653][ T9] usb 5-1: Product: syz [ 319.812212][ T9] usb 5-1: Manufacturer: syz [ 319.829652][ T9] usb 5-1: SerialNumber: syz [ 320.059012][ T9922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.112868][ T9922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.247478][ T9922] xt_socket: unknown flags 0x50 [ 320.412591][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.498256][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.597135][ T9] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 320.624544][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 320.781841][ T9] usb 5-1: USB disconnect, device number 66 [ 321.022272][ T5909] usb 3-1: USB disconnect, device number 64 [ 321.641794][ T5909] usb 2-1: USB disconnect, device number 64 [ 321.653491][ T9915] vhci_hcd: connection reset by peer [ 321.699021][ T5938] vhci_hcd vhci_hcd.1: stop threads [ 321.746865][ T5938] vhci_hcd vhci_hcd.1: release socket [ 321.776368][ T5938] vhci_hcd vhci_hcd.1: disconnect device [ 322.263713][ T6030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.889655][ T3452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.901016][ T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.937639][ T9981] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1218'. [ 323.423522][ T9991] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1222'. [ 323.498347][ T3452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.268404][T10003] fuse: Unknown parameter '0x000000000000000a' [ 324.414482][ T5965] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 324.670109][T10009] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1226'. [ 324.974406][ T5909] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 325.067062][T10025] binder: 10024:10025 ioctl c0306201 200000001440 returned -11 [ 325.144380][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 325.150823][ T5909] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 325.158887][ T5909] usb 3-1: config 0 has no interface number 0 [ 325.165735][ T5909] usb 3-1: New USB device found, idVendor=9d6c, idProduct=75e1, bcdDevice=d2.34 [ 325.174978][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.185459][ T5909] usb 3-1: config 0 descriptor?? [ 325.196727][ T5909] usb-storage 3-1:0.1: USB Mass Storage device detected [ 325.501945][ T5965] usb 3-1: USB disconnect, device number 65 [ 326.194333][T10038] fuse: Unknown parameter '0x000000000000000a' [ 327.738973][T10064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1243'. [ 327.788206][T10064] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 328.034771][ T312] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.194351][ T6456] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 328.384474][ T6456] usb 5-1: Using ep0 maxpacket: 16 [ 328.477028][ T6456] usb 5-1: config index 0 descriptor too short (expected 356, got 56) [ 328.491964][ T6456] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.503418][ T6456] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.514286][ T6456] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 328.523590][ T6456] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 328.531799][ T6456] usb 5-1: Manufacturer: syz [ 328.539489][ T6456] usb 5-1: config 0 descriptor?? [ 328.632466][ T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.254746][ T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.265868][ T5995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.485584][T10082] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 329.492216][T10082] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 329.515402][T10082] vhci_hcd vhci_hcd.0: Device attached [ 329.740930][T10088] xt_NFQUEUE: number of total queues is 0 [ 329.874421][ T5909] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 329.908482][ T3468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.909188][ T9] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 330.088032][ T5909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 330.099663][ T5909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 330.111722][ T5909] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 330.121325][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 330.129714][ T5909] usb 2-1: SerialNumber: syz [ 330.147063][ T5909] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 330.162064][ T5909] usb-storage 2-1:1.0: USB Mass Storage device detected [ 330.188762][ T5909] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 330.207922][ T5909] scsi host1: usb-storage 2-1:1.0 [ 330.224700][ T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 330.377299][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 330.384553][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.396374][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.434539][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 330.449159][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.511549][ T24] usb 3-1: config 0 descriptor?? [ 330.526097][ T24] usbhid 3-1:0.0: can't add hid device: -22 [ 330.532568][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 330.603221][ T5909] usb 5-1: USB disconnect, device number 67 [ 330.846949][T10104] xt_NFQUEUE: number of total queues is 0 [ 332.106448][T10113] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1252'. [ 332.444002][T10083] vhci_hcd: connection reset by peer [ 332.460072][ T3468] vhci_hcd vhci_hcd.1: stop threads [ 332.476280][ T3468] vhci_hcd vhci_hcd.1: release socket [ 332.556663][ T3468] vhci_hcd vhci_hcd.1: disconnect device [ 333.272525][ T5909] usb 2-1: USB disconnect, device number 65 [ 333.735665][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.747104][ T6030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.870828][T10143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.878067][T10143] IPv6: NLM_F_CREATE should be set when creating new route [ 334.014407][ T24] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 334.173392][T10149] xt_NFQUEUE: number of total queues is 0 [ 334.187442][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 334.199895][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 334.215130][ T24] usb 2-1: config 2 has an invalid interface number: 189 but max is 0 [ 334.224188][ T24] usb 2-1: config 2 has no interface number 0 [ 334.231185][ T24] usb 2-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 334.243110][ T24] usb 2-1: config 2 interface 189 has no altsetting 0 [ 334.253762][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 334.263153][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.272091][ T24] usb 2-1: Product: syz [ 334.278745][ T24] usb 2-1: Manufacturer: syz [ 334.283668][ T24] usb 2-1: SerialNumber: syz [ 334.514428][ T24] usb 2-1: unknown interface protocol 0x3b, assuming v1 [ 334.537336][ T24] usb 2-1: 189:2 : does not exist [ 334.658777][ T24] usb 2-1: USB disconnect, device number 66 [ 334.664435][ T5909] usb 3-1: USB disconnect, device number 66 [ 334.722903][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.984614][ T5909] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 335.026233][ T6030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 335.037774][ T5995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 335.104430][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 335.206280][ T5909] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 335.218235][ T5909] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 335.234395][ T5909] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 335.253684][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.268115][T10153] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 335.279214][ T5909] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 335.303254][T10167] xt_NFQUEUE: number of total queues is 0 [ 335.476723][ T5954] usb 3-1: USB disconnect, device number 67 [ 335.654684][ T5938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 335.724385][ T5909] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 335.874357][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 335.881495][ T5909] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 335.896962][ T5909] usb 2-1: config 4 has no interface number 0 [ 335.907540][ T5909] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 335.924053][ T5909] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 335.941418][ T5909] usb 2-1: config 4 interface 9 has no altsetting 0 [ 335.955810][ T5909] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 335.964977][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.980609][ T5909] usb 2-1: Product: syz [ 335.989319][ T5909] usb 2-1: Manufacturer: syz [ 335.997800][ T5909] usb 2-1: SerialNumber: syz [ 336.011163][T10169] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 336.021597][T10169] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 336.091415][ T5909] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 336.270740][T10169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.308546][T10169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.338674][ T5954] usb 2-1: USB disconnect, device number 67 [ 336.344745][ T61] usb 2-1: Failed to submit usb control message: -71 [ 336.365037][ T61] usb 2-1: unable to send the bmi data to the device: -71 [ 336.383319][ T61] usb 2-1: unable to get target info from device [ 336.413394][ T61] usb 2-1: could not get target info (-71) [ 336.419778][ T61] usb 2-1: could not probe fw (-71) [ 336.574412][ T5909] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 336.724308][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 336.741515][ T5909] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.764350][ T5909] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.783335][ T5909] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 336.798646][ T5909] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 336.812137][ T5909] usb 3-1: Product: syz [ 336.819017][ T5909] usb 3-1: Manufacturer: syz [ 336.839099][ T5909] hub 3-1:4.0: USB hub found [ 337.038788][ T5909] hub 3-1:4.0: 2 ports detected [ 337.083974][T10183] team0: Device gtp0 is of different type [ 337.651431][ T5909] usb 3-1: USB disconnect, device number 68 [ 338.216157][ T312] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 338.869963][T10220] xt_NFQUEUE: number of total queues is 0 [ 338.888537][ T6030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.495122][ T5941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.383262][T10228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1289'. [ 340.755320][ T5909] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 340.775234][ T6030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.786968][ T3468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.799049][ T5941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.914481][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 340.922678][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.932937][ T5909] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.980963][ T5909] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.000905][ T5909] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 341.041432][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.053296][ T5909] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 341.076768][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1292'. [ 341.176157][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.201713][ T5909] usb 3-1: config 0 descriptor?? [ 342.230609][ T5909] usbhid 3-1:0.0: can't add hid device: -71 [ 342.273275][ T5909] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 342.394541][ T5909] usb 3-1: USB disconnect, device number 69 [ 342.590312][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 342.618865][T10255] netlink: 'syz.4.1295': attribute type 30 has an invalid length. [ 344.016418][ T5964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.615197][ T5995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.834396][ T5909] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 344.849145][ T921] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 344.924699][ T6456] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 344.984905][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 344.991968][ T5909] usb 5-1: config 37 has an invalid interface number: 13 but max is 0 [ 345.000982][ T5909] usb 5-1: config 37 has no interface number 0 [ 345.007230][ T921] usb 2-1: Using ep0 maxpacket: 16 [ 345.012452][ T5909] usb 5-1: config 37 interface 13 has no altsetting 0 [ 345.020022][ T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 345.022806][ T5909] usb 5-1: New USB device found, idVendor=0421, idProduct=0420, bcdDevice=e4.c4 [ 345.040215][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.048369][ T5909] usb 5-1: Product: syz [ 345.052656][ T921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.062800][ T5909] usb 5-1: Manufacturer: syz [ 345.067501][ T921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.076413][ T5909] usb 5-1: SerialNumber: syz [ 345.087186][ T6456] usb 3-1: Using ep0 maxpacket: 8 [ 345.087383][ T921] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 345.101853][ T921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.103459][ T6456] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 345.110085][ T921] usb 2-1: Product: syz [ 345.120238][ T6456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.123299][ T921] usb 2-1: Manufacturer: syz [ 345.131841][ T6456] usb 3-1: Product: syz [ 345.136259][ T921] usb 2-1: SerialNumber: syz [ 345.140161][ T6456] usb 3-1: Manufacturer: syz [ 345.151127][ T6456] usb 3-1: SerialNumber: syz [ 345.163753][ T6456] usb 3-1: config 0 descriptor?? [ 345.171827][ T6456] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 345.352500][ T5909] usb 5-1: bad CDC descriptors [ 345.366193][ T921] usb 2-1: 0:2 : does not exist [ 345.379872][ T5909] usb 5-1: USB disconnect, device number 68 [ 345.392524][ T921] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 345.424556][ T921] usb 2-1: USB disconnect, device number 68 [ 345.467564][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.894735][ T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.444968][ T6456] gspca_sonixj: reg_w1 err -71 [ 346.506506][ T6456] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 346.535104][ T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.546263][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.560668][ T6456] usb 3-1: USB disconnect, device number 70 [ 346.634367][ T24] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 346.780257][T10330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.796482][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 346.803592][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.814836][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 346.823881][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.834347][ T24] usb 2-1: config 0 descriptor?? [ 347.048513][ T24] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 347.062786][ T24] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 347.074073][ T24] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 347.081232][ T24] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 347.088801][ T24] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 347.097163][ T24] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 348.204446][T10352] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1331'. [ 349.327306][ T5954] usb 2-1: USB disconnect, device number 69 [ 349.364487][ T5909] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 349.609360][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 349.650835][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 349.663212][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 349.675340][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 349.688948][ T5909] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 349.708364][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.724381][ T5909] usb 3-1: Product: syz [ 349.728672][ T5909] usb 3-1: Manufacturer: syz [ 349.733300][ T5909] usb 3-1: SerialNumber: syz [ 349.742076][ T5964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 349.742391][ T5909] usb 3-1: config 0 descriptor?? [ 349.880540][ T5909] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 349.889988][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 349.891694][ T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.919384][ T5909] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 349.924812][ T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.936304][ T6456] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 349.994381][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 350.007984][ T24] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 350.024134][ T24] usb 5-1: Product: syz [ 350.148983][ T24] usb 5-1: Manufacturer: syz [ 350.181769][ T24] hub 5-1:4.0: USB hub found [ 350.376513][ T6030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 350.377207][ T24] hub 5-1:4.0: 2 ports detected [ 350.389024][ T3468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 350.415660][ T5909] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 350.422461][ T5909] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 350.632175][ T5909] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 350.656926][ T5909] em28xx 3-1:0.0: No AC97 audio processor [ 350.686325][ T5909] usb 3-1: USB disconnect, device number 71 [ 350.693779][ T5909] em28xx 3-1:0.0: Disconnecting em28xx [ 350.701054][ T5909] em28xx 3-1:0.0: Freeing device [ 351.025891][ T3468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.444388][ T5901] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 351.454483][T10385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.461696][T10385] IPv6: NLM_F_CREATE should be set when creating new route [ 351.593282][ T24] hub 5-1:4.0: activate --> -90 [ 351.624527][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 351.636677][ T5901] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.655565][ T5901] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.667118][ T5938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.678246][ T6030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.680294][ T5901] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 351.698238][ T5901] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 351.706878][ T5901] usb 3-1: Product: syz [ 351.711184][ T5901] usb 3-1: Manufacturer: syz [ 351.739870][ T5901] hub 3-1:4.0: USB hub found [ 351.793975][ T5954] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 351.794156][ T5909] usb 5-1: USB disconnect, device number 69 [ 351.948173][ T5901] hub 3-1:4.0: 2 ports detected [ 352.400491][T10393] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1345'. [ 352.773536][ T5901] usb 3-1: USB disconnect, device number 72 [ 353.104364][ T5901] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 353.254414][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 353.263011][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 353.275777][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 353.289532][ T5901] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 353.299258][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.308199][ T5901] usb 5-1: Product: syz [ 353.312780][ T5901] usb 5-1: Manufacturer: syz [ 353.317853][ T5901] usb 5-1: SerialNumber: syz [ 353.328761][ T5901] usb 5-1: config 0 descriptor?? [ 353.337720][ T5901] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 353.352736][ T5901] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 353.585249][ T5909] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 353.725127][T10419] Cannot find set identified by id 0 to match [ 353.754876][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 353.762704][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.827199][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 353.844700][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.868979][ T5909] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 353.884302][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.899393][ T5909] usb 3-1: Product: syz [ 353.907054][ T5909] usb 3-1: Manufacturer: syz [ 353.914870][ T5909] usb 3-1: SerialNumber: syz [ 353.930414][ T5909] usb 3-1: config 0 descriptor?? [ 353.940098][ T5901] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 353.948535][ T5901] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 353.969048][ T5909] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 353.977169][ T5909] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -8) [ 354.026026][ T5909] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -8 [ 354.166784][ T5901] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 354.176122][ T5901] em28xx 5-1:0.0: No AC97 audio processor [ 354.208327][ T5901] usb 5-1: USB disconnect, device number 70 [ 354.219362][ T5901] em28xx 5-1:0.0: Disconnecting em28xx [ 354.231267][ T5901] em28xx 5-1:0.0: Freeing device [ 354.483984][T10421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1357'. [ 355.250775][T10429] fuse: Unknown parameter '0x000000000000000a' [ 355.322284][ T5909] usb 3-1: USB disconnect, device number 73 [ 355.495242][ T5938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.055105][ T5964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.072667][T10445] binder: BINDER_SET_CONTEXT_MGR already set [ 356.079652][T10445] binder: 10444:10445 ioctl 4018620d 200000000040 returned -16 [ 356.090673][T10445] binder: 10444:10445 ioctl c0306201 200000001440 returned -11 [ 356.137516][ T6030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.163681][ T5964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.214404][ T5909] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 356.364374][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 356.372401][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 356.386291][ T5909] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 356.397060][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 356.407273][ T5909] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 356.451771][ T5909] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 356.461345][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.470054][ T5909] usb 3-1: Product: syz [ 356.477608][ T5909] usb 3-1: Manufacturer: syz [ 356.482311][ T5909] usb 3-1: SerialNumber: syz [ 356.535096][ T5909] usb 3-1: config 0 descriptor?? [ 356.541042][T10442] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 356.553774][ T5909] port100 3-1:0.0: NFC: Could not get supported command types [ 356.645401][T10455] Cannot find set identified by id 0 to match [ 356.817295][ T5954] usb 3-1: USB disconnect, device number 74 [ 357.416906][ T5964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 357.428194][ T3468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 357.474509][T10461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.341445][T10489] fuse: Unknown parameter '0x000000000000000a' [ 358.404688][T10483] capability: warning: `syz.4.1377' uses deprecated v2 capabilities in a way that may be insecure [ 358.694864][ T5954] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 358.854499][ T5954] usb 5-1: Using ep0 maxpacket: 16 [ 358.866760][ T5954] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 358.897338][ T5954] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 358.915909][ T5954] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 358.952884][ T5954] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.962653][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 358.971327][ T5954] usb 5-1: SerialNumber: syz [ 358.979355][T10483] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 359.105017][ T6456] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 359.198312][ T5954] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 359.270103][ T6456] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.280348][ T5954] usb 5-1: USB disconnect, device number 71 [ 359.292569][ T6456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 359.318814][ T6456] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.357723][ T6456] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.377010][ T6456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 359.394536][ T6456] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.421401][ T6456] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.444005][ T6456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 359.469114][ T6456] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.533218][ T6456] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 359.542376][ T6456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.550705][ T6456] usb 2-1: Product: syz [ 359.554910][ T6456] usb 2-1: Manufacturer: syz [ 359.559584][ T6456] usb 2-1: SerialNumber: syz [ 359.566857][ T6456] usb 2-1: config 0 descriptor?? [ 359.578674][ T6456] ti_usb_3410_5052 2-1:0.0: required endpoints missing [ 359.731050][T10501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1382'. [ 359.740288][T10501] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 360.524342][ T5909] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 360.688734][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 360.814400][ T5909] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 360.823652][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.835765][ T5909] usb 5-1: Product: syz [ 360.843373][ T5909] usb 5-1: Manufacturer: syz [ 360.851472][ T5909] usb 5-1: SerialNumber: syz [ 360.874894][ T5909] usb 5-1: config 0 descriptor?? [ 360.886188][ T5909] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 360.934430][ T5909] pctv452e: pctv452e_power_ctrl: 1 [ 360.934430][ T5909] [ 360.945636][ T5909] usb 5-1: selecting invalid altsetting 3 [ 360.951440][ T5909] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 360.951440][ T5909] [ 360.961862][ T5909] dvb-usb: bulk message failed: -22 (5/0) [ 360.979239][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 360.992922][ T5909] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 361.001502][ T5909] usb 5-1: media controller created [ 361.008086][ T5909] dvb-usb: bulk message failed: -22 (8/0) [ 361.018163][ T5909] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 361.034793][ T5909] dvb-usb: MAC address reading failed. [ 361.064524][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.101219][T10508] dvb-usb: bulk message failed: -22 (7/0) [ 361.107847][T10508] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 361.222172][ T5909] DVB: Unable to find symbol stb0899_attach() [ 361.252235][ T5909] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 361.262209][ T5941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 361.274006][ T5938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 361.405207][ T5909] rc_core: IR keymap rc-tt-1500 not found [ 361.410996][ T5909] Registered IR keymap rc-empty [ 361.420883][ T5909] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 361.444467][ T5909] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input19 [ 361.463424][ T5909] dvb-usb: schedule remote query interval to 100 msecs. [ 361.476941][ T5909] pctv452e: pctv452e_power_ctrl: 0 [ 361.476941][ T5909] [ 361.489256][ T5909] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 361.586351][ T5909] dvb-usb: bulk message failed: -22 (4/0) [ 361.592797][ T5909] dvb-usb: error -22 while querying for an remote control event. [ 361.705410][ T5909] dvb-usb: bulk message failed: -22 (4/0) [ 361.714352][ T5909] dvb-usb: error -22 while querying for an remote control event. [ 361.742361][ T5954] usb 5-1: USB disconnect, device number 72 [ 361.833172][ T5954] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 361.894675][ T5938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 361.915560][ T5941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 362.041460][T10533] fuse: Unknown parameter '0x000000000000000a' [ 362.251193][ T5909] usb 2-1: USB disconnect, device number 71 [ 363.138082][ T24] hid-generic 0000:0003:0001.0013: item fetching failed at offset 0/2 [ 363.144352][ T5909] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 363.160724][ T24] hid-generic 0000:0003:0001.0013: probe with driver hid-generic failed with error -22 [ 363.176651][ T312] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.187845][ T5941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.270714][T10554] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 363.309778][ T5909] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 363.325583][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.338354][ T5909] usb 3-1: Product: syz [ 363.346474][ T5909] usb 3-1: Manufacturer: syz [ 363.355352][ T5909] usb 3-1: SerialNumber: syz [ 363.527751][ T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 363.684335][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 363.691978][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.716547][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 363.730016][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.739325][ T24] usb 5-1: Product: syz [ 363.743586][ T24] usb 5-1: Manufacturer: syz [ 363.746455][T10567] loop5: detected capacity change from 0 to 7 [ 363.750010][ T24] usb 5-1: SerialNumber: syz [ 363.760352][T10567] Dev loop5: unable to read RDB block 7 [ 363.770388][ T5909] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 363.771852][ T24] usb 5-1: config 0 descriptor?? [ 363.784645][T10567] loop5: AHDI p1 p2 p3 [ 363.791442][T10567] loop5: partition table partially beyond EOD, truncated [ 363.804432][ T5909] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 363.825909][T10567] loop5: p1 start 1601398130 is beyond EOD, truncated [ 363.849499][T10567] loop5: p2 start 1702059890 is beyond EOD, truncated [ 363.990971][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055aca000: rx timeout, send abort [ 364.491090][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069100400: rx timeout, send abort [ 364.500622][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055aca000: abort rx timeout. Force session deactivation [ 364.567702][T10575] FAULT_INJECTION: forcing a failure. [ 364.567702][T10575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.648528][T10575] CPU: 1 UID: 0 PID: 10575 Comm: syz.3.1404 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.648554][T10575] Tainted: [L]=SOFTLOCKUP [ 364.648559][T10575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 364.648577][T10575] Call Trace: [ 364.648584][T10575] [ 364.648593][T10575] dump_stack_lvl+0xe8/0x150 [ 364.648618][T10575] should_fail_ex+0x414/0x560 [ 364.648646][T10575] _copy_to_iter+0x1de/0x1790 [ 364.648678][T10575] ? __pfx__copy_to_iter+0x10/0x10 [ 364.648696][T10575] ? rcu_is_watching+0x15/0xb0 [ 364.648719][T10575] ? splice_from_pipe_next+0x61d/0x670 [ 364.648746][T10575] ? page_copy_sane+0x4e/0x280 [ 364.648765][T10575] copy_page_to_iter+0x10c/0x1c0 [ 364.648787][T10575] pipe_to_user+0xa8/0x140 [ 364.648811][T10575] __splice_from_pipe+0x34d/0x920 [ 364.648842][T10575] ? __pfx_pipe_to_user+0x10/0x10 [ 364.648866][T10575] __se_sys_vmsplice+0x316/0x10d0 [ 364.648887][T10575] ? get_pid_task+0x20/0x1f0 [ 364.648912][T10575] ? get_pid_task+0x20/0x1f0 [ 364.648926][T10575] ? get_pid_task+0x20/0x1f0 [ 364.648945][T10575] ? get_pid_task+0x20/0x1f0 [ 364.648967][T10575] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 364.648994][T10575] ? sb_end_write+0xe9/0x1c0 [ 364.649012][T10575] ? vfs_write+0x956/0xb30 [ 364.649034][T10575] ? __pfx_vfs_write+0x10/0x10 [ 364.649052][T10575] ? kmem_cache_free+0x197/0x620 [ 364.649067][T10575] ? do_sys_openat2+0x15a/0x200 [ 364.649099][T10575] ? ksys_write+0x1e1/0x250 [ 364.649130][T10575] do_syscall_64+0xec/0xf80 [ 364.649148][T10575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.649164][T10575] ? trace_irq_disable+0x37/0x100 [ 364.649183][T10575] ? clear_bhb_loop+0x60/0xb0 [ 364.649202][T10575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.649224][T10575] RIP: 0033:0x7f548118f749 [ 364.649240][T10575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.649254][T10575] RSP: 002b:00007f54820a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 364.649272][T10575] RAX: ffffffffffffffda RBX: 00007f54813e6090 RCX: 00007f548118f749 [ 364.649285][T10575] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 364.649295][T10575] RBP: 00007f54820a7090 R08: 0000000000000000 R09: 0000000000000000 [ 364.649306][T10575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.649316][T10575] R13: 00007f54813e6128 R14: 00007f54813e6090 R15: 00007f548150fa28 [ 364.649343][T10575] [ 364.961574][ T5909] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 364.984528][ T5909] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 364.999423][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069100400: abort rx timeout. Force session deactivation [ 365.010896][ T5909] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 365.064541][ T5909] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 365.117864][T10582] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 365.244387][ T5914] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 365.394303][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 365.402845][ T5914] usb 2-1: config 37 has an invalid interface number: 13 but max is 0 [ 365.414067][ T5914] usb 2-1: config 37 has no interface number 0 [ 365.448124][ T5914] usb 2-1: config 37 interface 13 has no altsetting 0 [ 365.459963][ T5914] usb 2-1: New USB device found, idVendor=0421, idProduct=0420, bcdDevice=e4.c4 [ 365.473938][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.492185][ T5914] usb 2-1: Product: syz [ 365.500866][ T5914] usb 2-1: Manufacturer: syz [ 365.511328][ T5914] usb 2-1: SerialNumber: syz [ 365.833657][ T5914] usb 2-1: bad CDC descriptors [ 365.849166][ T5914] usb 2-1: USB disconnect, device number 72 [ 365.994886][ T5909] usb 3-1: USB disconnect, device number 75 [ 366.074809][ T5914] usb 5-1: USB disconnect, device number 73 [ 366.448510][T10608] Cannot find set identified by id 0 to match [ 366.684748][ T5914] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 366.815737][T10614] xt_NFQUEUE: number of total queues is 0 [ 367.015757][ T5995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 367.027153][ T5914] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 367.027735][ T5941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 367.048013][ T312] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 367.061116][ T5914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.152778][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.217329][ T5914] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 367.283032][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.300368][ T5914] usb 2-1: Product: syz [ 367.313712][ T5914] usb 2-1: Manufacturer: syz [ 367.324284][ T5914] usb 2-1: SerialNumber: syz [ 367.584517][ T5914] usb 2-1: USB disconnect, device number 73 [ 367.654766][ T5941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 368.302901][ T5941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 368.303107][ T57] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 368.512281][T10632] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1423'. [ 368.552679][ T30] audit: type=1326 audit(1767996838.000:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548118f749 code=0x7ffc0000 [ 368.592608][ T30] audit: type=1326 audit(1767996838.000:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f548118f749 code=0x7ffc0000 [ 368.629240][ T30] audit: type=1326 audit(1767996838.000:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548118f749 code=0x7ffc0000 [ 368.698496][ T30] audit: type=1326 audit(1767996838.000:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f548118f749 code=0x7ffc0000 [ 368.698706][ T57] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 368.730871][ T30] audit: type=1326 audit(1767996838.000:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548118f749 code=0x7ffc0000 [ 368.768111][ T57] usb 4-1: USB disconnect, device number 63 [ 368.784349][ T5965] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 368.814329][ T30] audit: type=1326 audit(1767996838.000:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f548118f749 code=0x7ffc0000 [ 368.850008][ T30] audit: type=1326 audit(1767996838.000:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548118f749 code=0x7ffc0000 [ 368.887619][ T30] audit: type=1326 audit(1767996838.000:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f548118f749 code=0x7ffc0000 [ 368.990514][ T30] audit: type=1326 audit(1767996838.000:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548118f749 code=0x7ffc0000 [ 368.997210][ T3452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 369.045048][ T5965] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 369.053045][ T5965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.104374][ T30] audit: type=1326 audit(1767996838.000:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f548118f749 code=0x7ffc0000 [ 369.126320][ T5965] usb 5-1: config 0 has no interface number 0 [ 369.132409][ T5965] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 369.156951][ T5965] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 369.185528][ T5965] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 369.204532][T10639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1424'. [ 369.213571][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.245916][ T5965] usb 5-1: Product: syz [ 369.250161][ T5965] usb 5-1: Manufacturer: syz [ 369.260148][ T5965] usb 5-1: SerialNumber: syz [ 369.272778][ T5965] usb 5-1: config 0 descriptor?? [ 369.570053][T10622] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 369.586662][ T5965] vmk80xx 5-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 369.600047][ T5965] vmk80xx 5-1:0.6: probe with driver vmk80xx failed with error -22 [ 369.953110][T10622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.962034][T10622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.971343][ T5965] usb 5-1: USB disconnect, device number 74 [ 370.524354][ T5914] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 370.574473][ T5909] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 370.714593][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 370.725396][ T5914] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.739110][ T5914] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.750711][ T5909] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 370.760608][ T5909] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.771340][ T5909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.782276][ T5914] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 370.791761][ T5914] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 370.800283][ T921] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 370.810180][ T5909] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 370.819854][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.828291][ T5914] usb 4-1: Product: syz [ 370.832833][ T5914] usb 4-1: Manufacturer: syz [ 370.837501][ T5909] usb 2-1: Product: syz [ 370.852853][ T5909] usb 2-1: Manufacturer: syz [ 370.860024][ T5914] hub 4-1:4.0: USB hub found [ 370.865678][ T5909] usb 2-1: SerialNumber: syz [ 370.994322][ T921] usb 5-1: Using ep0 maxpacket: 16 [ 371.066543][ T5914] hub 4-1:4.0: 2 ports detected [ 371.071820][ T921] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 371.081107][ T921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.099527][ T5909] usb 2-1: USB disconnect, device number 74 [ 371.115522][ T921] usb 5-1: config 0 descriptor?? [ 371.344847][ T921] usbhid 5-1:0.0: can't add hid device: -71 [ 371.351008][ T921] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 371.363320][ T921] usb 5-1: USB disconnect, device number 75 [ 372.234143][T10693] netlink: 'syz.2.1441': attribute type 4 has an invalid length. [ 372.259489][T10689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1441'. [ 372.323722][T10695] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1444'. [ 372.352792][ T5914] hub 4-1:4.0: activate --> -90 [ 372.635376][ T5914] hub 4-1:4.0: hub_ext_port_status failed (err = -71) [ 372.635683][ T5965] usb 4-1: USB disconnect, device number 64 [ 372.704343][ T921] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 372.776962][ T6030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.805083][ T5995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.826176][ T312] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.926882][ T921] usb 5-1: Using ep0 maxpacket: 16 [ 372.989292][ T921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 373.024347][ T921] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 373.054327][ T921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 373.076510][ T921] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 373.098119][ T921] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 373.109099][ T921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.125554][ T921] usb 5-1: Product: syz [ 373.129792][ T921] usb 5-1: Manufacturer: syz [ 373.144357][ T921] usb 5-1: SerialNumber: syz [ 373.161000][ T921] usb 5-1: config 0 descriptor?? [ 373.175202][T10696] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 373.191230][ T921] port100 5-1:0.0: NFC: Could not get supported command types [ 373.416640][ T6030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 373.430979][ T5995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 373.634446][ T5965] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 373.797940][ T5965] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 373.807112][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.836949][ T5965] usb 4-1: Product: syz [ 373.847703][ T5965] usb 4-1: Manufacturer: syz [ 373.861066][ T5965] usb 4-1: SerialNumber: syz [ 374.154858][ T5964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 374.351482][ T5965] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 374.383857][ T5965] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 374.909550][T10722] Cannot find set identified by id 0 to match [ 375.124580][ T921] usb 5-1: USB disconnect, device number 76 [ 375.433816][ T5965] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 375.454386][ T5965] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 375.484898][ T5965] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 375.516624][ T5965] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 375.781744][T10731] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1455'. [ 375.824754][ T921] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 375.976670][ T921] usb 5-1: Using ep0 maxpacket: 16 [ 375.984888][ T921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 375.996836][ T921] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 376.007317][ T921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 376.018626][ T921] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 376.031373][ T921] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 376.040838][ T921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.049288][ T921] usb 5-1: Product: syz [ 376.053696][ T921] usb 5-1: Manufacturer: syz [ 376.058878][ T921] usb 5-1: SerialNumber: syz [ 376.068489][ T921] usb 5-1: config 0 descriptor?? [ 376.074152][T10726] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 376.087555][ T921] port100 5-1:0.0: NFC: Could not get supported command types [ 376.289984][ T24] usb 5-1: USB disconnect, device number 77 [ 376.340018][T10745] fuse: Unknown parameter '0x000000000000000a' [ 376.490794][ T57] usb 4-1: USB disconnect, device number 65 [ 377.144658][ T24] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 377.294532][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 377.303288][ T24] usb 4-1: config 162 has an invalid interface number: 84 but max is 2 [ 377.312207][ T24] usb 4-1: config 162 has an invalid interface number: 3 but max is 2 [ 377.325645][ T24] usb 4-1: config 162 has no interface number 0 [ 377.350400][ T24] usb 4-1: config 162 has no interface number 1 [ 377.368924][ T24] usb 4-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 377.400407][ T24] usb 4-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 377.435595][ T24] usb 4-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 377.499059][ T24] usb 4-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 377.553709][ T24] usb 4-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 377.601610][ T24] usb 4-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 377.620878][ T24] usb 4-1: config 162 interface 84 has no altsetting 0 [ 377.628538][ T24] usb 4-1: config 162 interface 2 has no altsetting 0 [ 377.654134][ T24] usb 4-1: config 162 interface 3 has no altsetting 0 [ 377.673271][ T24] usb 4-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 377.685585][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.693859][ T24] usb 4-1: Product: syz [ 377.698823][ T24] usb 4-1: Manufacturer: syz [ 377.732037][ T24] usb 4-1: SerialNumber: syz [ 378.065667][T10773] fuse: Unknown parameter '0x000000000000000a' [ 378.104821][ T5965] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 378.368563][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 378.391248][ T5965] usb 5-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 378.406928][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.432379][ T5965] usb 5-1: Product: syz [ 378.446044][ T5965] usb 5-1: Manufacturer: syz [ 378.457820][ T5965] usb 5-1: SerialNumber: syz [ 378.548812][ T6030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 378.562516][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 378.579188][ T3452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 378.597018][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.603872][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.630699][ T5965] r8152-cfgselector 5-1: Unknown version 0x0000 [ 378.637719][ T5965] r8152-cfgselector 5-1: config 0 descriptor?? [ 378.677757][ T5965] r8152 5-1:0.0: Expected endpoints are not found [ 378.877505][ T57] r8152-cfgselector 5-1: USB disconnect, device number 78 [ 378.919044][T10769] sctp: [Deprecated]: syz.4.1465 (pid 10769) Use of int in maxseg socket option. [ 378.919044][T10769] Use struct sctp_assoc_value instead [ 378.979241][ T5965] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 379.164337][ T5965] usb 3-1: Using ep0 maxpacket: 16 [ 379.171057][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.182623][ T3452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 379.193546][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 379.203706][ T5965] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 379.220010][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.247831][ T5965] usb 3-1: config 0 descriptor?? [ 379.464361][ T921] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 379.616917][ T921] usb 2-1: Using ep0 maxpacket: 16 [ 379.631482][ T921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.642423][ T921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 379.663298][ T921] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 379.682619][ T921] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 379.697397][ T921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.698940][ T5965] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 379.714385][ T921] usb 2-1: Product: syz [ 379.721473][ T921] usb 2-1: Manufacturer: syz [ 379.726189][ T921] usb 2-1: SerialNumber: syz [ 379.735390][ T921] usb 2-1: config 0 descriptor?? [ 379.752250][ T921] peak_usb 2-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 379.759789][ T921] peak_usb 2-1:0.0: unable to read PCAN-USB serial number (err -8) [ 379.815217][ T921] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -8 [ 379.817486][ T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 380.002978][ T921] usb 3-1: USB disconnect, device number 76 [ 380.401398][ T5836] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 380.430710][ T24] usb 4-1: USB disconnect, device number 66 [ 380.509484][ T921] usb 2-1: USB disconnect, device number 75 [ 380.524808][ T5965] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 380.559457][T10801] netlink: 'syz.2.1476': attribute type 1 has an invalid length. [ 380.625402][T10802] binder: 10800:10802 ioctl c0306201 2000000003c0 returned -14 [ 380.684350][ T5965] usb 5-1: Using ep0 maxpacket: 32 [ 380.691948][ T5965] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 380.702657][ T5965] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 380.711526][ T5965] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 380.720803][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 380.730973][ T5965] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 380.740778][ T5965] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 380.753941][ T5965] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 380.763134][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.776039][ T5965] usb 5-1: config 0 descriptor?? [ 380.904352][ T921] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 380.985415][ T5965] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 79 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 381.003984][ T5965] usb 5-1: USB disconnect, device number 79 [ 381.014176][ T5965] usblp0: removed [ 381.054529][ T921] usb 4-1: Using ep0 maxpacket: 16 [ 381.062872][ T921] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 381.073512][ T921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.089005][ T921] usb 4-1: config 0 descriptor?? [ 381.300527][ T921] usbhid 4-1:0.0: can't add hid device: -71 [ 381.306995][ T921] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 381.321411][ T921] usb 4-1: USB disconnect, device number 67 [ 381.374422][ T5909] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 381.425102][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 381.544419][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 381.551702][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 381.563067][ T5909] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 381.573216][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 381.583145][ T5909] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 381.593055][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 381.599979][ T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 381.608965][ T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 381.617858][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 381.627174][ T5909] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 381.636330][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 381.646453][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.654522][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 381.664163][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 381.677184][ T5909] usb 2-1: Product: syz [ 381.681347][ T5909] usb 2-1: Manufacturer: syz [ 381.684351][ T5965] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 381.686121][ T5909] usb 2-1: SerialNumber: syz [ 381.698266][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 381.708273][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.717189][ T5909] usb 2-1: config 0 descriptor?? [ 381.722821][T10807] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 381.732674][ T5909] port100 2-1:0.0: NFC: Could not get supported command types [ 381.741909][ T9] usb 5-1: config 0 descriptor?? [ 381.854357][ T5965] usb 3-1: Using ep0 maxpacket: 32 [ 381.864640][ T5965] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 381.874169][ T5965] usb 3-1: config 0 has no interface number 0 [ 381.881296][ T5965] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 381.896821][ T5965] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 381.906980][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.915509][ T5965] usb 3-1: Product: syz [ 381.919851][ T5965] usb 3-1: Manufacturer: syz [ 381.924890][ T5965] usb 3-1: SerialNumber: syz [ 381.932302][ T5965] usb 3-1: config 0 descriptor?? [ 381.948085][ T5965] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 381.959377][ T5965] em28xx 3-1:0.132: Video interface 132 found: [ 381.973375][ T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 80 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 382.211253][ T9] usb 5-1: USB disconnect, device number 80 [ 382.222796][ T9] usblp0: removed [ 382.352950][ T5965] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 383.080800][T10843] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1490'. [ 383.106313][ T5965] em28xx 3-1:0.132: failed to read eeprom (err=-110) [ 383.113247][ T5965] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 383.345304][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 383.397273][ T5965] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 383.434388][ T5965] em28xx 3-1:0.132: analog set to bulk mode. [ 383.575010][ T57] em28xx 3-1:0.132: Registering V4L2 extension [ 383.624907][ T5909] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 383.939105][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 384.047116][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.179284][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.217166][ T5954] usb 2-1: USB disconnect, device number 76 [ 384.229375][ T5909] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 384.294914][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 384.299743][ T5964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 384.324683][ T5995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 384.436267][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.465182][ T5909] usb 5-1: config 0 descriptor?? [ 384.694559][ T57] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 384.945514][ T3452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 384.984483][ T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 384.984566][ T57] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 385.049375][ T5909] hub 5-1:0.0: USB hub found [ 385.089459][ T9] usb 3-1: USB disconnect, device number 77 [ 385.108335][ T9] em28xx 3-1:0.132: Disconnecting em28xx [ 385.288492][T10872] Cannot find set identified by id 0 to match [ 385.313641][ T5909] hub 5-1:0.0: 29 ports detected [ 385.338280][ T5909] hub 5-1:0.0: insufficient power available to use all downstream ports [ 385.575408][ T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 385.653827][ T5909] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 385.699742][ T5909] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 385.792125][T10875] fuse: Unknown parameter '0x000000000000000a' [ 385.804092][ T5909] usbhid 5-1:0.0: can't add hid device: -71 [ 385.821714][ T5909] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 385.822805][ T57] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 385.895339][ T5909] usb 5-1: USB disconnect, device number 81 [ 385.996103][ T57] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 386.003274][ T57] em28xx 3-1:0.132: No AC97 audio processor [ 386.030818][ T57] usb 3-1: Decoder not found [ 386.057373][ T57] em28xx 3-1:0.132: failed to create media graph [ 386.063756][ T57] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 386.107473][ T57] em28xx 3-1:0.132: Remote control support is not available for this card. [ 386.117553][T10881] ================================================================== [ 386.125632][T10881] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 386.132997][T10881] Read of size 8 at addr ffff888031248740 by task v4l_id/10881 [ 386.140529][T10881] [ 386.142843][T10881] CPU: 0 UID: 0 PID: 10881 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 386.142863][T10881] Tainted: [L]=SOFTLOCKUP [ 386.142867][T10881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.142877][T10881] Call Trace: [ 386.142884][T10881] [ 386.142891][T10881] dump_stack_lvl+0xe8/0x150 [ 386.142911][T10881] print_report+0xca/0x240 [ 386.142925][T10881] ? v4l2_fh_open+0xac/0x420 [ 386.142944][T10881] kasan_report+0x118/0x150 [ 386.142960][T10881] ? v4l2_fh_open+0xac/0x420 [ 386.142980][T10881] v4l2_fh_open+0xac/0x420 [ 386.142997][T10881] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 386.143015][T10881] em28xx_v4l2_open+0x157/0x9a0 [ 386.143033][T10881] ? do_raw_spin_lock+0x121/0x290 [ 386.143052][T10881] v4l2_open+0x1bf/0x3a0 [ 386.143066][T10881] chrdev_open+0x4cc/0x5e0 [ 386.143081][T10881] ? __pfx_chrdev_open+0x10/0x10 [ 386.143094][T10881] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 386.143115][T10881] ? __pfx_chrdev_open+0x10/0x10 [ 386.143128][T10881] do_dentry_open+0x7ce/0x1420 [ 386.143147][T10881] vfs_open+0x3b/0x340 [ 386.143162][T10881] ? path_openat+0x33f3/0x3dd0 [ 386.143174][T10881] path_openat+0x340e/0x3dd0 [ 386.143189][T10881] ? __pfx_stack_trace_save+0x10/0x10 [ 386.143212][T10881] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 386.143231][T10881] ? getname_flags+0xb8/0x540 [ 386.143246][T10881] ? __pfx_path_openat+0x10/0x10 [ 386.143258][T10881] ? __lock_acquire+0x6b6/0x2cf0 [ 386.143275][T10881] do_filp_open+0x1fa/0x410 [ 386.143288][T10881] ? __pfx_do_filp_open+0x10/0x10 [ 386.143306][T10881] ? _raw_spin_unlock+0x28/0x50 [ 386.143317][T10881] ? alloc_fd+0x64c/0x6c0 [ 386.143335][T10881] do_sys_openat2+0x121/0x200 [ 386.143352][T10881] ? __pfx_do_sys_openat2+0x10/0x10 [ 386.143368][T10881] ? exc_page_fault+0x71/0xd0 [ 386.143384][T10881] __x64_sys_openat+0x138/0x170 [ 386.143402][T10881] do_syscall_64+0xec/0xf80 [ 386.143416][T10881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.143429][T10881] ? trace_irq_disable+0x37/0x100 [ 386.143445][T10881] ? clear_bhb_loop+0x60/0xb0 [ 386.143460][T10881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.143474][T10881] RIP: 0033:0x7f322dbcf407 [ 386.143487][T10881] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 386.143499][T10881] RSP: 002b:00007ffcc19ca6f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 386.143514][T10881] RAX: ffffffffffffffda RBX: 00007f322db43880 RCX: 00007f322dbcf407 [ 386.143525][T10881] RDX: 0000000000000000 RSI: 00007ffcc19caf1b RDI: ffffffffffffff9c [ 386.143535][T10881] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 386.143543][T10881] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 386.143552][T10881] R13: 00007ffcc19ca940 R14: 00007f322de28000 R15: 0000555bd95984d8 [ 386.143567][T10881] [ 386.143572][T10881] [ 386.426873][T10881] Allocated by task 57: [ 386.431008][T10881] kasan_save_track+0x3e/0x80 [ 386.435672][T10881] __kasan_kmalloc+0x93/0xb0 [ 386.440245][T10881] __kmalloc_cache_noprof+0x3e2/0x700 [ 386.445597][T10881] em28xx_v4l2_init+0x10b/0x2e70 [ 386.450610][T10881] em28xx_init_extension+0x120/0x1c0 [ 386.455900][T10881] process_scheduled_works+0xad1/0x1770 [ 386.461429][T10881] worker_thread+0x8a0/0xda0 [ 386.466002][T10881] kthread+0x711/0x8a0 [ 386.470059][T10881] ret_from_fork+0x510/0xa50 [ 386.474634][T10881] ret_from_fork_asm+0x1a/0x30 [ 386.479384][T10881] [ 386.481689][T10881] Freed by task 57: [ 386.485475][T10881] kasan_save_track+0x3e/0x80 [ 386.490132][T10881] kasan_save_free_info+0x46/0x50 [ 386.495141][T10881] __kasan_slab_free+0x5c/0x80 [ 386.499886][T10881] kfree+0x1c0/0x660 [ 386.503764][T10881] em28xx_v4l2_init+0x1683/0x2e70 [ 386.508776][T10881] em28xx_init_extension+0x120/0x1c0 [ 386.514048][T10881] process_scheduled_works+0xad1/0x1770 [ 386.519585][T10881] worker_thread+0x8a0/0xda0 [ 386.524174][T10881] kthread+0x711/0x8a0 [ 386.528242][T10881] ret_from_fork+0x510/0xa50 [ 386.532818][T10881] ret_from_fork_asm+0x1a/0x30 [ 386.537577][T10881] [ 386.539893][T10881] The buggy address belongs to the object at ffff888031248000 [ 386.539893][T10881] which belongs to the cache kmalloc-8k of size 8192 [ 386.553932][T10881] The buggy address is located 1856 bytes inside of [ 386.553932][T10881] freed 8192-byte region [ffff888031248000, ffff88803124a000) [ 386.567887][T10881] [ 386.570203][T10881] The buggy address belongs to the physical page: [ 386.576603][T10881] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31248 [ 386.585361][T10881] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 386.593850][T10881] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 386.601385][T10881] page_type: f5(slab) [ 386.605356][T10881] raw: 00fff00000000040 ffff88813ffa7280 ffffea0001fbec00 0000000000000006 [ 386.613937][T10881] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 386.622506][T10881] head: 00fff00000000040 ffff88813ffa7280 ffffea0001fbec00 0000000000000006 [ 386.631156][T10881] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 386.639808][T10881] head: 00fff00000000003 ffffea0000c49201 00000000ffffffff 00000000ffffffff [ 386.648476][T10881] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 386.657123][T10881] page dumped because: kasan: bad access detected [ 386.663513][T10881] page_owner tracks the page as allocated [ 386.669204][T10881] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10066, tgid 10061 (syz.4.1244), ts 327545010893, free_ts 327414601266 [ 386.690733][T10881] post_alloc_hook+0x234/0x290 [ 386.695492][T10881] get_page_from_freelist+0x24e0/0x2580 [ 386.701036][T10881] __alloc_frozen_pages_noprof+0x181/0x370 [ 386.706834][T10881] alloc_pages_mpol+0x232/0x4a0 [ 386.711669][T10881] allocate_slab+0x86/0x3b0 [ 386.716162][T10881] ___slab_alloc+0xe53/0x1820 [ 386.720823][T10881] __slab_alloc+0x65/0x100 [ 386.725223][T10881] __kmalloc_node_track_caller_noprof+0x5d4/0x820 [ 386.731675][T10881] kmemdup_noprof+0x2b/0x70 [ 386.736161][T10881] ipv4_sysctl_init_net+0x47/0x3b0 [ 386.741259][T10881] ops_init+0x35c/0x5c0 [ 386.745400][T10881] setup_net+0x110/0x330 [ 386.749623][T10881] copy_net_ns+0x3e3/0x570 [ 386.754018][T10881] create_new_namespaces+0x3e7/0x6a0 [ 386.759283][T10881] unshare_nsproxy_namespaces+0x11c/0x170 [ 386.764989][T10881] ksys_unshare+0x4c8/0x8c0 [ 386.769478][T10881] page last free pid 10058 tgid 10058 stack trace: [ 386.775957][T10881] __free_frozen_pages+0xbc8/0xd30 [ 386.781054][T10881] __put_partials+0x146/0x170 [ 386.785713][T10881] __slab_free+0x294/0x320 [ 386.790113][T10881] qlist_free_all+0x97/0x100 [ 386.794682][T10881] kasan_quarantine_reduce+0x148/0x160 [ 386.800122][T10881] __kasan_slab_alloc+0x22/0x80 [ 386.804962][T10881] kmem_cache_alloc_noprof+0x37d/0x710 [ 386.810406][T10881] vm_area_dup+0x2b/0x680 [ 386.814723][T10881] __split_vma+0x1a9/0xa00 [ 386.819124][T10881] vms_gather_munmap_vmas+0x2e2/0x12f0 [ 386.824564][T10881] mmap_region+0x72b/0x1d10 [ 386.829047][T10881] do_mmap+0xc45/0x10d0 [ 386.833184][T10881] vm_mmap_pgoff+0x2a6/0x4d0 [ 386.837777][T10881] ksys_mmap_pgoff+0x51f/0x760 [ 386.842527][T10881] do_syscall_64+0xec/0xf80 [ 386.847016][T10881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.852890][T10881] [ 386.855196][T10881] Memory state around the buggy address: [ 386.860807][T10881] ffff888031248600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 386.868849][T10881] ffff888031248680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 386.876889][T10881] >ffff888031248700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 386.884932][T10881] ^ [ 386.891067][T10881] ffff888031248780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 386.899160][T10881] ffff888031248800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 386.907197][T10881] ================================================================== [ 386.919643][ T9] em28xx 3-1:0.132: Closing input extension [ 386.994863][T10881] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 387.002090][T10881] CPU: 0 UID: 0 PID: 10881 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 387.012686][T10881] Tainted: [L]=SOFTLOCKUP [ 387.017012][T10881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.027066][T10881] Call Trace: [ 387.030337][T10881] [ 387.033253][T10881] vpanic+0x1e0/0x670 [ 387.037225][T10881] panic+0xb9/0xc0 [ 387.040939][T10881] ? __pfx_panic+0x10/0x10 [ 387.045343][T10881] ? preempt_schedule_common+0x83/0xd0 [ 387.050792][T10881] ? v4l2_fh_open+0xac/0x420 [ 387.055373][T10881] check_panic_on_warn+0x89/0xb0 [ 387.060303][T10881] ? v4l2_fh_open+0xac/0x420 [ 387.064892][T10881] end_report+0x6f/0x140 [ 387.069130][T10881] kasan_report+0x129/0x150 [ 387.073616][T10881] ? v4l2_fh_open+0xac/0x420 [ 387.078205][T10881] v4l2_fh_open+0xac/0x420 [ 387.082610][T10881] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 387.088574][T10881] em28xx_v4l2_open+0x157/0x9a0 [ 387.093593][T10881] ? do_raw_spin_lock+0x121/0x290 [ 387.098623][T10881] v4l2_open+0x1bf/0x3a0 [ 387.102918][T10881] chrdev_open+0x4cc/0x5e0 [ 387.107320][T10881] ? __pfx_chrdev_open+0x10/0x10 [ 387.112240][T10881] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 387.118646][T10881] ? __pfx_chrdev_open+0x10/0x10 [ 387.123568][T10881] do_dentry_open+0x7ce/0x1420 [ 387.128332][T10881] vfs_open+0x3b/0x340 [ 387.132384][T10881] ? path_openat+0x33f3/0x3dd0 [ 387.137135][T10881] path_openat+0x340e/0x3dd0 [ 387.141709][T10881] ? __pfx_stack_trace_save+0x10/0x10 [ 387.147071][T10881] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 387.152688][T10881] ? getname_flags+0xb8/0x540 [ 387.157350][T10881] ? __pfx_path_openat+0x10/0x10 [ 387.162267][T10881] ? __lock_acquire+0x6b6/0x2cf0 [ 387.167194][T10881] do_filp_open+0x1fa/0x410 [ 387.171679][T10881] ? __pfx_do_filp_open+0x10/0x10 [ 387.176685][T10881] ? _raw_spin_unlock+0x28/0x50 [ 387.181515][T10881] ? alloc_fd+0x64c/0x6c0 [ 387.185825][T10881] do_sys_openat2+0x121/0x200 [ 387.190484][T10881] ? __pfx_do_sys_openat2+0x10/0x10 [ 387.195664][T10881] ? exc_page_fault+0x71/0xd0 [ 387.200323][T10881] __x64_sys_openat+0x138/0x170 [ 387.205158][T10881] do_syscall_64+0xec/0xf80 [ 387.209701][T10881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.215770][T10881] ? trace_irq_disable+0x37/0x100 [ 387.220779][T10881] ? clear_bhb_loop+0x60/0xb0 [ 387.225440][T10881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.231311][T10881] RIP: 0033:0x7f322dbcf407 [ 387.235707][T10881] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 387.255304][T10881] RSP: 002b:00007ffcc19ca6f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 387.263717][T10881] RAX: ffffffffffffffda RBX: 00007f322db43880 RCX: 00007f322dbcf407 [ 387.271689][T10881] RDX: 0000000000000000 RSI: 00007ffcc19caf1b RDI: ffffffffffffff9c [ 387.279642][T10881] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 387.287593][T10881] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 387.295544][T10881] R13: 00007ffcc19ca940 R14: 00007f322de28000 R15: 0000555bd95984d8 [ 387.303501][T10881] [ 387.306861][T10881] Kernel Offset: disabled [ 387.311167][T10881] Rebooting in 86400 seconds..