last executing test programs: 9.996875463s ago: executing program 0 (id=1059): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) 9.872569065s ago: executing program 0 (id=1060): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) (async) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) syz_mount_image$fuse(&(0x7f00000027c0), &(0x7f0000002800)='./file0\x00', 0x404a, &(0x7f0000002840)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="6f00490000008eeb906a016ea85ff6d5d45c8b3e92ae2c1d287ca2df9ec3c60500f71eff826603921928c255360e6c75398bfa44827591a73f9ccdc079f817b233cafb475bfa4e4d4bb98dbef63a567844642b0900000000"], 0x0, 0x0}) 8.497610657s ago: executing program 2 (id=1065): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x1}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}}], 0x1, 0x408b1) 8.396808272s ago: executing program 2 (id=1066): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000400)}, 0x10) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x6, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000140)=@attr_other={0x0, 0xb, 0x2, &(0x7f0000000100)=0xfffffffffffffff7}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a3100000000090001007379"], 0xc8}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x7}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000040)={0x2, @pix={0x1ff, 0x99, 0x41416770, 0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x8, 0x1}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 8.3044297s ago: executing program 2 (id=1067): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x9}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) 8.248197938s ago: executing program 2 (id=1068): r0 = syz_usb_connect$hid(0x5, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000086e05db0000000000000109022400010000b00309040000fd03000100092104380f0122050009058103ff03030006"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000780), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_mrelease(r3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@delpolicy={0x100, 0x14, 0x400, 0x70bd26, 0x25dfdbfc, {{@in6=@mcast2, @in6=@local, 0x4e22, 0x101, 0x4, 0xff, 0x0, 0x20, 0x20, 0x5c}, 0x6e6bbd, 0x2}, [@algo_aead={0x87, 0x12, {{'aegis128-generic\x00'}, 0x1d8, 0x200, "5391c0ecee0444c61c933c510245003aff7afc4214b66332b910fb4cb5bd1fd3a30942813cc02f5afd2bc3186caccf2460c40cffdf600ce40dc04d"}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd26, 0x70bd27, 0x70bd2b, 0x70bd28, 0x10, [0x3, 0x4, 0x5]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000140)={0x3, 'dummy0\x00', {0xfffffeff}, 0x6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000ff000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021"], 0xb0}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc) setsockopt$IPT_SO_SET_REPLACE(r8, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x4, 0xd, 0x0, 0x9]}, {0x0, [0x2, 0x188, 0x0, 0x2], 0x3}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x48010) add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000080)="00000102", 0x4, r1) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x3, 0x2, 0x0, @generic=0x5, 0x6, 0x74}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r3) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2028060}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) socket(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xd8, 0x57, 0xe0, 0x40, 0xdfc, 0x1, 0xc19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0xe5, 0x0, 0x0, 0x25, 0x7d, 0x27}}]}}]}}, 0x0) 6.774977123s ago: executing program 0 (id=1077): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000400)}, 0x10) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x6, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000140)=@attr_other={0x0, 0xb, 0x2, &(0x7f0000000100)=0xfffffffffffffff7}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a3100000000090001007379"], 0xc8}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x7}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000040)={0x2, @pix={0x1ff, 0x99, 0x41416770, 0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x8, 0x1}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6.636738983s ago: executing program 1 (id=1078): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.479834073s ago: executing program 0 (id=1079): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000140)=ANY=[@ANYRES32], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = gettid() kcmp(r0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="02000100feb11a359cf0a0a073f0f835fb30ddd35ed09a2aa443bdec5827f1dcfa8079f85148c4f836b38cc116c9d06fc609f987b8ab98915acd0db2d8004cd5bace6d1d50c4259541b8bf3c23ca3e8d8676e6b0cc3f69df3b8b4183e94ec8ef85c5c5dfff86826621c50a7050ce431e0bb022d16f932b5f1cdb31e8324b422e02dab1fb7f6eb481966d18f446755b"], 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000008080)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x10}}, {{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000003d00)="4b67bcb6c748545ac8dc29725f41c1768a46f6de626011116f03225215b01a3253ecde83b47245b8291bfbb658d7087998cecb808d8606e9148fa5035b2b5726a23aa8279b15ab127e5755a1379e3814422bb4f6d7f63cadc22a2104ca34cd9564ef6ac685c854511bbe2aad3a12110e1c2739b12629262c0707cf2d95ee454a21f63dfbb8003e8cc8d266c48c9908d581bf62195d7bcf9dc62c6f6aba23ac6375428bf54f9b9ba8fe2d727a2609fc6c219f68c89a481b86eea9eebac92bc88c1a45267a9c3cf06bd45d7dbadb756e4272cca2d7ef0d4783a8f817e8bb0d44938cba0d5808d35fa616f61bb8852d1f28508ce0199fadc328e39ea6b29559cd43fb97a97943b66b09f87cc929f3ad2c829ac250864bdb9bc0b1536dbca292673a77acda4a52fb54a4432d0d908b4a2a574e4c14657aa9d9a5c2e5d6f28951356cf4d27904721b552525e4f7518f3b8c3e4f4c890e19a6dcae03de11fe538f5d135931e657415eceafcb9eb71daf86280e088329eaf4257b302c29badd93229169379ff6e7df6e10a6f559cdb9544bc3cd1ef9ddde6be2b2ea5125c04ce85a8f66b76639ac45f28b97460e33f462eaf2bb623230e39ff7c8cf366efa0f399d0a95283f2250e00c37aeca14e3dedb035565c5488477913e60417529250d4a75527e7a52a87b06468d55993d74be5c83b7eef07f228e80b28a2aa31f17061b4dcae51a37da363b940cefca9697f6aad3d13dc853c794e53c2311f87812a1e4cd6d4bf2eef80fa3f00fadcaafb12dc94641e1b809034bebea706dcd415167fd2bb1e29c9a0baaefd40ecaa5747343e25f43ff491847678a4aa3de961991d0172242d7a50b0251566d00a48a2d50703f1405e759500f48b752703eb3eef0cccecab87cfbe706de5d39dda44c27e013b59b9b2a380320846de55824359a5d28e5ab726607c62079f316f53141a7c6f8ea206fd1926b5c11a382a04ec26713fe292f7f57abccf9b5acf348e48d601c35214bac26bd62f0497a06383fb59a4178cc214e765b02433d78d0cb2914dbeeb2a7534ad33edd6b05f7d6e4548108a82fe108e72d307b74722a1c5a885715993e1017baec8583ff747e571afb98b85160227260eb83efce63d1d5a7f76e7632ed175310df1794c5e81dea74b7a6e2986d3a0edacd9bc6610c1f4b908664e8f9d6941d53016e7cb3aa58b2fcf2684b26089cafa33e96f2918b1df5549b5b5f43857e43a5dc9af5924e2df22db1f8f8eaf302a74e7c94339a62440cf7b36bc07e7c16f82206c90f4d808736de9f8a22196965ea078ffcb107939fc30b7e092decec6371e9c1b290d53920cfc5f80f52a51a874833c90378c39d6f71316bec7984c384513e88dad4b7edda2723740d483daf57b3b4e3c6b44acfb88bad2e99835395c490ee6d7039e0ae202abb1d4ed428d60c36ba023a7889b1f7826e2a62b5fc0a19d4c4495f605f1369f3eb90f75224d2db1aade32ba8d4df81b606e50f7c972d6477d72634086660a231171c2193847d6269d18a31c010cc2fab400df51ba0f4f1f2fcca4cbe54e1beaa7633a67cef14245f026e3848b2ef3e64a1c789ff42d0dc6eed6b925d8777c740074d136e002753eb8f97cb9305353f3ca0f861a925b43943890785987f864cb47ac4f4bc277ca7c8dabea1d4b93c5496008414fd66fbc9a8ea51a8441891de42a2a1979bfd040fa6488fcdb5e22ca721744f2660c3e52f8d308c1913c17af0dfafe459dd45538d3cce3970e0b21526b8cc6f9bed5bf34bf3ddede7e738b7b510afe2c9f6ab394036f6f63390b2d4c5155cfdc415cd13f67c084c6d97892d3397d1309176b4253a992b6f1658160c07b2d779f11487461e88416a461bf14ee6baf6bc7f51f5644eb2ee33297745de306d5b2bf80f462bd1ad3d0f679cc507a213ffc2169d4a82fdd91f2d46c1307ffd1933cd493fba002cdf4b88f138bd314659603a80da6064423d5a705a61c1594c6e3875c4465b187a63cba72c917c231fb3f447daf9175fc2141124cee7a49fd1dd3bdeadee93bc99fbc9493a547f11ee518869cf3a0603ab6ce780433acf368732defe00db217b47b483e3855f030f1ed4d36c481053c68c7e09c4c0b3750587e8931ba5d8595c4baf439748bd613a4b05585792b556c1dd5383da9fee7ad77bc08fb910b6e20faa2af8a98709cad3a48a0d6c4f6a30545b2a450bc43135f89e6503bda91639387778220544ce46f1342b27e4c12fc3dff9d26c081f90eba9d994e88f3fd3e6b9f43d1f5f6d0a266509ec8aa90020e552628bb07888f14dbc8a103d627812a86456c2237f8ea5d59972e9aa2a206d12961bd9c37730c5183ee74d3e70b71708c4dc1a648e78c0c1638b638b5a0948c3be824ceefc673c5dabce60c1e9627bee0951bedf5ee222c963494711e15a9c03b81c9c6a0291ed44be7690181269110ae37198d879decbb197778e80f16c01027566d74c4e768b94424cbfcd34166ec58d0a15868f5c4039c2b901ac88d7cd540124266ee56c02fab6d04c896c55f9b11f69c7a42b1fb780581a1e6127550dbaf2b5f3bac55e693571f418da34cc134f5fe18bb75e1f85ac26d84e4a5c9aef69c77546b192e6f6e36ca9009bc3d11d220fd3d7c053ef5748a0ba8977b285ea0c27f0eb3353ef20deeb7a65e94fbfcd33dccf6ad71e0f111e81545b40cfd82c38e2fd823139d8a4b2dc4c49629b3fa8b3301e5c4409922214fff8dd09bec1ac7b5677ca4e8d05bd9ff2d0e68f836a4f73956cc05c56992c44ffbecd22d787adfeece271eb251f13a2c77c7d155a21149d2f9868245c3b4e1e8b17d7cb98edc9764d21cb0832db9f25fe05b0034438c8197dd8317e78dff2aeb4f64006a82e2ece87a11b3a547701df0ba0f4df5a766b8aeefdee6fa93aec14e80759b559a65cfc5c8c5048e866eeee088bf81c6102768902a738d63f2462795346c785234520d9dcddeb507711948a330e6b69ef35f44bb477b9ddfa5047312e7202582d7828de006256b15f426a2fc3604a43876868fab652e894ba5cbaf3827688d239b9ef218f0614769c4f450abde65719eae51165b05a208875071e95e608732d24ca0287ad038a6564997dcbee93e16d4891a86670939729bb972c23a8de5b8f8fa450a2d6201c38e448e7e9cf10fc309aea2f1155ae05f079cbf4ad14b026a836c833aab8095bdf5521538d06d8564782aff58e5268855980f39c02b062900b0d8cfc879ccac72ee5b53c9e7c14b82969241c37204681791d7740642953b1d63af67923a68a67f100967eaa8b791f6b1e6bb13f6ef464ca27b4178566970bea896205ebf0d9f3874ccab8a5c51214fb9c910aade3f2637bacb84b564434bbf340bc89f670dae59e4afd4afe027afc6ead26294847c80682d117c3c349e1c1719894235bafaa0cadf323922ce79b51bd9f4c094e031abd729521fb6be30b30b4b3d94fd9dbf60cb26e6ceb8b3fe7a337ff41ec115a84c3de55bbe11e86770a94f3339ed0565bc6eb19db75189d0ec7aa4f5cd82c7140f83b48f666683d2a51cc08c723110fd7df3fc91e7dd1f95d13c2e7de7b64c9154e657177365286e4e114092f2b4b061db7125f3e938fd396f114755c0091f45c261dc811fa3c5c4a378fb11622081a9131a698301907e1a6690cf74f93a9bb0eafc32c4fb50ac26244b859e8e2ff6039fc97a5c7d9158b169b4f22517c83c421586b663f796d9c0519bc2aca60914ffe2db7f2ae9756f63814156aac4677f35f4a8ed8361233055b305615092385d49810eee8bf05cb4e41fe23740f1d2602e8804cd1559ce673ae207502c026e62cef6a35842aac2e794e7420e9a825035095d40703b69d19fd413fd1af2820ec73b1362220bfeaa57ed0bb91fc5b2d55223eef8148d4cff88e26e100643e7e673385b7948a8d00244f94433bb11a2cd36c2f5f5447e7b363d96d8b378ce9662967537ab2feef4324e568512aa6b1959cdf9d4773aa8c613b6d2f2680b8c6fed6b111940b66affac94d597ad179e02777b72082ab728ddd2db7084f9fd42bfa4cb217ee05e57fdcbce219aac7684e763468e6937c8b42ca89771c21a8dc1ed8184d8c503d21a3ddf681542f82e1460280d7d0784a2e3213c1aaa80f4e0ce4cfed025b504a2557e19dad25c74fc2c7499179396338a200456b625a2b878679fa0dfff56fcd178afb62f887aabd070c6d09d8906b17edcf80f0633542b5dd729e95de35331f044db49f94fab0edf7d97067b47a330739e38233873f42532620b7ddff2fece3a5da01b693e0e3804d6e8d8281f1f84db685f9e32f8048f71501f307ca79e2cec13272f34a7da48b7979fbc1ad2a31cf6de00ec99ceffc455d4482ecf7a688614e20a4fe4a35da75dc90f36f17a94cdd01cc1838f39e2583999df2374f96604bcaef5fd78bcbca367e508fc361017c607c1cd263a1c42eb4f793997c521ff8f3bb1ed19d2068309704ddafcc7574aa184f1be03a40b8e4e098034f1d120977107b483af46813b5069ea08d8bfcb21f7d9adb61a400f2dd2037a4c7aacb76d109ff7b16d182fdaa4dd902fcbf2f5761d60c90f897671244d488679ebd0805485dc585257729774aad6124ea92f528c40c561681bafbc550c6f61b5f4500c5691cc73faed1748563b6624446b9c57f7cbe3942c07465b455e5407355ba71ec267c7762b47232a3a0319f3a04439c9f80e5855e4c70358a4e54b499666f72e34d528f58858c9a5781f9a18b9aa42be727d0361e1833242b363fb45af726f4cf3ed66b02f167cc37d9d79dc5715e67aeeba7337e53394416025620e479f616dbb37b50c040b7cbf2eed4668c30791a9992a27f1c5a3fcd46e8e95d02b461de0a8010c84ae52d94bb8a5ec0c07a063e95b5e99e5975f1fcb7b28a3198ec40a3eab705fd769744bdabb9456faed92f905ff35c4bc9058deda4a5866cb11b4a4b8095827aea8679ec9794251b8be7768e80507790d947d02038c656913111eded4573e96437b42edfc314138e40acd97f64fd0b1c0dab112ba00de9305d5146ae354c934934a4b9fc10715cf2ae7d2d4adc03144bf85317a775597da43ed0e379d0bf85333afee16ae677452d24011beaa6eb8635118c0dccddaba719586899d417caccab37d4ac1308ac83ad42dc7917ec1cf45b64e520e7152eefd891cd3cd8497dacd9a5719eb6e9a27bd01ba5272148ab215b5e89dda7c7384c19e879271fa3fae1c2231aa475a7bcc57a5172cb0b2ae781dde082d8ccb93e23fbb2f7c99d9ee07fd9fd3000bcc6ed30dbc05b4d42204a3421cfda3808eb5fb0d9082b2b4e8952ae7b1d6725f61e3caa641c7e90bff598e49e5b24c732d0772d296ba8fa800691cbbfcacdafe3d63f64f61fbd0d9f0cc30dc4c6dbb521bde44bb755ea774f506dfd8732de2d0ed5eee6eb2d1d819e0f0c592441cc0bcb40e5fac4916c8633933ac99a71707d8ef222baa18ed0c50c3ddd159bb5f5faa6bbac6e618c6a01e153c2b2c5e4e200922f930eeb60112e1850d5030e6bab3a6169edecf702fc4e653e69935710d618c48846ce29ddd469db582e030b2516a729043d5614368b180b6e9a3a7ae1ea243429c0d9d8b38ca40f467430ffdb573fd0abe6711f7277679b49005284ce474f10a691dce96c115f78894513fe2d377517bf1d0d1555b77229f59b9af46287a52bf7c0c53d098245c4e02cd2cad65d346cdf0799ac187e5c9a3f05602e8389b883bd2e38eea371e78f35f0302535bcca66966071fce26060f85711c084", 0x1000}], 0x1, &(0x7f0000004f80)=[@rights={{0x18, 0x1, 0x1, [r6, r2]}}, @rights={{0x20, 0x1, 0x1, [r6, r6, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x20, 0x1, 0x1, [r5, r5, r1, r6]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x20, 0x1, 0x1, [r6, r2, 0xffffffffffffffff, r1]}}, @rights={{0x34, 0x1, 0x1, [r1, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, r6, r2, r2, r6]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x148, 0x4000}}, {{0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f00000062c0)="a5222052fd03dd2d5ab5e2d3095cfb99119369c6a0ca1fbf2954e6ff7e4718d6dd0618df028739a64bcf2a578329038fc82f77ec04216010cac09e3c2aeaa1c1ff336cd052ca6e72d736c99e531e93f005ce16a5483df7f225d4e128b87cf85a918b942b560f19452c6cae331f61ca111b82", 0x72}, {&(0x7f0000006380)="b156b575cda4992c13ef26497e7c84fe72eadcd8645334d5788450d99138b2cffb", 0x21}], 0x2, &(0x7f0000006440)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0x2000}}, {{&(0x7f0000006480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000006840)=[{&(0x7f0000006500)="0ad14939730e0a00e04425177958573a3f9d4bb396242519b918ae1a35f4368306e4fff5bd8ad6f6fc076b22251db5b41a84229fe3b9a740f419a7a952e5183c784be42a52f5349c265af0d19303f6cb6a5d59156e7261c54886dafc2e2ec0f9d0c187b1bc1ea05ecb167897388f443ca58237e179cdcc45e7bf35bd7d78039b7b172449807ea186084b62be789a4a17f3b98af5b15e5f909e85402adfaf5744a39b33a9215f39c77f901e151578fe1992d1e56c5f4ee6545b62008e1f9247d5723a19cdf00a4ae2be4f7068675bdb66e889c93e76831dafb60b9aac32", 0xdd}, {&(0x7f0000006600)="006667582e1d25d27d553496c3efa8519e5d8295b487d5e4a3c13a84668eb43e336281f62c77360f65607546780cd1d82c952b38018f8fbe007d97fc7eec67065d4c41c2e69c6fcbe146470fe76b033b380690943d8949af66840cab72c0e8a62820152a4b22892a9ab128afa0285d82db394b1b678367d9bf46adeed4703150814c3163726a0c7259b14d7ac74dede94db6c006f9d4f47d64e3f67a1e7136900bd0dabb0b7d5d95", 0xa8}, {&(0x7f00000066c0)="3adedd89ce5b1a534f342140a0ba741cb588e70c224ebd58dd13454f655fb52a8968d7a27c1984c4eb251ab9ca5314bc75252ebe2a85410504cd296002d737f422407548bda316d445e0df3093613bd46fda5238b3ca3cbd9eb6fad3f740efbd6aa84d487e07832295a6ebff0ec2d077d6c38f459102abbbe7e7ac3bfece3f90160f04dc77eb52dc29071b46c643a6f3a536d71cb0a0c66593723f71e95359c773ed792f4b021112d024280b", 0xac}, {&(0x7f0000006780)="b0b45a55e250f5431b2be61cfd4390ffdc2c03b98ba37e918cd589bbdf9a96a7e55b57910567532573bf2a7184481ee45e26462cab71edcc00c7879883c58a07cc826ffdd1f3cd4dac7d91cfcbf085d0061b98d42650152d6fbd74b2bd51ae1b08fe20f71a01194045a54468be67faab46afb97eb37680a8d3c750750b97eb39b159b728d1723ea036800ac67984e1cbacf405696a64adbd227e", 0x9a}], 0x4, &(0x7f0000006880)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x240000c4}}, {{&(0x7f00000068c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000006a00)=[{&(0x7f0000006940)="00113d05396a04dc1690ee27f4ee06f996082130b16a6941ed4afa89824d3074a402a680ad78d8cfb2bc01a004cb8343bab8f7be060088b94cbfca45fb0cee5e68296a31fc7e5d754eba3085c6b5e0dc12ae3309be2f8fe664f6", 0x5a}, {&(0x7f00000069c0)="d216b3ee733809fa5ee1e906", 0xc}], 0x2, &(0x7f0000006cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8, 0x4}}, {{&(0x7f0000006dc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007f00)=[{&(0x7f0000006e40)}, {&(0x7f0000006e80)="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", 0x1000}, {&(0x7f0000007e80)="878c0e5a792a8c16671a9fff0be58ab91fd3c83cb5010eb0f9837feb16873da76e33fa88e8e60cf329baa5ee86e76ff7305c83dfd361e04d7cc5b444a980ab53a1e6de05dc53807cc6e755c2b21ef21ac6cccda99156692c5fa87d6c3cc1ec03ac8356", 0x63}], 0x3, &(0x7f0000007f40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r5, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128, 0x4000080}}], 0x6, 0x0) r7 = socket(0x22, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f00000000c0)=r3, 0x4) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r9 = dup(r8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x169a82, 0x0) read$FUSE(r9, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000002680)) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = dup(r10) sendfile(r11, r9, 0x0, 0x89ffc) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r13 = accept4(r12, 0x0, 0x0, 0x0) recvmmsg$unix(r13, 0x0, 0x0, 0x0, 0x0) 6.466491947s ago: executing program 3 (id=1080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x11}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000700)=0x1b, 0x4) socket$alg(0x26, 0x5, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_open_dev$sg(0x0, 0x0, 0x8002) chdir(0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r4, &(0x7f0000000c00), 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000008000, 0x0, 0xd4}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224000100"], 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x10, 0xffffffffffffffff, &(0x7f0000000000)=0x9700) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000980)=ANY=[], 0x24c) listen(0xffffffffffffffff, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x7, 0x0, 0x3, 0x1}, 0x8) 6.45440253s ago: executing program 1 (id=1081): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904090000c9c8b70036ba27d29a255afd0c977cd3de8fca6d3d59466063c7c27e276e56083bf847f9861eefce217945557a1dd17b96615b766a181cef87a4edb535c686e3238332fa8ae810b16dd2b91bf57bfe02011ac21d6ee90de6e0d9100b13a15514471a31c0e2f9e6c20d15710b9f100bc3cd834192dae540ddf6f31d9042543329802a9b159c75c7ff8ccf7c9c64eba8aa3512d4143ef185c25d0b5e7a1d25da99c2bd4bd46426e01e05c12eaa30b782bc2afe67ddc578ed191a3f275ca15047726e354cc2daf3edc718f8a2e2e95f2561864fd8b5817ea5b696cb5e9bd03267b86b66d4813a6db707ff77b732ad93c01d50e35c0b250ee0e66e956a5502"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x8) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="2b72646d61202b6303657075de4a"], 0xe) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d30001280200001810a00010071756f7461000000100002800c00014000000000800000010c0001800700010063740000080003400000011014"], 0xbc}}, 0x20050800) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6c010000100013070000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x3000e804}, 0x800) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x8) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) (async) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r3, 0x0, 0x0) (async) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="2b72646d61202b6303657075de4a"], 0xe) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d30001280200001810a00010071756f7461000000100002800c00014000000000800000010c0001800700010063740000080003400000011014"], 0xbc}}, 0x20050800) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6c010000100013070000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x3000e804}, 0x800) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) 5.024599668s ago: executing program 2 (id=1082): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="120175a91116659e4b55aab9ca566a558c00000000408720010f0000000000010902240001000040b10904000001030001000921010100010900000000000000030c0000cbf5d6ab1aa04ce8b21327c1d526750a85098b46ea11ac5332a33fe974fa2768e8df8a3f84a06811be0e4b7f8a8898c377030e9921a05be1ffd329198be76dced4937f27219817136d3bb2c46257b8b537172b8c0d587bbecf6d128338062024c4764b900ebcd594605de9993e5ee1b26d0a960fda224c704c883401727408fe9ac3f93eaf188516198e5f6c0380293e997b1b907864"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) (rerun: 64) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x0, 0x3}) (async) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4020ae46, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESOCT=r3, @ANYRES64=0x0, @ANYRES8=r0, @ANYRESOCT=r1]) r4 = dup(r1) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f00000001c0)={0x1, 0x100, 0xfffffffe}) (async, rerun: 32) write$binfmt_script(r4, 0x0, 0x26) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008050) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000003800010324bd707e3adbdf25010000d2"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r6) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4091}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x64}}, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (rerun: 64) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r8, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000040)=0x9) (async, rerun: 64) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000080)=0x7) (async, rerun: 64) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) (async) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000a80)={0x100000011, @multicast2, 0x4e24, 0x0, 'lblc\x00', 0x14, 0x2a9f, 0x61}, 0x2c) (async) memfd_secret(0x0) 3.316836764s ago: executing program 0 (id=1086): syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'bond_slave_1\x00', &(0x7f00000002c0)=@ethtool_cmd={0x15, 0x1, 0xfffffff2, 0xc1a3, 0x5, 0xb, 0x5, 0x1, 0x7, 0x40, 0x10000, 0x9, 0x9, 0xaf, 0x10, 0x9, [0xb, 0xe]}}) writev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000040)="2cbfeed1de", 0x5}, {&(0x7f0000000080)="ecfa69e27e48ea8e96b4f3abb9dc3d9ac49dcf47079d0598373c7640a36a9af6db689726623b3943c8a6b524551cf5edae7e1607334d48790d522604a41c591b4c05f8b2eb822d5b87613510fae9804b3fa5ec74befb789e02106d03", 0x5c}, {&(0x7f0000000200)="3808fd631b3cb6ac6f5b143b5bee649f9c987aab458739c1d7de7c0c4079bebcbac7eea79bbd1da238e073c9e3f97a97b2359978c1c8f4b881f2cf73e802b5e80f8f4c90f0c1943a0dbb9800f84a042017a587b83765c9568b72f89c9424a6cc56081b770fab29f665b1daeb4bae6328bcddfdb70b2b19058ba567e61ac2f006f24f180c2cc522ea341fbc7bd7e82797cc53d96fe6058ad1bd90817656a910f1e11e24df82b0c1fbeca161364d229bfac7c2d8714528b39bf832f5e29f5b9b4665a18a3a6f936cecfb02780561db8d0dc2661bac93863442d9a6fe68d94e64b84c4594b15279ea59862ef7c5e2048c", 0xef}, {&(0x7f0000000100)="b14799ce7f68928ff8a663bf6b3df61e0f4e67f5e4ebc0c9ceea", 0x1a}, {&(0x7f0000000140)="41a28883be4ca057bc8180113d8ceee0494d7aefac183db448b384afcb744eda2dd8ca", 0x23}, {&(0x7f0000000400)}], 0x7) 3.297107115s ago: executing program 3 (id=1087): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'pim6reg\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@bridge_delneigh={0x1c, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x10}}, 0x1c}}, 0x20024090) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x80bf, 0x80, 0x0, 0x9, {{0x18, 0x4, 0x1, 0x35, 0x60, 0x65, 0x0, 0xd4, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x18}, {[@cipso={0x86, 0x24, 0xffffffffffffffff, [{0x0, 0xb, "567bd3703e3c09f9ad"}, {0x1, 0x2}, {0x6, 0x11, "95d2a3a315da9f815ee067e8f1e157"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0xe0, [@private=0xa010102, @multicast1, @local, @private=0xa010102, @private=0xa010102, @rand_addr=0x64010102, @multicast2, @multicast2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x8c, 0xf8, 0x401, 0xa, @remote, @private0, 0x700, 0x8000, 0x1, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000003c0)={@empty, 0x0}, &(0x7f0000000400)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r14, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4880}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xfc, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r16 = socket$netlink(0x10, 0x3, 0x0) writev(r16, &(0x7f0000000080)=[{&(0x7f0000000140)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0003000000000000000072080003002000000000", 0x39}], 0x1) 3.274287253s ago: executing program 1 (id=1088): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = dup2(r0, r1) ioctl$KVM_RUN(r2, 0xae80, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_open_procfs(r3, &(0x7f0000002080)='autogroup\x00') ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f00000020c0)={0x0, 0x10, 0xa}) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000002100)) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0xab9f01308d291396}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) readv(r0, &(0x7f0000003600)=[{&(0x7f0000002240)=""/212, 0xd4}, {&(0x7f0000002340)=""/148, 0x94}, {&(0x7f0000002400)=""/243, 0xf3}, {&(0x7f0000002500)=""/203, 0xcb}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x5) close_range(r4, r2, 0x2) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000003680), 0x4) ptrace$setregset(0x4205, r3, 0x2, &(0x7f00000046c0)={&(0x7f00000036c0)="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", 0x1000}) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xffff) ioctl$FIOCLEX(r2, 0x5451) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000004700)=0x3) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000004740)={r4, r2}) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000004780)=0x6) io_uring_setup(0x5a03, &(0x7f00000047c0)={0x0, 0xf55a, 0x2, 0x1, 0x2be, 0x0, r2}) pselect6(0x40, &(0x7f0000004840)={0x200, 0x1, 0x8000000000000001, 0x0, 0x1ff, 0x5, 0xa7f, 0x9}, &(0x7f0000004880)={0x8000000000000000, 0xa0, 0x8, 0x9, 0xffffffff00000000, 0x3, 0x5, 0x7}, &(0x7f00000048c0)={0x8, 0x7, 0x2, 0x8, 0x65d0, 0x100, 0x2}, &(0x7f0000004900), &(0x7f0000004980)={&(0x7f0000004940)={[0x497]}, 0x8}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004a00), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000004ac0)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a40)={0x1c, r5, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000004b00)=0x1) read$FUSE(r4, &(0x7f0000004b40)={0x2020}, 0x2020) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000006b80)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r6, &(0x7f0000006bc0)={0x9, 0x20, 0xfffffffffffffff3}, 0x48) read(r2, &(0x7f0000006c40)=""/75, 0x4b) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000006cc0)=0x10000, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000006d00)=""/80, &(0x7f0000006d80)=0x50) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000006dc0)={0x1, 0x17000}) 3.088511342s ago: executing program 1 (id=1089): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000400)}, 0x10) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x6, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000140)=@attr_other={0x0, 0xb, 0x2, &(0x7f0000000100)=0xfffffffffffffff7}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a3100000000090001007379"], 0xc8}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x7}]}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000040)={0x2, @pix={0x1ff, 0x99, 0x41416770, 0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x8, 0x1}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.087923259s ago: executing program 4 (id=1090): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, 0x0, 0x0, 0x0) (async) socketpair(0x1a, 0x2, 0x8, &(0x7f0000000140)) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) getresuid(0x0, &(0x7f0000000300), 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (rerun: 64) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) gettid() (async) timer_create(0x0, 0x0, &(0x7f0000000340)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)={0xffffffffffffffff}, 0x2}}, 0x20) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001084000"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32, @ANYBLOB="0800030002000b0008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) (async) unshare(0x6010400) (async, rerun: 64) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r4, r3}}, 0x18) (rerun: 64) lseek(r0, 0x1, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d040200"/20, @ANYRES32=r8, @ANYBLOB="0a000000040000000f001280110001006272696467655f736c617665000000000c00058006001f00ff000000"], 0x44}, 0x1, 0x0, 0x0, 0x806}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 3.06437961s ago: executing program 3 (id=1091): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.994198772s ago: executing program 1 (id=1092): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x400, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000000000880000000008000000008600907800"], 0xfdef) 2.950328387s ago: executing program 3 (id=1093): epoll_create(0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f00000002c0)=0x1, 0x4) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r6, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe0}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r4, 0x0, 0x4000041) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) listen(r12, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}}, 0x1c}}, 0x0) 2.949967304s ago: executing program 4 (id=1094): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x3a388680, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/49, 0x328000, 0xc00, 0x9, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede010203010908240001dad43bf409040002020083ec00090506020002ebb30b747ebf8fb202000110"], 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000018c0)=0x6, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/vmcoreinfo', 0x42, 0x188) io_setup(0x20, &(0x7f0000001140)) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)="0d5de876b583e0", 0x7, 0x7}]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000004f1c5900400001020301094317c7c4010780000904000e020301020409210000050122220209058103ff03000700"], &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x80, 0x6, 0x4, 0x20, 0xff}, 0x5, &(0x7f0000000200)=ANY=[], 0x4, [{0x27, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, {0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="3203892bb5208b9d4404151c4d3545784257225be0ae578ba45016bf1f4b74a01c8c23078900"/50]}, {0x4d, &(0x7f0000000300)=ANY=[@ANYBLOB="4d03999e9ed482b9f774846f442ae166982d8849c143e3d7f7310768d3f61d4b84e1b786429ac175ec7a6579a3ac64e76f8209e9ffcf23bc1d4d5eb3484c629d0b340800000000000000267b9e"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x43e}}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000740)="670f0db47c002800000f01bb0b000f01c40fc75bef67660f38815c0a0cf2dc7ffc652e0fc75945baf80c66b858ecb98e66efbafc0c66ed66b9800000c00f326635001000000f30660f2243", 0x4b}], 0x1, 0x48, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000004c0)={[0x4]}, 0x8, 0x80800) fcntl$getflags(0xffffffffffffffff, 0x401) unshare(0x2040400) r5 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x5, 0x5, 0xfffffffffffffffd}) mq_getsetattr(r5, &(0x7f0000000700)={0x800, 0x10, 0x1}, 0x0) mq_timedreceive(r5, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) unshare(0x22020600) pipe(&(0x7f0000000100)) 2.880335594s ago: executing program 3 (id=1095): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xe}]}}}]}, 0x54}}, 0x0) 2.837040564s ago: executing program 3 (id=1096): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000140)=ANY=[@ANYRES32], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = gettid() kcmp(r0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="02000100feb11a359cf0a0a073f0f835fb30ddd35ed09a2aa443bdec5827f1dcfa8079f85148c4f836b38cc116c9d06fc609f987b8ab98915acd0db2d8004cd5bace6d1d50c4259541b8bf3c23ca3e8d8676e6b0cc3f69df3b8b4183e94ec8ef85c5c5dfff86826621c50a7050ce431e0bb022d16f932b5f1cdb31e8324b422e02dab1fb7f6eb481966d18f446755b"], 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f00000000c0)=r3, 0x4) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r9 = dup(r8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x169a82, 0x0) read$FUSE(r9, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000002680)) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = dup(r10) sendfile(r11, r9, 0x0, 0x89ffc) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r13 = accept4(r12, 0x0, 0x0, 0x0) recvmmsg$unix(r13, 0x0, 0x0, 0x0, 0x0) 2.760497765s ago: executing program 1 (id=1097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x11}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000700)=0x1b, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_open_dev$sg(0x0, 0x0, 0x8002) chdir(0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r5, &(0x7f0000000c00), 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000008000, 0x0, 0xd4}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224000100"], 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x10, 0xffffffffffffffff, &(0x7f0000000000)=0x9700) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000980)=ANY=[], 0x24c) listen(0xffffffffffffffff, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x7, 0x0, 0x3, 0x1}, 0x8) 2.402848868s ago: executing program 4 (id=1098): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) sendto$inet6(r0, &(0x7f0000000040)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb055ad6401051a2d708f37ac8da1ae5026daca014297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241", 0x90, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) (async) sendto$inet6(r0, &(0x7f0000000040)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb055ad6401051a2d708f37ac8da1ae5026daca014297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241", 0x90, 0x0, 0x0, 0x0) (async) 2.35024287s ago: executing program 4 (id=1099): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000100)=""/19, &(0x7f0000000080)=0x13) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000780)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000001100)={0x0, 0xaee2, 0x0, 0x3, 0x1f0}, &(0x7f0000001180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x4d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x48}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000006a00a5d627bd7000fbdbdf2556942acd"], 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000440)={0xb, 0x20000006, 0x4000008, 0x0, 0x1e, "04000000019e58f557d636028fa10a1490ea71"}) r8 = dup(r0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'nicvf0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000700)={'gretap0\x00', r9, 0x8, 0x80, 0x7e, 0x9, {{0xe, 0x4, 0x1, 0xc, 0x38, 0x64, 0x0, 0xf8, 0x29, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0x1f, 0x23, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x4, 0xcb, 0x1, 0x4}]}}}}}) write$UHID_INPUT(r8, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 1.912562079s ago: executing program 2 (id=1100): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0xfc, 0x1ff, 0xa, 0x0, 0x0, 0x7c}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x18, 0x8, 0xd, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000050) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000036000000", 0xfe60) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2c03, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) r6 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2085396d0102030109021b00010001000b0904c80201030102030905fbff"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @random="6481bf928700", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x2}, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3, 0xffff0000}}}}}}}, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x20, 0xa, 0xaa, {0xaa, 0x36, "15489dd980feda8c7fecbde33a299521505801296a26d82c261e01c2d368d4afee93d23ac85bc72704da2c988d3d4a77a747116f7b4a3008fe3837a89a81ed5f678e80684618bf3165f5621bf2a6a80311d2bd8f6fd46e534da8e6710f6a75999dcbdf5faf61e47267540734c6c2100c6718cdd508e3646f1504d78f0735163d2895e515b2e83d6f6336b30033ee0a7f20599a6f309c190b4b1dd9f917210b70ab3868aea19d613e"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000280)={0x40, 0x13, 0x10, "5700372861ffa32798154e6367950744"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xb9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}}) 1.263593435s ago: executing program 4 (id=1101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newneigh={0x38, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x19, 0xb}, [@NDA_SRC_VNI={0x8, 0xb, 0x4e6}, @NDA_DST_MAC={0xa}, @NDA_PROTOCOL={0x5, 0xc, 0xff}]}, 0x38}}, 0x80c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, 0x0) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000180)=0x5, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/105, 0x69}, 0xa}], 0x1, 0x45833af92e4b39fd, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000240035b900000000000000000000000006000300000000004dae24f3ec82c1"], 0x1c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xb, &(0x7f00000002c0)=0x3, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) shutdown(r7, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x2000000008, 0x400) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r8, 0xc04064aa, &(0x7f00000000c0)={0x0, 0x0}) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) 773.051768ms ago: executing program 4 (id=1102): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x59, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f00000004c0)=[{0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) keyctl$chown(0x4, 0x0, 0xee00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000100)={r9, 0x0, 0x7, 0x9}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r10, 0x5403, &(0x7f0000000040)={0xfffffffd, 0x0, 0x0, 0x7453245a, 0x6, "585406ff0001e900000000000000000400"}) readv(r10, &(0x7f0000000080)=[{&(0x7f0000000140)=""/135, 0x87}], 0x1) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={{r2}, 0x7ff, 0xeeb, 0x3}) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r12, 0x1, 0x0, 0x0, {{}, {0x0, 0x4107}}}, 0x1c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 0s ago: executing program 0 (id=1103): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): T7629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.043919][ T9] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 219.096195][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.113754][ T9] usb 2-1: Product: syz [ 219.133771][ T9] usb 2-1: Manufacturer: syz [ 219.151207][ T9] usb 2-1: SerialNumber: syz [ 219.199344][ T9] usb 2-1: config 0 descriptor?? [ 219.241690][ T9] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 219.254036][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 219.275641][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 219.310696][ T9] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 219.333063][ T9] usb 2-1: media controller created [ 219.364869][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.384932][ T7654] loop2: detected capacity change from 0 to 7 [ 219.409872][ T7654] loop2: p1 [ 219.413307][ T7654] loop2: partition table partially beyond EOD, truncated [ 219.424093][ T9] cxusb: set interface failed [ 219.432106][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 219.442487][ T7654] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 219.531629][ T9] DVB: Unable to find symbol mt352_attach() [ 219.656197][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 219.713541][ T9] zl10353_read_register: readreg error (reg=127, ret==-121) [ 219.745423][ T9] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 220.007536][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.534'. [ 220.066372][ T9] rc_core: IR keymap rc-dvico-mce not found [ 220.068563][ T7209] udevd[7209]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 220.072303][ T9] Registered IR keymap rc-empty [ 220.073605][ T9] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 220.148658][ T9] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input40 [ 220.164153][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 220.179213][ T9] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 220.286501][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 220.396248][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 220.477445][ T9] usb 5-1: USB disconnect, device number 36 [ 220.506233][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 220.781553][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 220.946824][ T5888] dvb-usb: bulk message failed: -22 (1/0) [ 221.073591][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 221.186858][ T5888] dvb-usb: bulk message failed: -22 (1/0) [ 221.249242][ T9] usb 2-1: USB disconnect, device number 40 [ 221.397754][ T5888] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 221.464382][ T9] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 221.646218][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 221.655490][ T5888] usb 5-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 221.798485][ T5888] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.805162][ T5888] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 221.882832][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.964111][ T5888] usb 5-1: config 0 descriptor?? [ 222.204412][ T7678] loop2: detected capacity change from 0 to 7 [ 222.211995][ T7678] Dev loop2: unable to read RDB block 7 [ 222.218224][ T7678] loop2: unable to read partition table [ 222.226452][ T7678] loop2: partition table beyond EOD, truncated [ 222.232688][ T7678] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 222.359953][ T5888] usbhid 5-1:0.0: can't add hid device: -71 [ 222.390051][ T5888] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 222.439699][ T5888] usb 5-1: USB disconnect, device number 37 [ 222.802947][ T7708] tipc: Enabled bearer , priority 0 [ 222.820606][ T7708] syzkaller0: entered promiscuous mode [ 222.830239][ T7708] syzkaller0: entered allmulticast mode [ 222.843214][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 222.843232][ T30] audit: type=1326 audit(1745582208.822:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3c38e969 code=0x7ffc0000 [ 222.876315][ T47] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 222.907213][ T30] audit: type=1326 audit(1745582208.822:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f9d3c38e969 code=0x7ffc0000 [ 223.036260][ T30] audit: type=1326 audit(1745582209.012:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3c38e969 code=0x7ffc0000 [ 223.069565][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 223.071120][ T7714] tipc: Resetting bearer [ 223.077051][ T47] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 223.104067][ T30] audit: type=1326 audit(1745582209.042:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3c38e969 code=0x7ffc0000 [ 223.112161][ T47] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 223.137720][ T7707] tipc: Resetting bearer [ 223.177469][ T47] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.186363][ T5892] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 223.193005][ T47] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.208222][ T47] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.217363][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.219448][ T7707] tipc: Disabling bearer [ 223.358463][ T5892] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 223.370602][ T5892] usb 3-1: config 0 has no interface number 0 [ 223.400382][ T5892] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 223.416265][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.424303][ T5892] usb 3-1: Product: syz [ 223.441675][ T5892] usb 3-1: Manufacturer: syz [ 223.446579][ T47] usb 2-1: GET_CAPABILITIES returned 0 [ 223.447293][ T5892] usb 3-1: SerialNumber: syz [ 223.452085][ T47] usbtmc 2-1:16.0: can't read capabilities [ 223.463967][ T5892] usb 3-1: config 0 descriptor?? [ 223.499726][ T5892] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 223.510410][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 223.779785][ T5892] dvb-usb: bulk message failed: -22 (2/0) [ 223.796918][ T9] usb 1-1: device descriptor read/64, error -71 [ 223.806439][ T7702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.822300][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.930927][ T7702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.974742][ T5892] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 223.984450][ T5892] usb 3-1: media controller created [ 224.166973][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 224.183895][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.224530][ T5892] cxusb: set interface failed [ 224.233253][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 224.306262][ T9] usb 1-1: device descriptor read/64, error -71 [ 224.323572][ T5892] DVB: Unable to find symbol mt352_attach() [ 224.332159][ T5892] dvb-usb: bulk message failed: -22 (5/0) [ 224.338940][ T5892] zl10353_read_register: readreg error (reg=127, ret==-121) [ 224.354922][ T5892] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 224.417114][ T9] usb usb1-port1: attempt power cycle [ 224.426451][ T5893] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 224.497556][ T5892] rc_core: IR keymap rc-dvico-mce not found [ 224.503572][ T5892] Registered IR keymap rc-empty [ 224.512220][ T5892] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 224.524917][ T5892] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input41 [ 224.548974][ T5892] dvb-usb: schedule remote query interval to 100 msecs. [ 224.563818][ T5892] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 224.584805][ T5893] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 224.609804][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.630772][ T5893] usb 5-1: Product: syz [ 224.635104][ T5893] usb 5-1: Manufacturer: syz [ 224.645444][ T5893] usb 5-1: SerialNumber: syz [ 224.661656][ T5893] usb 5-1: config 0 descriptor?? [ 224.667039][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 224.730980][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 224.741836][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 224.753412][ T7739] netlink: 'syz.3.557': attribute type 12 has an invalid length. [ 224.761450][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 224.776420][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 224.787018][ T9] usb 1-1: device descriptor read/8, error -71 [ 224.900796][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 225.016205][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 225.026437][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 225.060854][ T9] usb 1-1: device descriptor read/8, error -71 [ 225.164876][ T5893] usb 5-1: Firmware version (0.0) predates our first public release. [ 225.165466][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 225.182982][ T9] usb usb1-port1: unable to enumerate USB device [ 225.199641][ T5893] usb 5-1: Please update to version 0.2 or newer [ 225.275617][ T5893] usb 5-1: USB disconnect, device number 38 [ 225.296281][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 225.410715][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 225.536387][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 225.622052][ T9] usb 2-1: USB disconnect, device number 41 [ 225.656475][ T5888] dvb-usb: bulk message failed: -22 (1/0) [ 225.816202][ T5888] dvb-usb: bulk message failed: -22 (1/0) [ 225.847952][ T5888] usb 3-1: USB disconnect, device number 25 [ 226.071877][ T5888] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 226.318033][ T7762] input: syz1 as /devices/virtual/input/input42 [ 226.410904][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.567'. [ 226.656836][ T5888] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 226.806364][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 226.818312][ T7772] FAULT_INJECTION: forcing a failure. [ 226.818312][ T7772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.862744][ T7772] CPU: 0 UID: 0 PID: 7772 Comm: syz.4.568 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 226.862779][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 226.862793][ T7772] Call Trace: [ 226.862802][ T7772] [ 226.862812][ T7772] dump_stack_lvl+0x189/0x250 [ 226.862850][ T7772] ? __lock_acquire+0xaac/0xd20 [ 226.862884][ T7772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.862914][ T7772] ? __pfx__printk+0x10/0x10 [ 226.862937][ T7772] ? __might_fault+0xb0/0x130 [ 226.862977][ T7772] should_fail_ex+0x414/0x560 [ 226.863012][ T7772] _copy_from_user+0x2d/0xb0 [ 226.863037][ T7772] ___sys_sendmsg+0x158/0x2a0 [ 226.863072][ T7772] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.863138][ T7772] ? __fget_files+0x2a/0x420 [ 226.863165][ T7772] ? __fget_files+0x3a0/0x420 [ 226.863214][ T7772] __sys_sendmmsg+0x227/0x430 [ 226.863250][ T7772] ? __pfx___sys_sendmmsg+0x10/0x10 [ 226.863290][ T7772] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 226.863337][ T7772] ? ksys_write+0x1f0/0x250 [ 226.863361][ T7772] ? rcu_is_watching+0x15/0xb0 [ 226.863391][ T7772] __x64_sys_sendmmsg+0xa0/0xc0 [ 226.863423][ T7772] do_syscall_64+0xf6/0x210 [ 226.863453][ T7772] ? clear_bhb_loop+0x45/0xa0 [ 226.863478][ T7772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.863498][ T7772] RIP: 0033:0x7f9d3c38e969 [ 226.863516][ T7772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.863535][ T7772] RSP: 002b:00007f9d3d12a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 226.863558][ T7772] RAX: ffffffffffffffda RBX: 00007f9d3c5b5fa0 RCX: 00007f9d3c38e969 [ 226.863573][ T7772] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 226.863586][ T7772] RBP: 00007f9d3d12a090 R08: 0000000000000000 R09: 0000000000000000 [ 226.863599][ T7772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.863610][ T7772] R13: 0000000000000000 R14: 00007f9d3c5b5fa0 R15: 00007f9d3c6dfa28 [ 226.863641][ T7772] [ 226.864815][ T5892] IPVS: starting estimator thread 0... [ 227.145557][ T5888] usb 2-1: config index 0 descriptor too short (expected 25710, got 77) [ 227.147809][ T5831] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 227.158024][ T5888] usb 2-1: config 114 has too many interfaces: 101, using maximum allowed: 32 [ 227.175480][ T5888] usb 2-1: config 114 has an invalid descriptor of length 97, skipping remainder of the config [ 227.193948][ T5888] usb 2-1: config 114 has 0 interfaces, different from the descriptor's value: 101 [ 227.203954][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 227.244813][ T5888] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 227.256912][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.264979][ T5888] usb 2-1: Product: syz [ 227.274619][ T7776] IPVS: using max 39 ests per chain, 93600 per kthread [ 227.282872][ T5888] usb 2-1: Manufacturer: syz [ 227.288146][ T5888] usb 2-1: SerialNumber: syz [ 227.386363][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 227.396272][ T5831] usb 4-1: Using ep0 maxpacket: 8 [ 227.403554][ T5831] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 227.464457][ T5831] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 227.502007][ T5831] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.563240][ T10] usb 1-1: device descriptor read/64, error -71 [ 227.611712][ T5831] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.635268][ T5831] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 227.644911][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.856846][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 227.901510][ T5831] usb 4-1: GET_CAPABILITIES returned 0 [ 227.955128][ T5831] usbtmc 4-1:16.0: can't read capabilities [ 227.987037][ T10] usb 1-1: device descriptor read/64, error -71 [ 228.106908][ T7775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.121655][ T10] usb usb1-port1: attempt power cycle [ 228.131554][ T7775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.476254][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 228.498067][ T10] usb 1-1: device descriptor read/8, error -71 [ 228.788214][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 228.849223][ T10] usb 1-1: device descriptor read/8, error -71 [ 228.966769][ T10] usb usb1-port1: unable to enumerate USB device [ 229.680293][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 229.738237][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 229.786961][ T9] usb 3-1: can't read configurations, error -71 [ 229.821264][ T5888] usb 2-1: USB disconnect, device number 42 [ 229.898018][ T5892] usb 4-1: USB disconnect, device number 25 [ 230.120731][ T7805] loop2: detected capacity change from 0 to 7 [ 230.131872][ T7805] loop2: p1 [ 230.135417][ T7805] loop2: partition table partially beyond EOD, truncated [ 230.149905][ T7805] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 230.286272][ T5888] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 230.371068][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 230.381529][ T5892] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 230.426554][ T5888] usb 5-1: device descriptor read/64, error -71 [ 230.546486][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 230.564685][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.583121][ T5892] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 230.593023][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.612537][ T5892] usb 4-1: Product: syz [ 230.629134][ T5892] usb 4-1: Manufacturer: syz [ 230.638102][ T5892] usb 4-1: SerialNumber: syz [ 230.666960][ T5892] usb 4-1: config 0 descriptor?? [ 230.676350][ T5888] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 230.690709][ T5892] usb 4-1: bad CDC descriptors [ 230.699352][ T5890] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 230.710733][ T5892] usb 4-1: unsupported MDLM descriptors [ 230.836249][ T5888] usb 5-1: device descriptor read/64, error -71 [ 230.871002][ T5890] usb 2-1: config 0 has no interfaces? [ 230.881110][ T5890] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 230.883727][ T7834] x_tables: unsorted underflow at hook 2 [ 230.897882][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.903566][ T5893] usb 4-1: USB disconnect, device number 26 [ 230.906847][ T5890] usb 2-1: Product: syz [ 230.920686][ T5890] usb 2-1: Manufacturer: syz [ 230.927180][ T5890] usb 2-1: SerialNumber: syz [ 230.935105][ T5890] usb 2-1: config 0 descriptor?? [ 230.947251][ T5888] usb usb5-port1: attempt power cycle [ 231.006475][ T5892] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 231.036571][ T9] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 231.044421][ T9] usb usb3-port1: attempt power cycle [ 231.186226][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 231.193214][ T5892] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 231.204993][ T5892] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 231.215801][ T5892] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.225801][ T5892] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.239239][ T5892] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.248800][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.306292][ T5888] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 231.326923][ T5888] usb 5-1: device descriptor read/8, error -71 [ 231.386215][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 231.407527][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 231.415694][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.426448][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.435518][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 231.445997][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.467169][ T9] usb 3-1: config 0 descriptor?? [ 231.473279][ T5892] usb 1-1: GET_CAPABILITIES returned 0 [ 231.480872][ T5892] usbtmc 1-1:16.0: can't read capabilities [ 231.567343][ T5888] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 231.597924][ T5888] usb 5-1: device descriptor read/8, error -71 [ 231.679818][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.690334][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.706711][ T5888] usb usb5-port1: unable to enumerate USB device [ 231.806502][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.595'. [ 231.885302][ T7847] loop2: detected capacity change from 0 to 7 [ 231.894096][ T7847] loop2: p1 [ 231.897540][ T7847] loop2: partition table partially beyond EOD, truncated [ 231.904942][ T7847] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 232.014998][ T5888] IPVS: starting estimator thread 0... [ 232.059825][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 232.116402][ T7852] IPVS: using max 39 ests per chain, 93600 per kthread [ 232.536230][ T5893] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 232.714986][ T5893] usb 4-1: config 0 has no interfaces? [ 232.733725][ T5893] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 232.743163][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.751427][ T5893] usb 4-1: Product: syz [ 232.759883][ T5893] usb 4-1: Manufacturer: syz [ 232.764528][ T5893] usb 4-1: SerialNumber: syz [ 232.781362][ T5893] usb 4-1: config 0 descriptor?? [ 233.224401][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'. [ 233.241200][ T7865] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 233.332772][ T5893] usb 2-1: USB disconnect, device number 43 [ 233.616378][ T47] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 233.727252][ T5893] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 233.739710][ T5892] usb 1-1: USB disconnect, device number 34 [ 233.782060][ T47] usb 5-1: config 0 has no interfaces? [ 233.802747][ T47] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 233.829709][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.843510][ T47] usb 5-1: Product: syz [ 233.848324][ T47] usb 5-1: Manufacturer: syz [ 233.853220][ T47] usb 5-1: SerialNumber: syz [ 233.881752][ T47] usb 5-1: config 0 descriptor?? [ 233.887762][ T7833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.911786][ T5888] usb 3-1: USB disconnect, device number 28 [ 233.931735][ T5893] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 233.949565][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.968993][ T5893] usb 2-1: Product: syz [ 233.983358][ T5893] usb 2-1: Manufacturer: syz [ 233.994967][ T5893] usb 2-1: SerialNumber: syz [ 234.028319][ T5893] usb 2-1: config 0 descriptor?? [ 234.028583][ T7874] input: syz0 as /devices/virtual/input/input43 [ 234.118939][ T7868] AppArmor: change_hat: Invalid input '0x0000000' [ 234.587630][ T5893] usb 2-1: Firmware version (0.0) predates our first public release. [ 234.621437][ T5893] usb 2-1: Please update to version 0.2 or newer [ 234.683297][ T5893] usb 2-1: USB disconnect, device number 44 [ 234.866692][ T47] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 234.906255][ T5888] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 235.006362][ T47] usb 3-1: device descriptor read/64, error -71 [ 235.066269][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 235.074228][ T5888] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 235.083717][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.096853][ T5888] usb 1-1: config 0 descriptor?? [ 235.246205][ T47] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 235.306944][ T5888] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 235.349731][ T5893] usb 4-1: USB disconnect, device number 27 [ 235.351015][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 235.382337][ T5888] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 235.401709][ T5888] usb 1-1: media controller created [ 235.418766][ T47] usb 3-1: device descriptor read/64, error -71 [ 235.462133][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.508400][ T7879] openvswitch: netlink: Duplicate or invalid key (type 0). [ 235.539487][ T7879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.552655][ T47] usb usb3-port1: attempt power cycle [ 235.577278][ T5888] az6027: usb out operation failed. (-71) [ 235.585417][ T5888] az6027: usb out operation failed. (-71) [ 235.591451][ T5888] stb0899_attach: Driver disabled by Kconfig [ 235.605510][ T5888] az6027: no front-end attached [ 235.605510][ T5888] [ 235.623189][ T5888] az6027: usb out operation failed. (-71) [ 235.636604][ T5888] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 235.649312][ T5888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input44 [ 235.663604][ T5888] dvb-usb: schedule remote query interval to 400 msecs. [ 235.670974][ T5888] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 235.690861][ T5888] usb 1-1: USB disconnect, device number 35 [ 235.767814][ T5888] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 235.908598][ T47] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 235.946860][ T47] usb 3-1: device descriptor read/8, error -71 [ 236.196507][ T47] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 236.237085][ T47] usb 3-1: device descriptor read/8, error -71 [ 236.346287][ T5893] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 236.368141][ T47] usb usb3-port1: unable to enumerate USB device [ 236.409941][ T5888] usb 5-1: USB disconnect, device number 43 [ 236.527789][ T7914] x_tables: unsorted underflow at hook 2 [ 236.549870][ T5893] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 236.576261][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.590653][ T5893] usb 2-1: config 0 descriptor?? [ 236.907391][ T5888] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 236.916817][ T5831] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 237.066384][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 237.074170][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.084695][ T5888] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 237.093910][ T5888] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 237.098701][ T5831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.103329][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.120749][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 237.126461][ T5888] usb 5-1: config 0 descriptor?? [ 237.145251][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 237.155730][ T5831] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 237.170810][ T5831] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 237.180716][ T5831] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 237.188950][ T5831] usb 4-1: Manufacturer: syz [ 237.196885][ T5831] usb 4-1: config 0 descriptor?? [ 237.382264][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.619'. [ 237.523227][ T5892] IPVS: starting estimator thread 0... [ 237.548506][ T5831] rc_core: IR keymap rc-hauppauge not found [ 237.585258][ T5831] Registered IR keymap rc-empty [ 237.604737][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.636242][ T7925] IPVS: using max 28 ests per chain, 67200 per kthread [ 237.676406][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.739762][ T5893] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 237.749925][ T5831] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 237.798775][ T5893] usb 2-1: USB disconnect, device number 45 [ 237.815584][ T5831] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input45 [ 237.873429][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.916513][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.951662][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.999125][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.047349][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.085354][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.131782][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.177536][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.207104][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.241847][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.340895][ T5831] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 238.365694][ T7935] netlink: 36 bytes leftover after parsing attributes in process `syz.2.624'. [ 238.452109][ T5831] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 238.507917][ T5831] usb 4-1: USB disconnect, device number 28 [ 238.869195][ T7916] syz.3.618 (7916) used greatest stack depth: 20232 bytes left [ 239.186293][ T7946] netlink: 32 bytes leftover after parsing attributes in process `syz.3.627'. [ 239.546366][ T7917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.590799][ T5888] usb 5-1: USB disconnect, device number 44 [ 240.743287][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.631'. [ 241.746192][ T47] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 241.896380][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 241.967124][ T47] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 242.027029][ T47] usb 3-1: config 0 has no interface number 0 [ 242.033255][ T47] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 242.044313][ T47] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 242.055142][ T47] usb 3-1: config 0 interface 41 has no altsetting 0 [ 242.066971][ T47] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 242.121709][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.156521][ T47] usb 3-1: Product: syz [ 242.161079][ T47] usb 3-1: Manufacturer: syz [ 242.165860][ T47] usb 3-1: SerialNumber: syz [ 242.278515][ T47] usb 3-1: config 0 descriptor?? [ 242.306748][ T5892] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 242.315013][ T7971] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 242.332882][ T7971] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 242.506363][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 242.517758][ T5892] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 242.543963][ T5892] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 242.640318][ T5892] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.746256][ T5892] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.770663][ T5892] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 242.790351][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.799172][ T7968] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 242.811305][ T7968] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 243.032824][ T5892] usb 1-1: GET_CAPABILITIES returned 0 [ 243.039820][ T5892] usbtmc 1-1:16.0: can't read capabilities [ 243.241939][ T7981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.280147][ T7981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.392930][ T47] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 243.438151][ T5831] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 243.598625][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 243.611297][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 243.626178][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 243.647139][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.661707][ T5831] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.676660][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.710412][ T5831] usb 5-1: config 0 descriptor?? [ 244.485941][ T7999] netlink: 32 bytes leftover after parsing attributes in process `syz.1.640'. [ 244.862016][ T47] dm9601 3-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 244.876988][ T47] sr9700 3-1:0.41: probe with driver sr9700 failed with error -71 [ 245.091999][ T47] usb 3-1: USB disconnect, device number 33 [ 245.180404][ T5893] usb 1-1: USB disconnect, device number 36 [ 245.435583][ T8013] Unknown options in mask 5 [ 245.786420][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 245.943097][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 245.962429][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 245.981589][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 245.992752][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.004191][ T9] usb 3-1: Product: syz [ 246.010322][ T9] usb 3-1: Manufacturer: syz [ 246.015563][ T9] usb 3-1: SerialNumber: syz [ 246.055575][ T9] usb 3-1: config 0 descriptor?? [ 246.091103][ T9] ir_toy 3-1:0.0: required endpoints not found [ 246.198593][ T5831] usbhid 5-1:0.0: can't add hid device: -71 [ 246.219102][ T5831] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 246.294330][ T5831] usb 5-1: USB disconnect, device number 45 [ 246.716949][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 246.786665][ T5831] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 246.882613][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 246.905998][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.942149][ T9] usb 4-1: Product: syz [ 246.947644][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 246.954988][ T5831] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 246.963802][ T5831] usb 5-1: config 0 has no interface number 0 [ 246.984831][ T9] usb 4-1: Manufacturer: syz [ 246.984858][ T5831] usb 5-1: config 0 interface 12 has no altsetting 0 [ 247.010989][ T9] usb 4-1: SerialNumber: syz [ 247.022201][ T5831] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 247.031982][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.065085][ T5831] usb 5-1: Product: syz [ 247.082070][ T5831] usb 5-1: Manufacturer: syz [ 247.082522][ T9] usb 4-1: config 0 descriptor?? [ 247.108405][ T5831] usb 5-1: SerialNumber: syz [ 247.142948][ T5831] usb 5-1: config 0 descriptor?? [ 247.156307][ T5888] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 247.316218][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 247.333343][ T5888] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 247.349053][ T5888] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 247.388072][ T5888] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.412491][ T5888] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.431906][ T5888] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 247.444378][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.674786][ T5888] usb 2-1: GET_CAPABILITIES returned 0 [ 247.685997][ T9] usb 4-1: Firmware version (0.0) predates our first public release. [ 247.709775][ T5888] usbtmc 2-1:16.0: can't read capabilities [ 247.715944][ T9] usb 4-1: Please update to version 0.2 or newer [ 247.790106][ T9] usb 4-1: USB disconnect, device number 29 [ 247.813704][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 247.821251][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 247.828725][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 247.840742][ T5831] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 247.853710][ T5831] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 247.897789][ T5831] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 247.907471][ T8039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.911109][ T5831] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 247.940459][ T8039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.959225][ T5831] usb 5-1: USB disconnect, device number 46 [ 248.432364][ T5831] usb 3-1: USB disconnect, device number 34 [ 248.545253][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'. [ 248.554649][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 248.718955][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 248.726320][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.737381][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 248.750013][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.769807][ T9] usb 4-1: config 0 descriptor?? [ 248.781229][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 249.157087][ T5888] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 249.216246][ T5892] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 249.310897][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 249.321009][ T5888] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.334972][ T5888] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.351846][ T5888] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 249.364668][ T5888] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.374146][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 249.386781][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.395893][ T5888] usb 3-1: Product: syz [ 249.401657][ T5888] usb 3-1: Manufacturer: syz [ 249.407130][ T5888] usb 3-1: SerialNumber: syz [ 249.413485][ T5892] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 249.423024][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.436445][ T5892] usb 1-1: Product: syz [ 249.447420][ T5892] usb 1-1: Manufacturer: syz [ 249.452686][ T5892] usb 1-1: SerialNumber: syz [ 249.461927][ T5892] usb 1-1: config 0 descriptor?? [ 249.471953][ T5892] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 249.660768][ T5888] usb 3-1: 0:2 : does not exist [ 249.670856][ T5888] usb 3-1: 0:8 : does not exist [ 249.706660][ T5888] usb 3-1: USB disconnect, device number 35 [ 249.865173][ T5956] usb 2-1: USB disconnect, device number 46 [ 249.899979][ T7209] udevd[7209]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.210392][ T9] gspca_vc032x: reg_w err -71 [ 250.215271][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 250.251499][ T9] usb 4-1: USB disconnect, device number 30 [ 250.315255][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.676'. [ 251.142561][ T8106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.677'. [ 251.688984][ T8129] loop2: detected capacity change from 0 to 7 [ 251.700766][ T8129] loop2: p1 [ 251.704057][ T8129] loop2: partition table partially beyond EOD, truncated [ 251.741040][ T8129] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 251.754156][ T8131] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 251.967036][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 252.107071][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 252.166260][ T5959] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 252.266160][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 252.284481][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.295942][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 252.305381][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.317495][ T9] usb 2-1: config 0 descriptor?? [ 252.336262][ T5959] usb 5-1: Using ep0 maxpacket: 16 [ 252.353156][ T5959] usb 5-1: config 5 has an invalid interface number: 206 but max is 0 [ 252.368390][ T5959] usb 5-1: config 5 has no interface number 0 [ 252.380850][ T5959] usb 5-1: config 5 interface 206 has no altsetting 0 [ 252.400769][ T5959] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44 [ 252.415582][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.434048][ T5959] usb 5-1: Product: syz [ 252.439983][ T5959] usb 5-1: Manufacturer: syz [ 252.453069][ T5959] usb 5-1: SerialNumber: syz [ 252.536721][ T9] mcp2221 0003:04D8:00DD.000B: collection stack underflow [ 252.544225][ T9] mcp2221 0003:04D8:00DD.000B: item 0 4 0 12 parsing failed [ 252.553551][ T9] mcp2221 0003:04D8:00DD.000B: can't parse reports [ 252.562504][ T9] mcp2221 0003:04D8:00DD.000B: probe with driver mcp2221 failed with error -22 [ 252.721068][ T5893] usb 1-1: USB disconnect, device number 37 [ 252.818551][ T5959] usb_ehset_test 5-1:5.206: probe with driver usb_ehset_test failed with error -32 [ 252.835733][ T5959] usb 5-1: USB disconnect, device number 47 [ 254.146284][ T5831] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 254.326459][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 254.333868][ T5831] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 254.342787][ T5831] usb 3-1: config 0 has no interface number 0 [ 254.352235][ T5831] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 254.363310][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.371794][ T5831] usb 3-1: Product: syz [ 254.376244][ T5831] usb 3-1: Manufacturer: syz [ 254.381060][ T5831] usb 3-1: SerialNumber: syz [ 254.399520][ T5831] usb 3-1: config 0 descriptor?? [ 254.413046][ T5831] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 254.880183][ T5959] usb 2-1: USB disconnect, device number 47 [ 255.336377][ T5893] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 255.488869][ T5893] usb 2-1: config 252 has an invalid interface number: 101 but max is 0 [ 255.520205][ T5893] usb 2-1: config 252 has no interface number 0 [ 255.534452][ T5893] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 255.554337][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.597676][ T5893] pvrusb2: Hardware description: Terratec Grabster AV400 [ 255.613515][ T5893] pvrusb2: ********** [ 255.623794][ T5893] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 255.635436][ T5831] gspca_spca1528: reg_r err -32 [ 255.645260][ T5831] spca1528 3-1:0.1: probe with driver spca1528 failed with error -32 [ 255.653664][ T5893] pvrusb2: Important functionality might not be entirely working. [ 255.678600][ T5893] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 255.706172][ T5893] pvrusb2: ********** [ 255.796044][ T2343] pvrusb2: Invalid write control endpoint [ 255.825928][ T5893] usb 3-1: USB disconnect, device number 36 [ 255.914867][ T5959] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 255.968563][ T2343] pvrusb2: Invalid write control endpoint [ 256.008651][ T9] usb 2-1: USB disconnect, device number 48 [ 256.069351][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.075964][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.108482][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 256.116679][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 256.133118][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 256.136873][ T5959] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 256.154803][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.167698][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 256.174122][ T5959] usb 4-1: config 0 descriptor?? [ 256.178140][ T2343] pvrusb2: Device being rendered inoperable [ 256.194018][ T8181] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 256.194844][ T2343] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 256.216230][ T2343] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 256.232957][ T2343] pvrusb2: Attached sub-driver cx25840 [ 256.247055][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 256.258833][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 256.486401][ T5893] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 256.629773][ T5893] usb 1-1: device descriptor read/64, error -71 [ 256.631013][ T5959] usbhid 4-1:0.0: can't add hid device: -71 [ 256.643466][ T5959] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 256.656774][ T5959] usb 4-1: USB disconnect, device number 31 [ 256.766266][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 256.886776][ T5893] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 256.969504][ T9] usb 3-1: device descriptor read/64, error -71 [ 257.026190][ T5893] usb 1-1: device descriptor read/64, error -71 [ 257.136773][ T5893] usb usb1-port1: attempt power cycle [ 257.226722][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 257.376456][ T5888] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 257.384147][ T9] usb 3-1: device descriptor read/64, error -71 [ 257.486392][ T5893] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 257.496521][ T9] usb usb3-port1: attempt power cycle [ 257.517270][ T5893] usb 1-1: device descriptor read/8, error -71 [ 257.526422][ T5890] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 257.537829][ T5888] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 257.594201][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.616440][ T5888] usb 5-1: config 0 descriptor?? [ 257.649559][ T5888] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 257.676293][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 257.700306][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.716222][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.734653][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 257.756210][ T5890] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 257.765919][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.776283][ T5893] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 257.798349][ T5890] usb 4-1: config 0 descriptor?? [ 257.811779][ T5893] usb 1-1: device descriptor read/8, error -71 [ 257.836366][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.846895][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.856422][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 257.869913][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.886717][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.890205][ T9] usb 3-1: device descriptor read/8, error -71 [ 257.938848][ T5893] usb usb1-port1: unable to enumerate USB device [ 257.967485][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.977275][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.150060][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 258.177286][ T9] usb 3-1: device descriptor read/8, error -71 [ 258.210681][ T5890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 258.218378][ T5890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 258.225665][ T5890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 258.233389][ T5890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 258.240849][ T5890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 258.255069][ T5890] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000C/input/input46 [ 258.274762][ T5890] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 258.287237][ T9] usb usb3-port1: unable to enumerate USB device [ 258.412099][ T5893] usb 4-1: USB disconnect, device number 32 [ 259.003266][ T8210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.708'. [ 259.018568][ T8210] tipc: Started in network mode [ 259.023654][ T8210] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 259.034152][ T8210] tipc: Enabled bearer , priority 10 [ 259.464029][ T8222] netlink: 'syz.0.712': attribute type 13 has an invalid length. [ 259.670066][ T8222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.688337][ T5888] gp8psk: usb in 128 operation failed. [ 259.704665][ T5888] gp8psk: usb in 137 operation failed. [ 259.715891][ T5888] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 259.746051][ T5888] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 259.986390][ T5831] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 260.139890][ T5890] usb 5-1: USB disconnect, device number 48 [ 260.150326][ T5831] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 260.175487][ T5831] usb 4-1: config 0 has no interface number 0 [ 260.184328][ T5893] tipc: Node number set to 1 [ 260.193642][ T5831] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 260.215599][ T5831] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 260.232274][ T5831] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 260.244892][ T5831] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 260.268915][ T5831] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 260.284947][ T5831] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 260.451240][ T5831] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 260.471207][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.503395][ T5831] usb 4-1: config 0 descriptor?? [ 260.520482][ T8228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 260.531033][ T8228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 260.551683][ T5831] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 261.144337][ T5890] usb 4-1: USB disconnect, device number 33 [ 261.201266][ T5890] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 261.596244][ T5888] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 261.938899][ T5888] usb 3-1: config 0 has an invalid interface number: 114 but max is 0 [ 261.986396][ T5888] usb 3-1: config 0 has no interface number 0 [ 262.029786][ T5888] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=13.67 [ 262.052778][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.087832][ T5888] usb 3-1: Product: syz [ 262.105294][ T5888] usb 3-1: Manufacturer: syz [ 262.136314][ T5888] usb 3-1: SerialNumber: syz [ 262.163390][ T5888] usb 3-1: config 0 descriptor?? [ 262.436944][ T8251] netlink: 80 bytes leftover after parsing attributes in process `syz.2.721'. [ 262.467305][ T5888] cdc_subset 3-1:0.114: probe with driver cdc_subset failed with error -22 [ 262.561661][ T8265] loop2: detected capacity change from 0 to 7 [ 262.571833][ T7209] loop2: p1 [ 262.575079][ T7209] loop2: partition table partially beyond EOD, truncated [ 262.616987][ T7209] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 262.742514][ T5831] usb 3-1: USB disconnect, device number 41 [ 262.806640][ T8265] loop2: p1 [ 262.809935][ T8265] loop2: partition table partially beyond EOD, truncated [ 262.858209][ T8265] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 262.929941][ T8281] capability: warning: `syz.0.731' uses 32-bit capabilities (legacy support in use) [ 263.345628][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.733'. [ 263.391474][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 263.708263][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 263.956186][ T5888] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 264.106325][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 264.130983][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 264.149501][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 264.199178][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 264.231554][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 264.275765][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 264.332890][ T5888] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 264.346840][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.381726][ T5888] usb 4-1: Product: syz [ 264.401420][ T5888] usb 4-1: Manufacturer: syz [ 264.428853][ T5888] usb 4-1: SerialNumber: syz [ 264.455211][ T5888] usb 4-1: config 0 descriptor?? [ 265.073890][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 265.082246][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 265.290635][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.306377][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.321695][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.336727][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.347099][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.373828][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.380036][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 265.390657][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.408657][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.415197][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.424528][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.436714][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.449674][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.464267][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.479242][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.494717][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.514038][ T5888] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.521364][ T5888] input input47: Timeout waiting for response from device. [ 265.540967][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 265.550423][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.564402][ T5888] usb 4-1: USB disconnect, device number 34 [ 265.570459][ T9] usb 1-1: Product: syz [ 265.579906][ T9] usb 1-1: Manufacturer: syz [ 265.585636][ T9] usb 1-1: SerialNumber: syz [ 265.628556][ T9] usb 1-1: config 0 descriptor?? [ 266.098645][ T9] usb 1-1: Firmware version (0.0) predates our first public release. [ 266.269161][ T9] usb 1-1: Please update to version 0.2 or newer [ 266.284166][ T30] audit: type=1326 audit(1745582252.262:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833a98e969 code=0x7ffc0000 [ 266.366367][ T30] audit: type=1326 audit(1745582252.262:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833a98e969 code=0x7ffc0000 [ 266.391594][ T30] audit: type=1326 audit(1745582252.262:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f833a98e969 code=0x7ffc0000 [ 266.416703][ T9] usb 1-1: USB disconnect, device number 42 [ 266.417918][ T30] audit: type=1326 audit(1745582252.262:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833a98e969 code=0x7ffc0000 [ 266.445552][ T30] audit: type=1326 audit(1745582252.262:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833a98e969 code=0x7ffc0000 [ 266.469405][ T30] audit: type=1326 audit(1745582252.262:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f833a98e969 code=0x7ffc0000 [ 266.498777][ T30] audit: type=1326 audit(1745582252.262:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833a98e969 code=0x7ffc0000 [ 266.526275][ T5831] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 266.551893][ T30] audit: type=1326 audit(1745582252.262:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833a98e969 code=0x7ffc0000 [ 266.612309][ T30] audit: type=1326 audit(1745582252.262:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f833a98e969 code=0x7ffc0000 [ 266.680512][ T30] audit: type=1326 audit(1745582252.262:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833a98e969 code=0x7ffc0000 [ 266.778779][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 266.795848][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 266.821508][ T5831] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 266.841426][ T5831] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.851729][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.042317][ T5831] usb 2-1: config 0 descriptor?? [ 267.081853][ T8329] loop2: detected capacity change from 0 to 7 [ 267.097137][ T8329] loop2: p1 [ 267.100548][ T8329] loop2: partition table partially beyond EOD, truncated [ 267.132631][ T8329] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 267.296495][ T5956] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 267.538474][ T5831] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 267.577237][ T5831] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 267.605674][ T7209] udevd[7209]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 267.653893][ T5956] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 267.668000][ T5956] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 267.742692][ T5956] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 267.764927][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.805317][ T5956] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.989207][ T5956] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 268.414562][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.903094][ T8353] dccp_invalid_packet: invalid packet type [ 269.685680][ T9] usb 2-1: USB disconnect, device number 49 [ 270.247885][ T5831] usb 5-1: USB disconnect, device number 49 [ 270.413372][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.761'. [ 270.717163][ T5831] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 270.925628][ T5831] usb 5-1: Using ep0 maxpacket: 16 [ 270.947751][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 270.964906][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 270.989185][ T5831] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 271.002861][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.011649][ T5831] usb 5-1: Product: syz [ 271.016021][ T5831] usb 5-1: Manufacturer: syz [ 271.036371][ T5956] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 271.059856][ T5831] usb 5-1: SerialNumber: syz [ 271.113028][ T5831] usb 5-1: config 0 descriptor?? [ 271.131401][ T5831] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 271.144496][ T5831] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 271.201142][ T5956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.211645][ T5956] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.269491][ T5956] usb 3-1: New USB device found, idVendor=06f3, idProduct=0755, bcdDevice= 0.00 [ 271.360026][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.466047][ T5956] usb 3-1: config 0 descriptor?? [ 271.516044][ T5956] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 271.853614][ T5831] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 271.866500][ T5831] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 272.488579][ T5831] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 272.513128][ T5831] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 272.548384][ T5831] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 272.571378][ T5831] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 272.986925][ T5831] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 272.999569][ T5831] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 273.034387][ T5831] usb 5-1: USB disconnect, device number 50 [ 273.408395][ T5893] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 273.476768][ T5831] usb 3-1: USB disconnect, device number 42 [ 273.576353][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 273.583703][ T8419] netlink: 'syz.3.771': attribute type 6 has an invalid length. [ 273.591675][ T8419] IPv6: NLM_F_CREATE should be specified when creating new route [ 273.613169][ T5893] usb 2-1: config 0 has no interfaces? [ 273.619417][ T5893] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 273.654637][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.724818][ T5893] usb 2-1: config 0 descriptor?? [ 273.927382][ T9] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 273.940577][ T8414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.960592][ T8414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.965862][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.778'. [ 273.985152][ T5893] usb 2-1: USB disconnect, device number 50 [ 273.994065][ T8434] loop2: detected capacity change from 0 to 7 [ 274.004776][ T8434] loop2: p1 [ 274.008499][ T8434] loop2: partition table partially beyond EOD, truncated [ 274.034877][ T8434] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 274.109283][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 274.130867][ T9] usb 4-1: config 0 has no interface number 0 [ 274.138936][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 274.151508][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 274.176640][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 274.196882][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 274.301071][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 274.312283][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 274.326510][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 274.335690][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.415186][ T9] usb 4-1: config 0 descriptor?? [ 274.437626][ T8422] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 274.445366][ T8422] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 274.490576][ T9] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 274.673612][ T8422] ldusb 4-1:0.55: Write buffer overflow, 12 bytes dropped [ 274.685961][ T9] usb 4-1: USB disconnect, device number 35 [ 274.824533][ T9] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 275.116293][ T5893] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 275.296360][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 275.331481][ T5893] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.346347][ T5893] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.402734][ T5893] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 275.448836][ T5893] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.465999][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.504146][ T5893] usb 3-1: Product: syz [ 275.515123][ T5893] usb 3-1: Manufacturer: syz [ 275.523459][ T5893] usb 3-1: SerialNumber: syz [ 275.676442][ T9] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 275.851605][ T9] usb 2-1: device descriptor read/64, error -71 [ 275.907338][ T5893] usb 3-1: 0:2 : does not exist [ 275.912386][ T5893] usb 3-1: 0:8 : does not exist [ 275.932807][ T5893] usb 3-1: USB disconnect, device number 43 [ 276.126584][ T9] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 276.169161][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.278669][ T9] usb 2-1: device descriptor read/64, error -71 [ 276.363964][ T47] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 276.407618][ T9] usb usb2-port1: attempt power cycle [ 276.474075][ T8483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.794'. [ 276.539235][ T47] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.541496][ T47] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 276.541518][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.541533][ T47] usb 1-1: Product: syz [ 276.541544][ T47] usb 1-1: Manufacturer: syz [ 276.541555][ T47] usb 1-1: SerialNumber: syz [ 276.758760][ T47] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 276.826464][ T9] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 276.847152][ T9] usb 2-1: device descriptor read/8, error -71 [ 276.972970][ T47] usb 1-1: USB disconnect, device number 43 [ 276.982215][ T47] usblp0: removed [ 277.086765][ T9] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 277.127766][ T9] usb 2-1: device descriptor read/8, error -71 [ 277.246840][ T9] usb usb2-port1: unable to enumerate USB device [ 277.264336][ T8496] fuse: Bad value for 'fd' [ 277.351428][ T8500] loop2: detected capacity change from 0 to 7 [ 277.359120][ T8500] loop2: p1 [ 277.362851][ T8500] loop2: partition table partially beyond EOD, truncated [ 277.370819][ T8500] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 277.382910][ T8501] FAULT_INJECTION: forcing a failure. [ 277.382910][ T8501] name failslab, interval 1, probability 0, space 0, times 1 [ 277.400809][ T8501] CPU: 1 UID: 0 PID: 8501 Comm: syz.3.800 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 277.400841][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 277.400876][ T8501] Call Trace: [ 277.400885][ T8501] [ 277.400896][ T8501] dump_stack_lvl+0x189/0x250 [ 277.400940][ T8501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.400971][ T8501] ? __pfx__printk+0x10/0x10 [ 277.400997][ T8501] ? __pfx___might_resched+0x10/0x10 [ 277.401018][ T8501] ? fs_reclaim_acquire+0x7d/0x100 [ 277.401055][ T8501] should_fail_ex+0x414/0x560 [ 277.401089][ T8501] should_failslab+0xa8/0x100 [ 277.401119][ T8501] __kmalloc_noprof+0xcb/0x4f0 [ 277.401145][ T8501] ? tomoyo_encode+0x28b/0x550 [ 277.401174][ T8501] tomoyo_encode+0x28b/0x550 [ 277.401204][ T8501] tomoyo_realpath_from_path+0x58d/0x5d0 [ 277.401231][ T8501] ? tomoyo_domain+0xda/0x130 [ 277.401261][ T8501] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 277.401281][ T8501] tomoyo_path_number_perm+0x1e8/0x5a0 [ 277.401303][ T8501] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 277.401353][ T8501] ? __lock_acquire+0xaac/0xd20 [ 277.401402][ T8501] ? __fget_files+0x2a/0x420 [ 277.401433][ T8501] ? __fget_files+0x3a0/0x420 [ 277.401458][ T8501] ? __fget_files+0x2a/0x420 [ 277.401489][ T8501] security_file_ioctl+0xcb/0x2d0 [ 277.401522][ T8501] __se_sys_ioctl+0x47/0x170 [ 277.401548][ T8501] do_syscall_64+0xf6/0x210 [ 277.401578][ T8501] ? clear_bhb_loop+0x45/0xa0 [ 277.401604][ T8501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.401624][ T8501] RIP: 0033:0x7fc24cd8e969 [ 277.401643][ T8501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.401663][ T8501] RSP: 002b:00007fc24db4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.401685][ T8501] RAX: ffffffffffffffda RBX: 00007fc24cfb6080 RCX: 00007fc24cd8e969 [ 277.401700][ T8501] RDX: 0000000000000000 RSI: 00000000c020aa07 RDI: 0000000000000003 [ 277.401713][ T8501] RBP: 00007fc24db4e090 R08: 0000000000000000 R09: 0000000000000000 [ 277.401725][ T8501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.401737][ T8501] R13: 0000000000000001 R14: 00007fc24cfb6080 R15: 00007fc24d0dfa28 [ 277.401768][ T8501] [ 277.401790][ T8501] ERROR: Out of memory at tomoyo_realpath_from_path. [ 277.538885][ T9] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 277.668748][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 277.858059][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 277.866565][ T9] usb 3-1: config 0 has no interface number 0 [ 277.872858][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 277.883792][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 277.895008][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 277.906758][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 277.927787][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 277.943017][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 277.963262][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 277.986401][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.004692][ T9] usb 3-1: config 0 descriptor?? [ 278.012509][ T8494] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 278.020326][ T8494] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 278.037582][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 278.077071][ T8511] netlink: 'syz.0.804': attribute type 10 has an invalid length. [ 278.092333][ T8511] team0: Device ipvlan1 failed to register rx_handler [ 278.254826][ T8494] ldusb 3-1:0.55: Write buffer overflow, 12 bytes dropped [ 278.277498][ T47] usb 3-1: USB disconnect, device number 44 [ 278.295325][ T47] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 278.987441][ T8533] fuse: Bad value for 'fd' [ 279.271408][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.812'. [ 279.446288][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 279.659676][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 279.678500][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 279.691924][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.773839][ T8548] FAULT_INJECTION: forcing a failure. [ 279.773839][ T8548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.803175][ T9] usb 3-1: config 0 descriptor?? [ 279.814350][ T8548] CPU: 1 UID: 0 PID: 8548 Comm: syz.1.817 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 279.814372][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.814381][ T8548] Call Trace: [ 279.814388][ T8548] [ 279.814395][ T8548] dump_stack_lvl+0x189/0x250 [ 279.814427][ T8548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.814450][ T8548] ? __pfx__printk+0x10/0x10 [ 279.814475][ T8548] should_fail_ex+0x414/0x560 [ 279.814501][ T8548] _copy_to_user+0x31/0xb0 [ 279.814528][ T8548] simple_read_from_buffer+0xe1/0x170 [ 279.814552][ T8548] proc_fail_nth_read+0x1df/0x250 [ 279.814577][ T8548] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 279.814601][ T8548] ? rw_verify_area+0x258/0x650 [ 279.814618][ T8548] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 279.814641][ T8548] vfs_read+0x1fd/0x980 [ 279.814661][ T8548] ? __pfx___mutex_lock+0x10/0x10 [ 279.814683][ T8548] ? __pfx_vfs_read+0x10/0x10 [ 279.814701][ T8548] ? __fget_files+0x2a/0x420 [ 279.814724][ T8548] ? __fget_files+0x3a0/0x420 [ 279.814743][ T8548] ? __fget_files+0x2a/0x420 [ 279.814769][ T8548] ksys_read+0x145/0x250 [ 279.814787][ T8548] ? __fget_files+0x2a/0x420 [ 279.814807][ T8548] ? __pfx_ksys_read+0x10/0x10 [ 279.814827][ T8548] ? do_syscall_64+0xba/0x210 [ 279.814851][ T8548] do_syscall_64+0xf6/0x210 [ 279.814870][ T8548] ? clear_bhb_loop+0x45/0xa0 [ 279.814889][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.814903][ T8548] RIP: 0033:0x7f833a98d37c [ 279.814917][ T8548] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 279.814930][ T8548] RSP: 002b:00007f833b757030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 279.814946][ T8548] RAX: ffffffffffffffda RBX: 00007f833abb6080 RCX: 00007f833a98d37c [ 279.814957][ T8548] RDX: 000000000000000f RSI: 00007f833b7570a0 RDI: 0000000000000004 [ 279.814965][ T8548] RBP: 00007f833b757090 R08: 0000000000000000 R09: 0000000000000000 [ 279.814974][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.814983][ T8548] R13: 0000000000000001 R14: 00007f833abb6080 R15: 00007f833acdfa28 [ 279.815005][ T8548] [ 280.032136][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.080122][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 280.377003][ T9] usb 3-1: Detected FT2233HP [ 280.386022][ T8536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.394697][ T47] IPVS: starting estimator thread 0... [ 280.454395][ T8536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.496620][ T8554] IPVS: using max 38 ests per chain, 91200 per kthread [ 280.591931][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 280.605958][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 280.655829][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 280.723208][ T9] usb 3-1: USB disconnect, device number 45 [ 280.747089][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 280.805698][ T9] ftdi_sio 3-1:0.0: device disconnected [ 280.926348][ T47] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 280.957200][ T8562] fuse: Bad value for 'fd' [ 281.089743][ T47] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 281.102208][ T47] usb 5-1: config 0 has no interface number 0 [ 281.122015][ T47] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 281.184593][ T47] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 281.246351][ T47] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 281.286568][ T5831] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 281.296532][ T47] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 281.326319][ T47] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 281.357568][ T47] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 281.396261][ T47] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 281.425796][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.458467][ T5831] usb 1-1: unable to get BOS descriptor or descriptor too short [ 281.466270][ T5956] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 281.493724][ T5831] usb 1-1: not running at top speed; connect to a high speed hub [ 281.504048][ T47] usb 5-1: config 0 descriptor?? [ 281.523717][ T8558] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 281.533052][ T5831] usb 1-1: config 0 has an invalid interface number: 93 but max is 0 [ 281.546541][ T8558] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 281.556395][ T5831] usb 1-1: config 0 has no interface number 0 [ 281.562911][ T5831] usb 1-1: config 0 interface 93 has no altsetting 0 [ 281.573335][ T47] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 281.585705][ T5831] usb 1-1: New USB device found, idVendor=2040, idProduct=721e, bcdDevice=5e.2b [ 281.601674][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.619312][ T5831] usb 1-1: Product:  [ 281.623839][ T5831] usb 1-1: Manufacturer: о [ 281.628810][ T5831] usb 1-1: SerialNumber: 皟ّඌ㨬㝷▞䝚㙊硣篷ꢱꍣꀞꏥ冀觼ຸ셚謞쵈海卯ꅥ듶鯒∀ᗲᔃᷜ閵ቄ駐밧ힹ﹕櫳꾐Ɪ햀鬳鄍ก⋆盐妓㛘⹕าꂏ骰깊얗滨듕堡☢⦿⟰␍텍䃷 [ 281.705962][ T5956] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 281.715490][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 281.735873][ T5831] usb 1-1: config 0 descriptor?? [ 281.741442][ T5956] usb 2-1: Product: syz [ 281.796178][ T8558] ldusb 5-1:0.55: Write buffer overflow, 12 bytes dropped [ 281.806231][ T47] usb 5-1: USB disconnect, device number 51 [ 281.831518][ T47] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 281.854964][ T5956] usb 2-1: config 0 descriptor?? [ 281.872985][ T5956] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 281.906234][ T5956] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 282.052420][ T8564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.062677][ T8564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.101014][ T5831] usb 1-1: unknown interface protocol 0x1a, assuming v1 [ 282.118988][ T47] usb 2-1: USB disconnect, device number 55 [ 282.135261][ T5831] usb 1-1: cannot find UAC_HEADER [ 282.141135][ T47] ftdi_sio 2-1:0.0: device disconnected [ 282.209979][ T5831] snd-usb-audio 1-1:0.93: probe with driver snd-usb-audio failed with error -22 [ 282.224981][ T5831] usb 1-1: USB disconnect, device number 44 [ 282.487613][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.93/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.003880][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 283.003937][ T30] audit: type=1326 audit(1745582268.972:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24cd8e969 code=0x7ffc0000 [ 283.160803][ T30] audit: type=1326 audit(1745582268.972:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24cd8e969 code=0x7ffc0000 [ 283.492368][ T30] audit: type=1326 audit(1745582268.982:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fc24cd8e969 code=0x7ffc0000 [ 283.598757][ T30] audit: type=1326 audit(1745582268.982:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24cd8e969 code=0x7ffc0000 [ 283.626546][ T30] audit: type=1326 audit(1745582268.982:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24cd8e969 code=0x7ffc0000 [ 283.626718][ T8601] input: syz1 as /devices/virtual/input/input49 [ 283.649277][ T30] audit: type=1326 audit(1745582268.982:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fc24cd8e969 code=0x7ffc0000 [ 283.677540][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.693290][ T30] audit: type=1326 audit(1745582269.292:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24cd8e969 code=0x7ffc0000 [ 283.722361][ T30] audit: type=1326 audit(1745582269.292:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24cd8e969 code=0x7ffc0000 [ 283.744580][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.089925][ T5888] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 284.248847][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.836'. [ 284.656127][ T5888] usb 1-1: config index 0 descriptor too short (expected 25710, got 77) [ 284.695031][ T5888] usb 1-1: config 114 has too many interfaces: 101, using maximum allowed: 32 [ 284.729680][ T5888] usb 1-1: config 114 has an invalid descriptor of length 97, skipping remainder of the config [ 284.758904][ T5888] usb 1-1: config 114 has 0 interfaces, different from the descriptor's value: 101 [ 284.814792][ T5888] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 284.927727][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.945205][ T5888] usb 1-1: Product: syz [ 285.006509][ T5888] usb 1-1: Manufacturer: syz [ 285.011288][ T5888] usb 1-1: SerialNumber: syz [ 285.206449][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 285.376586][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 285.388291][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.401837][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.412688][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 285.430657][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.474747][ T9] usb 3-1: config 0 descriptor?? [ 285.490964][ T9] hub 3-1:0.0: USB hub found [ 285.526401][ T47] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 285.678445][ T47] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 285.687398][ T47] usb 4-1: config 0 has no interface number 0 [ 285.694333][ T9] hub 3-1:0.0: 2 ports detected [ 285.706303][ T5890] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 285.745214][ T47] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 285.812242][ T47] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 285.867767][ T5890] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 285.879907][ T47] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 285.885456][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.909764][ T5890] usb 5-1: config 0 has no interface number 0 [ 285.925538][ T9] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 285.938806][ T9] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 285.956704][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 285.962970][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 285.975469][ T5890] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 285.991923][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.026142][ T5890] usb 5-1: Product: syz [ 286.027405][ T9] usb 3-1: USB disconnect, device number 46 [ 286.046274][ T47] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 286.065296][ T5890] usb 5-1: Manufacturer: syz [ 286.076688][ T5890] usb 5-1: SerialNumber: syz [ 286.103591][ T5890] usb 5-1: config 0 descriptor?? [ 286.115797][ T5890] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 286.123169][ T47] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 286.123783][ T5890] usb 5-1: No valid video chain found. [ 286.182272][ T47] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 286.224606][ T47] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 286.246547][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.285340][ T47] usb 4-1: config 0 descriptor?? [ 286.304828][ T8621] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 286.312340][ T8621] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 286.320867][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 286.343151][ T8623] dummy0: left allmulticast mode [ 286.357611][ T47] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 286.370484][ T8623] dummy0: left promiscuous mode [ 286.390715][ T8623] bridge0: port 3(dummy0) entered disabled state [ 286.481237][ T8623] bridge_slave_1: left allmulticast mode [ 286.512773][ T8625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.573440][ T8623] bridge_slave_1: left promiscuous mode [ 286.586389][ T8621] ldusb 4-1:0.55: Write buffer overflow, 12 bytes dropped [ 286.599489][ T47] usb 4-1: USB disconnect, device number 36 [ 286.610686][ T8625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.619430][ T47] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 286.666729][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.713699][ T8623] bridge_slave_0: left promiscuous mode [ 286.767608][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.948705][ T5888] usb 1-1: USB disconnect, device number 45 [ 286.987343][ T5831] usb 5-1: USB disconnect, device number 52 [ 287.076575][ T47] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 287.238187][ T47] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 287.263437][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 287.282665][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 287.295659][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.847'. [ 287.306424][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.329648][ T47] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.349059][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.386437][ T5888] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 287.387588][ T47] usb 3-1: config 0 descriptor?? [ 287.431011][ T30] audit: type=1326 audit(1745582273.412:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24cd8e969 code=0x7ffc0000 [ 287.462867][ T30] audit: type=1326 audit(1745582273.442:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24cd8e969 code=0x7ffc0000 [ 287.586408][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 287.602128][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.636058][ T5888] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 287.658554][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.693327][ T5888] usb 1-1: config 0 descriptor?? [ 287.838422][ T47] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 287.877943][ T47] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 288.208455][ T8632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.224099][ T8632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.234067][ T5888] lenovo 0003:17EF:6062.000F: hidraw1: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.0-1/input0 [ 288.425352][ T5888] usb 1-1: USB disconnect, device number 46 [ 288.571823][ T8662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.584231][ T8662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.064004][ T9] usb 3-1: USB disconnect, device number 47 [ 289.436649][ T5888] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 289.598018][ T5888] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 289.626225][ T5888] usb 1-1: config 0 has no interface number 0 [ 289.636320][ T5888] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 289.707359][ T5888] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 289.744070][ T8669] bridge0: entered promiscuous mode [ 289.788666][ T8669] macvlan2: entered promiscuous mode [ 289.794320][ T5888] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 289.813731][ T8669] bridge0: port 3(macvlan2) entered blocking state [ 289.832550][ T5888] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 289.851451][ T8669] bridge0: port 3(macvlan2) entered disabled state [ 289.877972][ T8669] macvlan2: entered allmulticast mode [ 289.891913][ T5888] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 289.923210][ T8669] bridge0: entered allmulticast mode [ 289.952610][ T5888] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 289.981619][ T8669] macvlan2: left allmulticast mode [ 290.006337][ T8669] bridge0: left allmulticast mode [ 290.008822][ T5888] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 290.025137][ T8669] bridge0: left promiscuous mode [ 290.077207][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.138726][ T5888] usb 1-1: config 0 descriptor?? [ 290.145873][ T8667] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 290.156920][ T8667] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 290.192491][ T5888] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 290.375080][ T8667] ldusb 1-1:0.55: Write buffer overflow, 12 bytes dropped [ 290.416834][ T5959] usb 1-1: USB disconnect, device number 47 [ 290.442207][ T5959] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 290.902607][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.866'. [ 290.966391][ T5888] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 291.150263][ T5888] usb 5-1: device descriptor read/64, error -71 [ 291.249704][ T8698] netlink: 'syz.3.867': attribute type 1 has an invalid length. [ 291.419109][ T8698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.426371][ T5888] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 291.566191][ T5888] usb 5-1: device descriptor read/64, error -71 [ 291.606309][ T47] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 291.676642][ T5888] usb usb5-port1: attempt power cycle [ 291.766231][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 291.780572][ T47] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.798534][ T47] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.809499][ T47] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 291.822422][ T47] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 291.832080][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.840516][ T47] usb 1-1: Product: syz [ 291.844897][ T47] usb 1-1: Manufacturer: syz [ 291.850075][ T47] usb 1-1: SerialNumber: syz [ 292.036235][ T5888] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 292.059345][ T5890] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 292.067689][ T47] usb 1-1: 0:2 : does not exist [ 292.073313][ T5888] usb 5-1: device descriptor read/8, error -71 [ 292.082384][ T47] usb 1-1: 0:8 : does not exist [ 292.182327][ T47] usb 1-1: USB disconnect, device number 48 [ 292.236204][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 292.245713][ T5890] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 292.257463][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.270497][ T5890] usb 2-1: config 0 descriptor?? [ 292.328574][ T5888] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 292.377174][ T5888] usb 5-1: device descriptor read/8, error -71 [ 292.457540][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.512881][ T5890] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 292.526215][ T5888] usb usb5-port1: unable to enumerate USB device [ 292.543834][ T5890] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 292.572440][ T5890] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 293.572379][ T8743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.883'. [ 293.764256][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'. [ 293.847342][ T8773] syz_tun: entered allmulticast mode [ 293.885158][ T8743] cgroup: fork rejected by pids controller in /syz3 [ 293.914643][ T8772] syz_tun: left allmulticast mode [ 294.030065][ T8778] [U]  [ 294.033116][ T8778] [U] K{ [ 294.068053][ T8778] [U] t 1ŠFfˊ`GJgo/mC [ 294.097940][ T8778] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 294.349750][ T8778] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 294.557174][ T8778] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 294.851783][ T8778] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 294.923321][ T8778] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 294.998861][ T8778] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 295.031647][ T8778] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/< ) failed (rc=-5) [ 308.891365][ T9934] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 309.102904][ T9933] loop2: p1 [ 309.106413][ T9933] loop2: partition table partially beyond EOD, truncated [ 309.113953][ T9933] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 309.527238][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 309.596141][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 309.693003][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.936'. [ 310.306208][ T5893] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 310.459180][ T5893] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 310.468593][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.480476][ T5893] usb 3-1: config 0 descriptor?? [ 310.489750][ T5893] pwc: Samsung MPC-C10 USB webcam detected. [ 310.609818][ T5891] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 310.688194][ T5893] pwc: send_video_command error -71 [ 310.693467][ T5893] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 310.702768][ T5893] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 310.714090][ T5893] usb 3-1: USB disconnect, device number 54 [ 310.776293][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 310.783423][ T5891] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 310.794709][ T5891] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 310.804772][ T5891] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 310.814989][ T5891] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.828247][ T5891] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 310.837638][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.053918][ T5891] usb 5-1: GET_CAPABILITIES returned 0 [ 311.059624][ T5891] usbtmc 5-1:16.0: can't read capabilities [ 311.226249][ T5893] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 311.263021][ T9964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.273405][ T9964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.366367][ T5893] usb 3-1: device descriptor read/64, error -71 [ 311.616401][ T5893] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 311.746296][ T5893] usb 3-1: device descriptor read/64, error -71 [ 311.857577][ T5893] usb usb3-port1: attempt power cycle [ 312.199002][ T5893] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 312.239697][ T5893] usb 3-1: device descriptor read/8, error -71 [ 312.506248][ T5893] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 312.528562][ T5893] usb 3-1: device descriptor read/8, error -71 [ 312.603422][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.948'. [ 312.640435][ T5893] usb usb3-port1: unable to enumerate USB device [ 313.413294][ T5888] usb 5-1: USB disconnect, device number 58 [ 314.316239][ T5888] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 314.466237][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 314.499119][ T5888] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 314.530737][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.561551][ T5888] usb 5-1: config 0 descriptor?? [ 314.833826][ T5888] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 315.527286][T10037] input: syz1 as /devices/virtual/input/input52 [ 315.796380][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 315.980681][ T9] usb 3-1: config 0 has no interfaces? [ 316.005058][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 316.021719][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.054114][ T9] usb 3-1: Product: syz [ 316.076856][ T9] usb 3-1: Manufacturer: syz [ 316.126243][ T9] usb 3-1: SerialNumber: syz [ 316.162081][ T9] usb 3-1: config 0 descriptor?? [ 316.442626][T10035] @: renamed from vlan0 (while UP) [ 316.555775][T10035] netlink: 788 bytes leftover after parsing attributes in process `syz.2.965'. [ 317.454193][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.460738][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.086507][T10070] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 319.509070][T10079] pim6reg1: entered promiscuous mode [ 319.576457][ T5891] usb 3-1: USB disconnect, device number 59 [ 319.582678][T10079] pim6reg1: entered allmulticast mode [ 322.465948][T10113] fuse: Unknown parameter '0x0000000000000003' [ 322.476647][T10113] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 323.116384][ T5891] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 323.267859][ T5891] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 323.287487][ T5891] usb 3-1: config 0 has no interface number 0 [ 323.303045][ T5891] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 323.341007][ T5891] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 323.370577][ T5891] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 323.412131][ T5891] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 323.442045][ T5891] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 323.515196][ T5891] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 323.618505][ T5891] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 323.642660][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.680541][ T5891] usb 3-1: config 0 descriptor?? [ 323.694763][T10120] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 323.703146][T10120] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 323.749019][ T5891] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 323.960664][T10120] ldusb 3-1:0.55: Write buffer overflow, 12 bytes dropped [ 323.971133][ T47] usb 3-1: USB disconnect, device number 60 [ 323.984203][ T47] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 324.443063][T10137] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 324.576992][T10140] fuse: Unknown parameter '0x0000000000000003' [ 324.609494][T10140] hsr0: entered promiscuous mode [ 324.617280][T10140] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 327.304573][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1006'. [ 327.985798][T10174] fuse: Unknown parameter '0x0000000000000003' [ 327.997622][T10174] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 328.401730][T10181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.374283][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1017'. [ 329.449011][T10204] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1020'. [ 329.499841][T10206] fuse: Unknown parameter '0x0000000000000003' [ 329.513856][T10206] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 329.616412][T10208] loop2: detected capacity change from 0 to 7 [ 329.628906][ T5845] loop2: p1 [ 329.632188][ T5845] loop2: partition table partially beyond EOD, truncated [ 329.640677][ T5845] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 329.743537][T10208] loop2: p1 [ 329.747267][T10208] loop2: partition table partially beyond EOD, truncated [ 329.755827][T10208] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 329.921041][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 329.998247][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 330.386216][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 330.546368][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 330.554681][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.565696][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 330.577062][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 330.586798][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.608592][ T9] usb 3-1: config 0 descriptor?? [ 331.861622][T10233] netlink: 'syz.3.1028': attribute type 21 has an invalid length. [ 331.877123][T10233] IPv6: NLM_F_CREATE should be specified when creating new route [ 331.891904][T10233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.900050][T10233] IPv6: NLM_F_CREATE should be set when creating new route [ 331.907692][T10233] IPv6: NLM_F_CREATE should be set when creating new route [ 331.915116][T10233] IPv6: NLM_F_CREATE should be set when creating new route [ 332.010687][T10240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1030'. [ 332.111225][T10244] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 332.131394][T10244] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 333.094831][T10219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.133363][ T5891] usb 3-1: USB disconnect, device number 61 [ 333.606327][ T5891] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 333.776209][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 333.783694][ T5891] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 333.797571][ T5891] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 333.807059][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 333.815261][ T5891] usb 3-1: Product: syz [ 333.822243][ T5891] usb 3-1: Manufacturer: syz [ 333.829489][ T5891] usb 3-1: SerialNumber: syz [ 333.847572][ T5891] usb 3-1: config 0 descriptor?? [ 333.854912][T10272] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 333.871582][ T5891] hub 3-1:0.0: bad descriptor, ignoring hub [ 333.879990][ T5891] hub 3-1:0.0: probe with driver hub failed with error -5 [ 334.196494][ T5891] usb 3-1: USB disconnect, device number 62 [ 334.536322][ T5891] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 334.691114][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 334.705514][ T5891] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 334.714873][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 334.723128][ T5891] usb 3-1: Product: syz [ 334.727563][ T5891] usb 3-1: Manufacturer: 轫 [ 334.732237][ T5891] usb 3-1: SerialNumber: Є [ 334.739700][ T5891] usb 3-1: config 0 descriptor?? [ 334.745453][T10272] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 334.754785][ T5891] hub 3-1:0.0: bad descriptor, ignoring hub [ 334.760952][ T5891] hub 3-1:0.0: probe with driver hub failed with error -5 [ 334.975816][T10272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.987702][T10272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.106581][ T10] usb 3-1: USB disconnect, device number 63 [ 335.794539][T10284] loop2: detected capacity change from 0 to 7 [ 335.797855][ T47] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 335.811164][T10284] loop2: p1 [ 335.814436][T10284] loop2: partition table partially beyond EOD, truncated [ 335.837072][T10284] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 335.997099][ T47] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 336.007718][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.043694][ T47] usb 3-1: config 0 descriptor?? [ 336.071882][ T47] cp210x 3-1:0.0: cp210x converter detected [ 336.089909][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 336.500504][ T47] usb 3-1: cp210x converter now attached to ttyUSB0 [ 336.700372][ T10] usb 3-1: USB disconnect, device number 64 [ 336.716802][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 336.731271][ T10] cp210x 3-1:0.0: device disconnected [ 337.350783][T10315] loop2: detected capacity change from 0 to 7 [ 337.359527][T10315] loop2: p1 [ 337.362842][T10315] loop2: partition table partially beyond EOD, truncated [ 337.372812][T10315] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 337.503123][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 337.941448][T10324] netlink: 'syz.2.1064': attribute type 8 has an invalid length. [ 338.506216][ T47] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 338.656194][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 338.663327][ T47] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 338.675442][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 338.688773][ T47] usb 3-1: New USB device found, idVendor=056e, idProduct=00db, bcdDevice= 0.00 [ 338.698020][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.711142][ T47] usb 3-1: config 0 descriptor?? [ 339.250580][T10345] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1068'. [ 339.267774][T10345] Cannot find del_set index 0 as target [ 339.277078][T10345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.297866][T10345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.313607][T10348] loop2: detected capacity change from 0 to 7 [ 339.325549][T10348] loop2: p1 [ 339.336211][T10348] loop2: partition table partially beyond EOD, truncated [ 339.344031][T10348] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 341.403409][ T47] usbhid 3-1:0.0: can't add hid device: -71 [ 341.410621][ T47] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 341.432246][ T47] usb 3-1: USB disconnect, device number 65 [ 341.786165][ T47] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 341.916302][ T47] usb 3-1: device descriptor read/64, error -71 [ 342.156209][ T47] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 342.286256][ T47] usb 3-1: device descriptor read/64, error -71 [ 342.408672][ T47] usb usb3-port1: attempt power cycle [ 342.756261][ T47] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 342.786841][ T47] usb 3-1: device descriptor read/8, error -71 [ 343.026296][ T47] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 343.056865][ T47] usb 3-1: device descriptor read/8, error -71 [ 343.168421][ T47] usb usb3-port1: unable to enumerate USB device [ 343.278467][T10383] sit0: entered promiscuous mode [ 343.297380][T10383] netlink: 'syz.3.1087': attribute type 3 has an invalid length. [ 343.305155][T10383] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1087'. [ 343.711244][T10408] x_tables: unsorted underflow at hook 2 [ 344.662981][T10422] netlink: 'syz.2.1100': attribute type 4 has an invalid length. [ 345.406181][ T5892] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 345.558946][ T5892] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 345.576142][ T5892] usb 3-1: config 0 has no interface number 0 [ 345.582390][ T5892] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 345.601817][ T5892] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 345.613430][ T5892] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x8B has invalid wMaxPacketSize 0 [ 345.623715][ T5892] usb 3-1: config 0 interface 200 has no altsetting 0 [ 345.633821][ T5892] usb 3-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39 [ 345.643344][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.651982][ T5892] usb 3-1: Product: syz [ 345.656825][ T5892] usb 3-1: Manufacturer: syz [ 345.661534][ T5892] usb 3-1: SerialNumber: syz [ 345.671583][ T5892] usb 3-1: config 0 descriptor?? [ 346.567615][ T5892] usb 3-1: USB disconnect, device number 70 [ 346.601440][T10428] BUG: sleeping function called from invalid context at mm/util.c:743 [ 346.610852][T10428] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 10428, name: syz.4.1102 [ 346.620155][T10428] preempt_count: 1, expected: 0 [ 346.625028][T10428] RCU nest depth: 0, expected: 0 [ 346.630034][T10428] 2 locks held by syz.4.1102/10428: [ 346.635295][T10428] #0: ffff888026a7c420 (sb_writers#3){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 346.645297][T10428] #1: ffff888148cdac48 (&mapping->i_private_lock){+.+.}-{3:3}, at: __buffer_migrate_folio+0x240/0x620 [ 346.656465][T10428] Preemption disabled at: [ 346.656479][T10428] [<0000000000000000>] 0x0 [ 346.665296][T10428] CPU: 1 UID: 0 PID: 10428 Comm: syz.4.1102 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 346.665327][T10428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 346.665345][T10428] Call Trace: [ 346.665356][T10428] [ 346.665365][T10428] dump_stack_lvl+0x189/0x250 [ 346.665401][T10428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.665429][T10428] ? __pfx__printk+0x10/0x10 [ 346.665450][T10428] ? print_lock_name+0xde/0x100 [ 346.665471][T10428] __might_resched+0x495/0x610 [ 346.665495][T10428] ? __pfx___might_resched+0x10/0x10 [ 346.665515][T10428] ? __lock_acquire+0xaac/0xd20 [ 346.665549][T10428] folio_mc_copy+0x141/0x1d0 [ 346.665573][T10428] filemap_migrate_folio+0xba/0x4c0 [ 346.665607][T10428] __buffer_migrate_folio+0x430/0x620 [ 346.665636][T10428] ? __pfx_buffer_migrate_folio_norefs+0x10/0x10 [ 346.665663][T10428] move_to_new_folio+0x2df/0xb10 [ 346.665684][T10428] ? __pfx_move_to_new_folio+0x10/0x10 [ 346.665702][T10428] ? prep_compound_page+0x2f6/0x690 [ 346.665739][T10428] ? compaction_alloc+0x2f97/0x31d0 [ 346.665764][T10428] ? __free_frozen_pages+0x667/0xcd0 [ 346.665815][T10428] ? __pfx___might_resched+0x10/0x10 [ 346.665835][T10428] ? __pfx_compaction_alloc+0x10/0x10 [ 346.665868][T10428] migrate_pages_batch+0x1c34/0x2830 [ 346.665910][T10428] ? __pfx_compaction_free+0x10/0x10 [ 346.665938][T10428] ? __pfx_migrate_pages_batch+0x10/0x10 [ 346.665964][T10428] ? __lock_acquire+0xaac/0xd20 [ 346.666001][T10428] ? __mod_memcg_lruvec_state+0x2ae/0x480 [ 346.666024][T10428] migrate_pages+0x1b3b/0x2850 [ 346.666069][T10428] ? __pfx_compaction_free+0x10/0x10 [ 346.666097][T10428] ? __pfx_compaction_alloc+0x10/0x10 [ 346.666135][T10428] ? __pfx_migrate_pages+0x10/0x10 [ 346.666161][T10428] ? isolate_movable_page+0x2a/0x790 [ 346.666193][T10428] ? rcu_is_watching+0x15/0xb0 [ 346.666214][T10428] ? isolate_migratepages_block+0x36bf/0x3d50 [ 346.666273][T10428] compact_zone+0x2734/0x4be0 [ 346.666314][T10428] ? __flush_work+0xd2/0xbc0 [ 346.666343][T10428] ? __flush_work+0xa5b/0xbc0 [ 346.666378][T10428] ? sysctl_compaction_handler+0xff/0x7b0 [ 346.666421][T10428] ? __pfx_compact_zone+0x10/0x10 [ 346.666466][T10428] sysctl_compaction_handler+0x3a4/0x7b0 [ 346.666496][T10428] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 346.666560][T10428] ? rcu_is_watching+0x15/0xb0 [ 346.666575][T10428] ? proc_sys_call_handler+0x3f2/0x7c0 [ 346.666594][T10428] ? trace_kmalloc+0x1f/0xd0 [ 346.666614][T10428] ? __kvmalloc_node_noprof+0x338/0x5e0 [ 346.666637][T10428] ? proc_sys_call_handler+0x3f2/0x7c0 [ 346.666658][T10428] proc_sys_call_handler+0x509/0x7c0 [ 346.666682][T10428] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 346.666703][T10428] ? __asan_memset+0x22/0x50 [ 346.666735][T10428] iter_file_splice_write+0x937/0x1000 [ 346.666779][T10428] ? __pfx_iter_file_splice_write+0x10/0x10 [ 346.666804][T10428] ? rcu_read_lock_any_held+0xb3/0x120 [ 346.666833][T10428] ? __pfx_iter_file_splice_write+0x10/0x10 [ 346.666855][T10428] direct_splice_actor+0xfe/0x160 [ 346.666880][T10428] splice_direct_to_actor+0x5a5/0xcc0 [ 346.666918][T10428] ? __pfx_direct_splice_actor+0x10/0x10 [ 346.666940][T10428] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 346.666963][T10428] ? __pfx_aa_file_perm+0x10/0x10 [ 346.666991][T10428] do_splice_direct+0x181/0x270 [ 346.667015][T10428] ? __pfx_do_splice_direct+0x10/0x10 [ 346.667036][T10428] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 346.667066][T10428] ? rw_verify_area+0x258/0x650 [ 346.667089][T10428] do_sendfile+0x4da/0x7d0 [ 346.667122][T10428] ? __pfx_do_sendfile+0x10/0x10 [ 346.667158][T10428] __se_sys_sendfile64+0xd9/0x190 [ 346.667182][T10428] ? rcu_is_watching+0x15/0xb0 [ 346.667198][T10428] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 346.667226][T10428] ? do_syscall_64+0xba/0x210 [ 346.667254][T10428] do_syscall_64+0xf6/0x210 [ 346.667278][T10428] ? clear_bhb_loop+0x45/0xa0 [ 346.667299][T10428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.667321][T10428] RIP: 0033:0x7f9d3c38e969 [ 346.667338][T10428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.667354][T10428] RSP: 002b:00007f9d3d12a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 346.667373][T10428] RAX: ffffffffffffffda RBX: 00007f9d3c5b5fa0 RCX: 00007f9d3c38e969 [ 346.667387][T10428] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 346.667397][T10428] RBP: 00007f9d3c410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 346.667408][T10428] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 346.667418][T10428] R13: 0000000000000000 R14: 00007f9d3c5b5fa0 R15: 00007f9d3c6dfa28 [ 346.667447][T10428] [ 353.291227][ T5959] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 353.292036][ T5956] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 353.306442][ T5888] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 353.306522][ T5888] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 353.348609][ T5956] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 353.356675][ T5888] usb 5-1: USB disconnect, device number 59 [ 353.375314][ T5890] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 353.386884][ T5956] usb 4-1: USB disconnect, device number 37 [ 353.391918][ T5959] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 353.415336][ T5890] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 353.429374][ T5959] usb 1-1: USB disconnect, device number 50 [ 353.448275][ T5890] usb 2-1: USB disconnect, device number 56