last executing test programs: 3m32.842108751s ago: executing program 3 (id=1277): pipe2$watch_queue(0x0, 0x80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x46, 0x50, 0xd3, 0x10, 0xc45, 0x800a, 0xdb47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0xa6, 0x37}}]}}]}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) readv(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000c40)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x27, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xf, 0x1cb, 0x200, 0x1000000, 0x8, 0x1, 0x0, 0xe7be}, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m32.763678469s ago: executing program 3 (id=1278): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="f17a3f059ec36bca85dce12f4c7bfc03951d3ae640edf1a6e67acabf01", 0x1d}, {&(0x7f0000000180)="fc232a233944c22dcfab21f572b5ea14093b741501db5b7a17a892457bbcc7660277a766e4edba90c26985d846da37e2b75e98805adfaf8dd8496d27d4fa5d36483ee86246302c1a759ea607583c857053cc47eba490a8f9e210b2ba8849090a606a8cc20f0564759826a102e354a055e337f2b89d1a1a2b1a7dcd40589b99aaeca25e123f42c9", 0x87}, {&(0x7f00000002c0)="7a5f5f772574b6a9ff88df6e42dce2f6d8ab7d546930536f4a3090805bebb4370720366a9f7f2d2d94fc82795bdeff41c5a38fe402f2c9d312804ee18d8a", 0x3e}, {&(0x7f0000000640)="45a7fe79077a6b5aac7f2b0a366f999fd12d80aab5c2b6dad4f63fb6e511729c893f003bf6096684b36ff3de625fe5a59e5ab8c2cc0c51a5b82048c6265d94a92311a828b3a7cec37e94d9499b6e6c08", 0x50}], 0x4}}], 0x1, 0x20040084) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)}}], 0x1, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m32.58788027s ago: executing program 3 (id=1279): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m32.483304819s ago: executing program 3 (id=1281): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m32.063974945s ago: executing program 3 (id=1282): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0xf2558000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x4af}, 0x38) unshare(0x2c020400) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setpipe(r3, 0x4, 0xfffffffffffffffd) 3m32.047781548s ago: executing program 3 (id=1283): openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='gfs2\x00', 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x42000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, 'N', 0x3a, './file0', 0x3a, [0x43, 0x46, 0x43]}, 0x2c) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, 0xffffffffffffffff, 0x0) 1m28.370685975s ago: executing program 2 (id=1477): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r0]) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="7c040000", @ANYRES16, @ANYBLOB="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"], 0x47c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r7, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00'/10, @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,\x00']) 1m23.202946555s ago: executing program 2 (id=1481): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000a80)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x7, 0xff, 0x8, 0x6, 0x0, 0x0, 0x8, 0x1}}) mkdirat(0xffffffffffffff9c, 0x0, 0x110) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0x80000300, 0x0, 0x0) 1m21.163913649s ago: executing program 2 (id=1484): r0 = add_key(0x0, &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980), 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020}, 0x2020) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) 1m19.090925967s ago: executing program 2 (id=1486): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c8, 0x12) dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x0, @private1}}, 0x0, 0x0, 0x3f8, 0x1000, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 1m13.957100715s ago: executing program 2 (id=1493): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x1e4) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000380)='net/if_inet6\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 1m8.396312856s ago: executing program 2 (id=1502): r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251b", 0x4, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020}, 0x2020) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) unshare(0x40020000) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) 53.153593777s ago: executing program 32 (id=1502): r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251b", 0x4, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020}, 0x2020) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) unshare(0x40020000) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) 28.024137489s ago: executing program 4 (id=1560): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}], 0x1, &(0x7f0000000280)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x14001}], 0x1, 0x4044040) 26.857495721s ago: executing program 4 (id=1562): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000013000100000000000000000807000000", @ANYRES32=r2, @ANYBLOB="000000eaffffff0014"], 0x34}}, 0x0) 23.908446634s ago: executing program 4 (id=1574): bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x0, 0x1, 0x62, 0xb, {{0xa, 0x4, 0x2, 0x9, 0x28, 0x67, 0x0, 0x2, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "36c337c55ea76e5d83ceb097db3b"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x101a02, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000080)=ANY=[], 0x138) 22.615719018s ago: executing program 4 (id=1576): signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x4, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0x7fff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000000000000002000"], 0x40) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000280)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x10, 0x5, {}, {0x1, 0xc, 0xd7, 0x7, 0x1, 0x3, "621a65f4"}, 0x1ff, 0x2, {0x0}, 0x6, 0x0, r4}) r6 = socket(0x40000000015, 0x5, 0x2) close(r6) sendto$inet6(r6, &(0x7f00000000c0)="c0b926743ee1", 0x6, 0x4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r8 = syz_io_uring_setup(0x23d, &(0x7f00000000c0)={0x0, 0x1, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) 20.051990343s ago: executing program 4 (id=1581): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19.548406812s ago: executing program 4 (id=1584): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) unshare(0x8000000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004040) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000100)) ioctl$SIOCAX25ADDUID(r2, 0x89e1, 0x0) 18.827921434s ago: executing program 1 (id=1587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) shutdown(r4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r6, 0x4b48, &(0x7f0000000040)) socket$inet(0x2, 0xa, 0x0) 17.897467929s ago: executing program 1 (id=1588): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x400, 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) mount$afs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x200a400, &(0x7f0000000400)=ANY=[]) syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r6, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xc8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) r7 = fsmount(r5, 0x0, 0x18) symlinkat(&(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000140)='./file0\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sched_setscheduler(0x0, 0x2, 0x0) 4.949491809s ago: executing program 0 (id=1604): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) mkdirat$cgroup(r0, &(0x7f0000000440)='syz1\x00', 0x1ff) 4.852136727s ago: executing program 0 (id=1605): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000280)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r1, 0x1) 4.100857924s ago: executing program 1 (id=1606): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 4.080983489s ago: executing program 33 (id=1584): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) unshare(0x8000000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004040) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000100)) ioctl$SIOCAX25ADDUID(r2, 0x89e1, 0x0) 3.710424423s ago: executing program 0 (id=1608): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000044001280110001006272696467655f736c617665000000002c00058005000a000000000008002200", @ANYRES32=r2, @ANYBLOB="05001e"], 0x64}}, 0x0) 3.561800138s ago: executing program 1 (id=1609): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x200000000000000b, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee01, 0xffffffffffffffff) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) sendmsg$rds(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r6, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x8000) 3.023771261s ago: executing program 0 (id=1610): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000002c0)={0x8, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x39}, 0x74}}}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@can_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}}]}, 0x30}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, r2, 0x0, @inherit={0x70, &(0x7f0000000180)={0x1, 0x5, 0x8, 0x7, {0x20, 0x8, 0x2, 0xff, 0x1263eb7}, [0x9, 0x3, 0x7ff, 0x309, 0x9]}}, @name="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"}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000006c0)={0x0, "2c1a2c3c689e1c386c681447aeaf524e"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000016c0)={{r1}, r2, 0x16, @unused=[0xfffffffffffffff7, 0x5, 0x8, 0x8], @devid=r3}) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c0001800602"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x10001}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000440)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000003740)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r0]) 2.157481922s ago: executing program 1 (id=1611): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) 1.534937006s ago: executing program 0 (id=1612): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x4, 0xffff1000, 0x3, 0x5, 0xb, 0x8, 0xd, 0x4, 0x0, 0x81, 0x8, 0x1}, {0xd000, 0xd000, 0x0, 0x7, 0x2, 0x1, 0x7, 0xf, 0x8, 0x6, 0x3}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0xf, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0xe, 0x81, 0x5, 0x8, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xd000, 0xa, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x6, 0x8, 0xe1}, {0xf000, 0x8080000, 0xc, 0xf8, 0xdd, 0x2a, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0xeeef0000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x4, 0x1000, 0x80a0000, [0x5, 0x8001, 0x8]}) 1.142063209s ago: executing program 0 (id=1613): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) 0s ago: executing program 1 (id=1614): epoll_create1(0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b3c, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x2) rmdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) kernel console output (not intermixed with test programs): ummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.281044][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.286932][ T5816] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71 [ 172.287003][ T5816] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 172.287017][ T5816] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 172.287118][ T5816] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 172.342723][ T5816] usb 1-1: USB disconnect, device number 13 [ 172.458943][ T5920] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 172.618714][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 172.634809][ T5920] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 172.634836][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.660366][ T5811] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.665463][ T5920] pvrusb2: Hardware description: Terratec Grabster AV400 [ 172.665483][ T5920] pvrusb2: ********** [ 172.665489][ T5920] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 172.665499][ T5920] pvrusb2: Important functionality might not be entirely working. [ 172.665507][ T5920] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 172.665516][ T5920] pvrusb2: ********** [ 172.981463][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.016852][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 173.024965][ T5811] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 173.024989][ T5811] usb 2-1: config 0 has no interface number 0 [ 173.025034][ T5811] usb 2-1: config 0 interface 12 has no altsetting 0 [ 173.031801][ T5811] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 173.031827][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.031844][ T5811] usb 2-1: Product: syz [ 173.031856][ T5811] usb 2-1: Manufacturer: syz [ 173.031868][ T5811] usb 2-1: SerialNumber: syz [ 173.041351][ T2364] pvrusb2: Invalid write control endpoint [ 173.049304][ T5811] usb 2-1: config 0 descriptor?? [ 173.148268][ T6868] ubi31: attaching mtd0 [ 173.756340][ T2364] pvrusb2: Invalid write control endpoint [ 173.756356][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 173.756365][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 173.756373][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 173.756385][ T2364] pvrusb2: Device being rendered inoperable [ 173.805709][ T2364] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 173.805818][ T2364] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 173.853065][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.923911][ T2364] pvrusb2: Attached sub-driver cx25840 [ 173.923988][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 173.923997][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 173.932578][ T31] usb 4-1: USB disconnect, device number 11 [ 175.138930][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.367419][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.896462][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.918981][ T5811] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71 [ 175.919037][ T5811] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 175.919052][ T5811] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 175.919143][ T5811] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 175.931556][ T5811] usb 2-1: USB disconnect, device number 5 [ 178.184991][ T6904] ubi31: attaching mtd0 [ 179.349675][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.122485][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.148210][ T5811] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 180.181285][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.346055][ T5811] usb 1-1: Using ep0 maxpacket: 32 [ 180.355240][ T5811] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 180.355256][ T5811] usb 1-1: config 0 has no interface number 0 [ 180.355284][ T5811] usb 1-1: config 0 interface 12 has no altsetting 0 [ 180.360011][ T5811] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 180.360039][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.360056][ T5811] usb 1-1: Product: syz [ 180.360068][ T5811] usb 1-1: Manufacturer: syz [ 180.360080][ T5811] usb 1-1: SerialNumber: syz [ 180.484930][ T5811] usb 1-1: config 0 descriptor?? [ 180.778724][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.106203][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.468911][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.078121][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.340269][ T6946] ubi31: attaching mtd0 [ 183.747731][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 184.014269][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.851446][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.871934][ T5811] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 184.871985][ T5811] f81534 1-1:0.12: f81534_find_config_idx: read failed: -32 [ 184.871999][ T5811] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 184.872104][ T5811] f81534 1-1:0.12: probe with driver f81534 failed with error -32 [ 184.924023][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.924054][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.924088][ T31] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 184.924108][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 184.925594][ T31] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 184.925617][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 184.925634][ T31] usb 2-1: SerialNumber: syz [ 185.191677][ T5811] usb 1-1: USB disconnect, device number 14 [ 185.423777][ T31] usb 2-1: 0:2 : does not exist [ 185.423832][ T31] usb 2-1: unit 5 not found! [ 185.493534][ T31] usb 2-1: USB disconnect, device number 6 [ 185.633653][ T6309] udevd[6309]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.928746][ T991] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 186.008770][ T5874] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 186.090183][ T991] usb 3-1: Using ep0 maxpacket: 32 [ 186.092985][ T991] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 186.093009][ T991] usb 3-1: config 0 has no interface number 0 [ 186.093052][ T991] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 186.093063][ T991] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 186.093074][ T991] usb 3-1: config 0 interface 12 has no altsetting 0 [ 186.095575][ T991] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 186.095594][ T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.095603][ T991] usb 3-1: Product: syz [ 186.095610][ T991] usb 3-1: Manufacturer: syz [ 186.095617][ T991] usb 3-1: SerialNumber: syz [ 186.101726][ T991] usb 3-1: config 0 descriptor?? [ 186.125002][ T991] f81534 3-1:0.12: unsupported endpoint max packet size [ 186.188790][ T5874] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 186.209948][ T5874] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 186.209964][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.209974][ T5874] usb 5-1: Product: syz [ 186.209981][ T5874] usb 5-1: Manufacturer: syz [ 186.209987][ T5874] usb 5-1: SerialNumber: syz [ 186.217595][ T5874] usb 5-1: config 0 descriptor?? [ 186.232913][ T5874] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 186.262428][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 186.263891][ T5874] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 186.263971][ T5874] usb 5-1: media controller created [ 186.312873][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.475076][ T5874] DVB: Unable to find symbol mt352_attach() [ 186.555045][ T5874] DVB: Unable to find symbol nxt6000_attach() [ 186.555060][ T5874] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 186.562070][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 186.596117][ T5874] dvb-usb: schedule remote query interval to 1000 msecs. [ 186.596140][ T5874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 186.596470][ T5874] dvb-usb: bulk message failed: -22 (7/0) [ 186.596487][ T5874] dvb-usb: bulk message failed: -22 (7/0) [ 186.612721][ T5874] usb 5-1: USB disconnect, device number 14 [ 187.340754][ T5874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 190.239036][ T31] usb 3-1: USB disconnect, device number 9 [ 191.761874][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 191.810486][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.202554][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.291007][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.329535][ T10] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 193.643098][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.858345][ T10] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 193.858372][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.858389][ T10] usb 3-1: Product: syz [ 193.858402][ T10] usb 3-1: Manufacturer: syz [ 193.858414][ T10] usb 3-1: SerialNumber: syz [ 193.943871][ T10] usb 3-1: config 0 descriptor?? [ 193.987896][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 194.023063][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.026794][ T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 194.026850][ T10] usb 3-1: media controller created [ 194.125260][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.095061][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.109227][ T10] DVB: Unable to find symbol mt352_attach() [ 195.131912][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.131987][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.336191][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.423396][ T10] DVB: Unable to find symbol nxt6000_attach() [ 195.423412][ T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 195.452337][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 195.489212][ T10] dvb-usb: schedule remote query interval to 1000 msecs. [ 195.489234][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 195.489249][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 195.489264][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 195.530510][ T10] usb 3-1: USB disconnect, device number 10 [ 195.866586][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.388604][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.659609][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 197.031505][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.750684][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.184007][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.526138][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.697114][ T7058] ubi31: attaching mtd0 [ 198.732642][ T7058] ubi31: scanning is finished [ 198.732661][ T7058] ubi31: empty MTD device detected [ 198.890734][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.172699][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.707404][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.797242][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.866939][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.944938][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.002914][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.044313][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.081427][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.160981][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.333652][ T5816] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 200.539480][ T5816] usb 3-1: Using ep0 maxpacket: 32 [ 200.675193][ T5816] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 200.675449][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.944516][ T5816] usb 3-1: config 0 descriptor?? [ 200.947466][ T7058] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 201.005854][ T5816] gspca_main: sunplus-2.14.0 probing 041e:400b [ 201.753202][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.087432][ T7090] binfmt_misc: register: failed to install interpreter file ./file0 [ 202.162062][ T7088] gfs2: not a GFS2 filesystem [ 202.631367][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.672336][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.833891][ T5816] gspca_sunplus: reg_w_riv err -71 [ 202.833999][ T5816] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 202.970986][ T5816] usb 3-1: USB disconnect, device number 11 [ 206.738224][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 208.397266][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.526457][ T7133] gfs2: not a GFS2 filesystem [ 208.580257][ T7133] binfmt_misc: register: failed to install interpreter file ./file0 [ 208.589356][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.989451][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.176664][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 209.582277][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.848442][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.056640][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.614136][ T5821] Bluetooth: hci0: command 0x0406 tx timeout [ 212.892241][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 212.894514][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 215.379905][ T7180] gfs2: not a GFS2 filesystem [ 215.418487][ T7180] binfmt_misc: register: failed to install interpreter file ./file0 [ 216.125998][ T7181] ubi31: attaching mtd0 [ 216.533883][ T7188] gfs2: not a GFS2 filesystem [ 218.898726][ T5811] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 219.399336][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 219.896247][ T5811] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 219.896273][ T5811] usb 3-1: config 0 has no interface number 0 [ 219.896322][ T5811] usb 3-1: config 0 interface 12 has no altsetting 0 [ 219.922975][ T5811] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 219.923002][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.923019][ T5811] usb 3-1: Product: syz [ 219.923031][ T5811] usb 3-1: Manufacturer: syz [ 219.923043][ T5811] usb 3-1: SerialNumber: syz [ 220.065838][ T5811] usb 3-1: config 0 descriptor?? [ 222.097367][ T5811] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 222.097420][ T5811] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 222.097435][ T5811] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 222.097529][ T5811] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 222.147042][ T5811] usb 3-1: USB disconnect, device number 12 [ 222.833643][ T7253] gfs2: not a GFS2 filesystem [ 224.527532][ T7268] Bluetooth: MGMT ver 1.23 [ 225.532094][ T7283] ubi31: attaching mtd0 [ 225.604387][ T7283] ubi31: scanning is finished [ 225.849864][ T5920] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 226.298715][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 226.300700][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 226.300728][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 226.303376][ T5920] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 226.303402][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.303419][ T5920] usb 4-1: Product: syz [ 226.303428][ T5920] usb 4-1: Manufacturer: syz [ 226.303434][ T5920] usb 4-1: SerialNumber: syz [ 226.381510][ T5920] usb 4-1: config 0 descriptor?? [ 226.435387][ T5920] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 226.435418][ T5920] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 226.478747][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 226.488719][ T1247] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 226.510936][ T7283] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 226.629352][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 226.633929][ T10] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 226.633954][ T10] usb 2-1: config 0 has no interface number 0 [ 226.634001][ T10] usb 2-1: config 0 interface 12 has no altsetting 0 [ 226.637158][ T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 226.637184][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.637201][ T10] usb 2-1: Product: syz [ 226.637213][ T10] usb 2-1: Manufacturer: syz [ 226.637226][ T10] usb 2-1: SerialNumber: syz [ 226.640595][ T1247] usb 3-1: Using ep0 maxpacket: 32 [ 226.646007][ T1247] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 226.646032][ T1247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.646050][ T1247] usb 3-1: Product: syz [ 226.646063][ T1247] usb 3-1: Manufacturer: syz [ 226.646075][ T1247] usb 3-1: SerialNumber: syz [ 226.686690][ T1247] usb 3-1: config 0 descriptor?? [ 226.744491][ T10] usb 2-1: config 0 descriptor?? [ 226.830120][ T1247] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 226.998699][ T5811] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 227.032041][ T5920] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 227.037365][ T5920] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 227.158650][ T5811] usb 1-1: Using ep0 maxpacket: 32 [ 227.162354][ T5811] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 227.162379][ T5811] usb 1-1: config 0 has no interface number 0 [ 227.162483][ T5811] usb 1-1: config 0 interface 12 has no altsetting 0 [ 227.197932][ T5811] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 227.198178][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.198198][ T5811] usb 1-1: Product: syz [ 227.198210][ T5811] usb 1-1: Manufacturer: syz [ 227.198222][ T5811] usb 1-1: SerialNumber: syz [ 227.240733][ T5920] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 227.240752][ T5920] em28xx 4-1:0.0: No AC97 audio processor [ 227.242734][ T5811] usb 1-1: config 0 descriptor?? [ 227.993152][ T10] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71 [ 227.993206][ T10] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 227.993220][ T10] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 227.993527][ T10] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 228.030153][ T10] usb 2-1: USB disconnect, device number 7 [ 228.307385][ T5920] usb 4-1: USB disconnect, device number 12 [ 228.327554][ T5811] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 228.327605][ T5811] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 228.327621][ T5811] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 228.327707][ T5811] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 228.409258][ T5920] em28xx 4-1:0.0: Disconnecting em28xx [ 228.443219][ T5811] usb 1-1: USB disconnect, device number 15 [ 228.473596][ T5920] em28xx 4-1:0.0: Freeing device [ 229.128492][ T1247] gspca_stk1135: reg_w 0x2ff err -71 [ 229.129547][ T1247] gspca_stk1135: serial bus timeout: status=0x00 [ 229.129559][ T1247] gspca_stk1135: Sensor write failed [ 229.129581][ T1247] gspca_stk1135: serial bus timeout: status=0x00 [ 229.129589][ T1247] gspca_stk1135: Sensor write failed [ 229.129611][ T1247] gspca_stk1135: serial bus timeout: status=0x00 [ 229.129618][ T1247] gspca_stk1135: Sensor read failed [ 229.129640][ T1247] gspca_stk1135: serial bus timeout: status=0x00 [ 229.129648][ T1247] gspca_stk1135: Sensor read failed [ 229.129654][ T1247] gspca_stk1135: Detected sensor type unknown (0x0) [ 229.129684][ T1247] gspca_stk1135: serial bus timeout: status=0x00 [ 229.129692][ T1247] gspca_stk1135: Sensor read failed [ 229.129711][ T1247] gspca_stk1135: serial bus timeout: status=0x00 [ 229.129719][ T1247] gspca_stk1135: Sensor read failed [ 229.129739][ T1247] gspca_stk1135: serial bus timeout: status=0x00 [ 229.129748][ T1247] gspca_stk1135: Sensor write failed [ 229.129768][ T1247] gspca_stk1135: serial bus timeout: status=0x00 [ 229.129776][ T1247] gspca_stk1135: Sensor write failed [ 229.129863][ T1247] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 230.205539][ T1247] usb 3-1: USB disconnect, device number 13 [ 230.788161][ T7306] No control pipe specified [ 231.088756][ T1247] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 231.273607][ T1247] usb 3-1: Using ep0 maxpacket: 16 [ 231.390383][ T1247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 231.561265][ T1247] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 231.561282][ T1247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.561291][ T1247] usb 3-1: Product: syz [ 231.561298][ T1247] usb 3-1: Manufacturer: syz [ 231.561305][ T1247] usb 3-1: SerialNumber: syz [ 231.620429][ T1247] usb 3-1: config 0 descriptor?? [ 231.645859][ T1247] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 231.645888][ T1247] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 232.102463][ T7322] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.180713][ T1247] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 233.280340][ T7322] netlink: 64 bytes leftover after parsing attributes in process `syz.4.393'. [ 234.029531][ T7322] team0: Mode "loa" not found [ 234.045331][ T1247] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 234.045362][ T1247] em28xx 3-1:0.0: board has no eeprom [ 234.110832][ T7334] netlink: 64 bytes leftover after parsing attributes in process `syz.3.396'. [ 234.113569][ T7329] bridge_slave_0: left allmulticast mode [ 234.113596][ T7329] bridge_slave_0: left promiscuous mode [ 234.113904][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.148699][ T1247] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 234.148725][ T1247] em28xx 3-1:0.0: dvb set to bulk mode. [ 234.150333][ T5874] em28xx 3-1:0.0: Binding DVB extension [ 234.190361][ T1247] usb 3-1: USB disconnect, device number 14 [ 234.192329][ T1247] em28xx 3-1:0.0: Disconnecting em28xx [ 234.263414][ T7329] bridge_slave_1: left allmulticast mode [ 234.263443][ T7329] bridge_slave_1: left promiscuous mode [ 234.263685][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.376055][ T5874] em28xx 3-1:0.0: Registering input extension [ 234.384835][ T1247] em28xx 3-1:0.0: Closing input extension [ 234.425803][ T7329] bond0: (slave bond_slave_0): Releasing backup interface [ 234.463781][ T1247] em28xx 3-1:0.0: Freeing device [ 234.521468][ T7329] bond0: (slave bond_slave_1): Releasing backup interface [ 234.559956][ T31] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 234.598067][ T7329] team_slave_0: left promiscuous mode [ 234.636517][ T7329] team0: Failed to send options change via netlink (err -105) [ 234.637219][ T7329] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 234.637598][ T7329] team0: Port device team_slave_0 removed [ 234.674010][ T7329] team_slave_1: left promiscuous mode [ 234.711127][ T31] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 234.711154][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.721301][ T7329] team0: Failed to send options change via netlink (err -105) [ 234.721821][ T7329] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 234.722263][ T7329] team0: Port device team_slave_1 removed [ 234.723616][ T7329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.723639][ T7329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.733660][ T31] usb 1-1: config 0 descriptor?? [ 234.813176][ T7329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.813204][ T7329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.862602][ T7329] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 234.928950][ T5920] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 235.098791][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 235.112172][ T5920] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 235.112196][ T5920] usb 3-1: config 0 has no interface number 0 [ 235.112309][ T5920] usb 3-1: config 0 interface 12 has no altsetting 0 [ 235.184477][ T5920] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 235.184505][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.185926][ T5920] usb 3-1: Product: syz [ 235.185942][ T5920] usb 3-1: Manufacturer: syz [ 235.185954][ T5920] usb 3-1: SerialNumber: syz [ 235.295067][ T7348] gfs2: not a GFS2 filesystem [ 235.328036][ T7348] binfmt_misc: register: failed to install interpreter file ./file0 [ 236.011124][ T5920] usb 3-1: config 0 descriptor?? [ 236.020269][ T7334] team0: Mode "loa" not found [ 236.178812][ T7351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.402'. [ 236.178831][ T7351] netlink: 64 bytes leftover after parsing attributes in process `syz.1.402'. [ 236.326225][ T7349] bridge_slave_0: left allmulticast mode [ 236.326253][ T7349] bridge_slave_0: left promiscuous mode [ 236.327172][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.414089][ T7349] bridge_slave_1: left allmulticast mode [ 236.414119][ T7349] bridge_slave_1: left promiscuous mode [ 236.414572][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.549591][ T7349] bond0: (slave bond_slave_0): Releasing backup interface [ 236.642583][ T7349] bond0: (slave bond_slave_1): Releasing backup interface [ 237.140300][ T7349] team_slave_0: left promiscuous mode [ 237.465957][ T5920] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 237.466213][ T5920] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 237.466228][ T5920] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 237.466544][ T5920] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 237.520012][ T5920] usb 3-1: USB disconnect, device number 15 [ 237.625095][ T7349] team0: Port device team_slave_0 removed [ 237.626434][ T7349] team_slave_1: left promiscuous mode [ 237.820132][ T7349] team0: Port device team_slave_1 removed [ 237.821708][ T7349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.821728][ T7349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.922410][ T7349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.922436][ T7349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.008237][ T7349] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.011492][ T7351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.402'. [ 238.475653][ T7373] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 239.409157][ T31] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 239.410874][ T31] [drm:udl_init] *ERROR* Selecting channel failed [ 239.456816][ T31] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 239.456839][ T31] [drm] Initialized udl on minor 2 [ 239.502572][ T31] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 239.502924][ T31] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 239.546816][ T5920] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 239.567715][ T5920] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 239.567903][ T5920] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 239.578864][ T1247] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 239.624245][ T31] usb 1-1: USB disconnect, device number 16 [ 239.669959][ T5887] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 239.728832][ T1247] usb 5-1: Using ep0 maxpacket: 16 [ 239.746086][ T1247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 239.762498][ T1247] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 239.762571][ T1247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.762588][ T1247] usb 5-1: Product: syz [ 239.762598][ T1247] usb 5-1: Manufacturer: syz [ 239.762610][ T1247] usb 5-1: SerialNumber: syz [ 239.831857][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 239.837971][ T5887] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 239.838332][ T5887] usb 3-1: config 0 has no interface number 0 [ 239.846545][ T5887] usb 3-1: config 0 interface 12 has no altsetting 0 [ 239.893977][ T5887] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 239.894088][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.894207][ T5887] usb 3-1: Product: syz [ 239.894221][ T5887] usb 3-1: Manufacturer: syz [ 239.894241][ T5887] usb 3-1: SerialNumber: syz [ 239.968960][ T1247] usb 5-1: config 0 descriptor?? [ 239.973788][ T1247] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 239.973806][ T1247] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 240.011545][ T5887] usb 3-1: config 0 descriptor?? [ 240.609863][ T1247] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 241.103228][ T5887] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 241.103281][ T5887] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 241.103295][ T5887] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 241.103383][ T5887] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 241.146491][ T1247] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 241.146521][ T1247] em28xx 5-1:0.0: board has no eeprom [ 241.374230][ T5887] usb 3-1: USB disconnect, device number 16 [ 242.299121][ T1247] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 242.299148][ T1247] em28xx 5-1:0.0: dvb set to bulk mode. [ 242.308685][ T9] em28xx 5-1:0.0: Binding DVB extension [ 242.545747][ T1247] usb 5-1: USB disconnect, device number 15 [ 242.559667][ T9] em28xx 5-1:0.0: Registering input extension [ 242.590323][ T1247] em28xx 5-1:0.0: Disconnecting em28xx [ 242.590351][ T1247] em28xx 5-1:0.0: Closing input extension [ 242.760551][ T1247] em28xx 5-1:0.0: Freeing device [ 246.523698][ T7532] gfs2: not a GFS2 filesystem [ 248.634880][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.721038][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.928687][ T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 250.088857][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 250.092157][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.092180][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.095039][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.095064][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.095082][ T31] usb 3-1: Product: syz [ 250.095094][ T31] usb 3-1: Manufacturer: syz [ 250.095106][ T31] usb 3-1: SerialNumber: syz [ 250.344727][ T31] usb 3-1: 0:2 : does not exist [ 250.366127][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 250.500941][ T31] usb 3-1: USB disconnect, device number 17 [ 250.665492][ T6309] udevd[6309]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.758735][ T5887] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 250.913042][ T5887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.913068][ T5887] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.916250][ T5887] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 250.916277][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.916294][ T5887] usb 5-1: SerialNumber: syz [ 250.968703][ T1247] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 251.124289][ T1247] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.124313][ T1247] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.126107][ T1247] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 251.126130][ T1247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 251.126210][ T1247] usb 1-1: SerialNumber: syz [ 251.253404][ T5887] usb 5-1: 0:2 : does not exist [ 251.332651][ T5887] usb 5-1: USB disconnect, device number 16 [ 251.448461][ T1247] usb 1-1: 0:2 : does not exist [ 251.473926][ T6309] udevd[6309]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.515156][ T1247] usb 1-1: USB disconnect, device number 17 [ 251.642671][ T6078] udevd[6078]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.175756][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.300944][ T7648] gfs2: not a GFS2 filesystem [ 252.329120][ T7648] binfmt_misc: register: failed to install interpreter file ./file0 [ 253.054702][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.544459][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.598688][ T5811] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 253.695470][ T7676] gfs2: not a GFS2 filesystem [ 254.172353][ T5811] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 254.172380][ T5811] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 254.172397][ T5811] usb 5-1: config 220 has no interface number 2 [ 254.172484][ T5811] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 254.172507][ T5811] usb 5-1: config 220 interface 0 has no altsetting 0 [ 254.172523][ T5811] usb 5-1: config 220 interface 76 has no altsetting 0 [ 254.172539][ T5811] usb 5-1: config 220 interface 1 has no altsetting 0 [ 254.176523][ T5811] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 254.176548][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.176566][ T5811] usb 5-1: Product: syz [ 254.176578][ T5811] usb 5-1: Manufacturer: syz [ 254.176591][ T5811] usb 5-1: SerialNumber: syz [ 254.590919][ T5811] usb 5-1: selecting invalid altsetting 0 [ 254.591414][ T5811] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 254.591441][ T5811] uvcvideo 5-1:220.0: No valid video chain found. [ 254.651030][ T5811] usb 5-1: selecting invalid altsetting 0 [ 254.651067][ T5811] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 254.674672][ T5811] usb 5-1: USB disconnect, device number 17 [ 255.658972][ T7717] gfs2: not a GFS2 filesystem [ 255.690291][ T7717] binfmt_misc: register: failed to install interpreter file ./file0 [ 256.369464][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.369532][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.166470][ T7747] netlink: 272 bytes leftover after parsing attributes in process `syz.0.557'. [ 262.518027][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.459025][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.550843][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.776198][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.510107][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.387403][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.465757][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.661955][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.958966][ T5811] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 275.150757][ T5811] usb 1-1: Using ep0 maxpacket: 32 [ 275.153940][ T5811] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 275.153966][ T5811] usb 1-1: config 0 has no interface number 0 [ 275.154101][ T5811] usb 1-1: config 0 interface 12 has no altsetting 0 [ 275.157650][ T5811] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 275.157677][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.157695][ T5811] usb 1-1: Product: syz [ 275.157708][ T5811] usb 1-1: Manufacturer: syz [ 275.157720][ T5811] usb 1-1: SerialNumber: syz [ 275.181785][ T5811] usb 1-1: config 0 descriptor?? [ 275.848438][ T5811] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71 [ 275.848492][ T5811] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 275.848507][ T5811] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 275.848778][ T5811] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 275.881577][ T5811] usb 1-1: USB disconnect, device number 18 [ 276.083314][ T8006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.646'. [ 284.242759][ T1247] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 284.388797][ T1247] usb 3-1: Using ep0 maxpacket: 16 [ 284.396198][ T1247] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 284.396225][ T1247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.396242][ T1247] usb 3-1: Product: syz [ 284.396255][ T1247] usb 3-1: Manufacturer: syz [ 284.396267][ T1247] usb 3-1: SerialNumber: syz [ 284.505486][ T1247] usb 3-1: config 0 descriptor?? [ 284.575460][ T1247] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 284.733469][ T1247] gspca_sn9c2028: read1 error -32 [ 284.957054][ T8170] gfs2: not a GFS2 filesystem [ 284.959955][ T8170] binfmt_misc: register: failed to install interpreter file ./file0 [ 285.270833][ T1247] gspca_sn9c2028: read1 error -110 [ 285.270930][ T1247] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -110 [ 287.107335][ T5811] usb 3-1: USB disconnect, device number 18 [ 287.319089][ T8206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.726'. [ 290.306283][ T37] audit: type=1326 audit(1761043073.345:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8295 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f2bbefc9 code=0x7ffc0000 [ 290.349871][ T8298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.763'. [ 290.355573][ T37] audit: type=1326 audit(1761043073.365:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8295 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f2bbefc9 code=0x7ffc0000 [ 290.355623][ T37] audit: type=1326 audit(1761043073.385:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8295 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5f2bbefc9 code=0x7ffc0000 [ 290.355666][ T37] audit: type=1326 audit(1761043073.405:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8295 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f2bbefc9 code=0x7ffc0000 [ 290.357459][ T37] audit: type=1326 audit(1761043073.405:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8295 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f2bbefc9 code=0x7ffc0000 [ 290.357502][ T37] audit: type=1326 audit(1761043073.405:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8295 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f2bbefc9 code=0x7ffc0000 [ 290.357537][ T37] audit: type=1326 audit(1761043073.405:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8295 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f2bbefc9 code=0x7ffc0000 [ 290.357574][ T37] audit: type=1326 audit(1761043073.405:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8295 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe5f2bbefc9 code=0x7ffc0000 [ 290.357612][ T37] audit: type=1326 audit(1761043073.405:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8295 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f2bbefc9 code=0x7ffc0000 [ 290.357650][ T37] audit: type=1326 audit(1761043073.405:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8295 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f2bbefc9 code=0x7ffc0000 [ 291.668719][ T5935] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 291.818936][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 291.823203][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 291.828775][ T5935] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 291.828808][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.828825][ T5935] usb 1-1: Product: syz [ 291.828838][ T5935] usb 1-1: Manufacturer: syz [ 291.828850][ T5935] usb 1-1: SerialNumber: syz [ 291.891310][ T5935] usb 1-1: config 0 descriptor?? [ 292.033207][ T5935] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 292.033238][ T5935] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 292.652747][ T5935] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 293.070852][ T5935] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 293.070879][ T5935] em28xx 1-1:0.0: board has no eeprom [ 293.142976][ T5935] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 293.143003][ T5935] em28xx 1-1:0.0: dvb set to bulk mode. [ 293.144744][ T1247] em28xx 1-1:0.0: Binding DVB extension [ 293.225715][ T8345] netlink: 124 bytes leftover after parsing attributes in process `syz.1.781'. [ 293.256095][ T5935] usb 1-1: USB disconnect, device number 19 [ 293.258349][ T5935] em28xx 1-1:0.0: Disconnecting em28xx [ 293.276486][ T1247] em28xx 1-1:0.0: Registering input extension [ 293.288426][ T5935] em28xx 1-1:0.0: Closing input extension [ 293.343547][ T5935] em28xx 1-1:0.0: Freeing device [ 293.610675][ T6309] udevd[6309]: setting owner of /dev/bus/usb/001/019 to uid=0, gid=0 failed: No such file or directory [ 294.698697][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 295.844739][ T8361] netlink: 60 bytes leftover after parsing attributes in process `syz.1.784'. [ 296.558712][ T1247] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 296.580079][ T5811] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 297.439307][ T5811] usb 5-1: Using ep0 maxpacket: 16 [ 297.448392][ T5811] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 297.448419][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.448436][ T5811] usb 5-1: Product: syz [ 297.448447][ T5811] usb 5-1: Manufacturer: syz [ 297.448459][ T5811] usb 5-1: SerialNumber: syz [ 297.501585][ T1247] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 297.501611][ T1247] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 297.501627][ T1247] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 297.501644][ T1247] usb 1-1: config 220 has no interface number 2 [ 297.501717][ T1247] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 297.501748][ T1247] usb 1-1: config 220 interface 0 has no altsetting 0 [ 297.501764][ T1247] usb 1-1: config 220 interface 76 has no altsetting 0 [ 297.501785][ T1247] usb 1-1: config 220 interface 1 has no altsetting 0 [ 297.515534][ T1247] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 297.515561][ T1247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.515578][ T1247] usb 1-1: Product: syz [ 297.515590][ T1247] usb 1-1: Manufacturer: syz [ 297.515603][ T1247] usb 1-1: SerialNumber: syz [ 297.616572][ T5811] usb 5-1: config 0 descriptor?? [ 297.648523][ T5811] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 297.767101][ T1247] usb 1-1: selecting invalid altsetting 0 [ 297.781079][ T1247] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 297.781111][ T1247] uvcvideo 1-1:220.0: No valid video chain found. [ 297.828430][ T5811] gspca_sn9c2028: read1 error -32 [ 297.831655][ T1247] usb 1-1: selecting invalid altsetting 0 [ 297.831692][ T1247] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 297.855670][ T1247] usb 1-1: USB disconnect, device number 20 [ 298.339831][ T5811] gspca_sn9c2028: read1 error -110 [ 298.339926][ T5811] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -110 [ 298.759596][ T8404] netlink: 60 bytes leftover after parsing attributes in process `syz.1.802'. [ 300.021798][ T5935] usb 5-1: USB disconnect, device number 18 [ 302.008719][ T5935] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 302.158849][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 302.163448][ T5935] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 302.163465][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.163474][ T5935] usb 3-1: Product: syz [ 302.163481][ T5935] usb 3-1: Manufacturer: syz [ 302.163493][ T5935] usb 3-1: SerialNumber: syz [ 302.167507][ T5935] usb 3-1: config 0 descriptor?? [ 302.180712][ T5935] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 302.372179][ T5935] gspca_sn9c2028: read1 error -32 [ 302.878950][ T5935] gspca_sn9c2028: read1 error -110 [ 302.879044][ T5935] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -110 [ 306.742417][ T5935] usb 3-1: USB disconnect, device number 19 [ 308.261480][ T8501] netlink: 132 bytes leftover after parsing attributes in process `syz.0.836'. [ 308.691563][ T8516] gfs2: not a GFS2 filesystem [ 308.715545][ T8516] binfmt_misc: register: failed to install interpreter file ./file0 [ 309.743661][ T8531] netlink: 52 bytes leftover after parsing attributes in process `syz.1.844'. [ 313.652553][ T8562] gfs2: not a GFS2 filesystem [ 313.671949][ T8562] binfmt_misc: register: failed to install interpreter file ./file0 [ 315.231977][ T8594] gfs2: not a GFS2 filesystem [ 315.255990][ T8594] binfmt_misc: register: failed to install interpreter file ./file0 [ 317.284661][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.284731][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.738756][ T5887] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 319.888732][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 319.892250][ T5887] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 319.892274][ T5887] usb 3-1: config 0 has no interface number 0 [ 319.892317][ T5887] usb 3-1: config 0 interface 12 has no altsetting 0 [ 319.897497][ T5887] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 319.897523][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.897541][ T5887] usb 3-1: Product: syz [ 319.897553][ T5887] usb 3-1: Manufacturer: syz [ 319.897565][ T5887] usb 3-1: SerialNumber: syz [ 319.928416][ T5887] usb 3-1: config 0 descriptor?? [ 319.959163][ T5887] f81534 3-1:0.12: required endpoints missing [ 321.339193][ T37] kauditd_printk_skb: 324 callbacks suppressed [ 321.339210][ T37] audit: type=1326 audit(1761043104.385:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297049efc9 code=0x7ffc0000 [ 321.339251][ T37] audit: type=1326 audit(1761043104.385:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297049efc9 code=0x7ffc0000 [ 321.339287][ T37] audit: type=1326 audit(1761043104.385:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297049efc9 code=0x7ffc0000 [ 321.429848][ T37] audit: type=1326 audit(1761043104.485:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297049efc9 code=0x7ffc0000 [ 321.429898][ T37] audit: type=1326 audit(1761043104.485:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f297049efc9 code=0x7ffc0000 [ 321.429934][ T37] audit: type=1326 audit(1761043104.485:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297049efc9 code=0x7ffc0000 [ 321.429970][ T37] audit: type=1326 audit(1761043104.485:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297049efc9 code=0x7ffc0000 [ 321.430006][ T37] audit: type=1326 audit(1761043104.485:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297049efc9 code=0x7ffc0000 [ 321.431269][ T37] audit: type=1326 audit(1761043104.485:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297049efc9 code=0x7ffc0000 [ 321.431584][ T37] audit: type=1326 audit(1761043104.485:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f297049efc9 code=0x7ffc0000 [ 322.559306][ T5920] usb 3-1: USB disconnect, device number 20 [ 325.888717][ T5920] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 326.048854][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 326.051175][ T5920] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 326.051196][ T5920] usb 2-1: config 0 has no interface number 0 [ 326.051237][ T5920] usb 2-1: config 0 interface 12 has no altsetting 0 [ 326.053769][ T5920] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 326.053793][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.053810][ T5920] usb 2-1: Product: syz [ 326.053821][ T5920] usb 2-1: Manufacturer: syz [ 326.053832][ T5920] usb 2-1: SerialNumber: syz [ 326.089843][ T5920] usb 2-1: config 0 descriptor?? [ 326.134318][ T5920] f81534 2-1:0.12: required endpoints missing [ 326.288847][ T5935] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 326.445913][ T5935] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.445937][ T5935] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.448718][ T5935] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 326.448741][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 326.448758][ T5935] usb 1-1: SerialNumber: syz [ 326.697927][ T5935] usb 1-1: 0:2 : does not exist [ 326.778844][ T5935] usb 1-1: USB disconnect, device number 21 [ 326.939455][ T6309] udevd[6309]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.003411][ T5816] usb 2-1: USB disconnect, device number 8 [ 329.937111][ T8824] ubi31: attaching mtd0 [ 329.986488][ T8824] ubi31: scanning is finished [ 330.241841][ T8832] tmpfs: Bad value for 'mpol' [ 330.478712][ T8824] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 330.648686][ T5935] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 330.848771][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 330.851567][ T5935] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 330.851589][ T5935] usb 1-1: config 0 has no interface number 0 [ 330.851635][ T5935] usb 1-1: config 0 interface 12 has no altsetting 0 [ 330.854765][ T5935] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 330.854790][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.854807][ T5935] usb 1-1: Product: syz [ 330.854820][ T5935] usb 1-1: Manufacturer: syz [ 330.854832][ T5935] usb 1-1: SerialNumber: syz [ 331.013546][ T5935] usb 1-1: config 0 descriptor?? [ 331.034544][ T5935] f81534 1-1:0.12: required endpoints missing [ 331.572792][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.846815][ T5920] usb 1-1: USB disconnect, device number 22 [ 334.195331][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.493400][ T8895] gfs2: not a GFS2 filesystem [ 334.520315][ T8895] binfmt_misc: register: failed to install interpreter file ./file0 [ 334.525311][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.232990][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.538955][ T5811] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 336.568755][ T5887] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 336.718752][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 336.721489][ T5887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.721512][ T5887] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.724604][ T5887] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.724630][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.724648][ T5887] usb 5-1: Product: syz [ 336.724660][ T5887] usb 5-1: Manufacturer: syz [ 336.724681][ T5887] usb 5-1: SerialNumber: syz [ 337.157278][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 337.628726][ T5816] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 337.652430][ T5811] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 337.652456][ T5811] usb 2-1: config 0 has no interface number 0 [ 337.652505][ T5811] usb 2-1: config 0 interface 12 has no altsetting 0 [ 337.655722][ T5811] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 337.655746][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.655764][ T5811] usb 2-1: Product: syz [ 337.655776][ T5811] usb 2-1: Manufacturer: syz [ 337.655789][ T5811] usb 2-1: SerialNumber: syz [ 337.791709][ T5816] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 337.791736][ T5816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.791762][ T5816] usb 3-1: config 0 has no interfaces? [ 337.791791][ T5816] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 337.791811][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.857615][ T5811] usb 2-1: config 0 descriptor?? [ 337.898222][ T5816] usb 3-1: config 0 descriptor?? [ 337.908999][ T5811] f81534 2-1:0.12: required endpoints missing [ 338.033461][ T5887] usb 5-1: 0:2 : does not exist [ 338.037619][ T5887] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 338.376455][ T5887] usb 5-1: USB disconnect, device number 19 [ 338.593673][ T6309] udevd[6309]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.349990][ T5887] usb 2-1: USB disconnect, device number 9 [ 339.929943][ T5816] usb 3-1: USB disconnect, device number 21 [ 342.199289][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.368699][ T1247] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 342.518663][ T1247] usb 5-1: Using ep0 maxpacket: 32 [ 342.531571][ T1247] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 342.531596][ T1247] usb 5-1: config 0 has no interface number 0 [ 342.531667][ T1247] usb 5-1: config 0 interface 12 has no altsetting 0 [ 342.561663][ T1247] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 342.561680][ T1247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.561690][ T1247] usb 5-1: Product: syz [ 342.561697][ T1247] usb 5-1: Manufacturer: syz [ 342.561703][ T1247] usb 5-1: SerialNumber: syz [ 342.566671][ T1247] usb 5-1: config 0 descriptor?? [ 345.688084][ T1247] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71 [ 345.688116][ T1247] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 345.688125][ T1247] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 345.688178][ T1247] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 345.743903][ T1247] usb 5-1: USB disconnect, device number 20 [ 345.992865][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.242176][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.364515][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.820726][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.788770][ T5816] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 347.950031][ T5816] usb 3-1: Using ep0 maxpacket: 16 [ 347.966577][ T5816] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 347.966613][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.966632][ T5816] usb 3-1: Product: syz [ 347.966644][ T5816] usb 3-1: Manufacturer: syz [ 347.966657][ T5816] usb 3-1: SerialNumber: syz [ 348.040078][ T5816] usb 3-1: config 0 descriptor?? [ 348.066396][ T5816] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 348.256032][ T5816] gspca_sn9c2028: read1 error -32 [ 348.758920][ T5816] gspca_sn9c2028: read1 error -110 [ 348.759015][ T5816] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -110 [ 349.181837][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.450948][ T9130] FAT-fs (loop3): unable to read boot sector [ 349.970583][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.351625][ T5816] usb 3-1: USB disconnect, device number 22 [ 350.758801][ T1247] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 350.908792][ T1247] usb 1-1: Using ep0 maxpacket: 16 [ 350.911518][ T1247] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.911540][ T1247] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.914910][ T1247] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.914936][ T1247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.914954][ T1247] usb 1-1: Product: syz [ 350.914966][ T1247] usb 1-1: Manufacturer: syz [ 350.914978][ T1247] usb 1-1: SerialNumber: syz [ 351.204966][ T1247] usb 1-1: 0:2 : does not exist [ 351.224905][ T1247] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 351.308021][ T1247] usb 1-1: USB disconnect, device number 23 [ 351.585677][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.643231][ T6309] udevd[6309]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.762044][ T9182] autofs: Bad value for 'fd' [ 356.186072][ T1247] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 356.258701][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 356.349241][ T1247] usb 5-1: Using ep0 maxpacket: 16 [ 356.369628][ T1247] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 356.369657][ T1247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.369669][ T1247] usb 5-1: Product: syz [ 356.369676][ T1247] usb 5-1: Manufacturer: syz [ 356.369683][ T1247] usb 5-1: SerialNumber: syz [ 356.408639][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 356.410419][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.410433][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.412502][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.412516][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.412525][ T10] usb 1-1: Product: syz [ 356.412532][ T10] usb 1-1: Manufacturer: syz [ 356.412539][ T10] usb 1-1: SerialNumber: syz [ 356.477156][ T1247] usb 5-1: config 0 descriptor?? [ 356.485593][ T1247] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 356.693017][ T1247] gspca_sn9c2028: read1 error -32 [ 356.718869][ T10] usb 1-1: 0:2 : does not exist [ 356.748190][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 357.814976][ T1247] gspca_sn9c2028: read1 error -110 [ 357.815076][ T1247] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -110 [ 357.909033][ T10] usb 1-1: USB disconnect, device number 24 [ 358.107646][ T6309] udevd[6309]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.154382][ T10] usb 5-1: USB disconnect, device number 21 [ 358.781742][ T9276] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 358.781759][ T9276] CIFS mount error: No usable UNC path provided in device string! [ 358.781759][ T9276] [ 358.781925][ T9276] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 359.508752][ T1247] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 359.668705][ T1247] usb 5-1: Using ep0 maxpacket: 32 [ 359.691301][ T1247] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 359.691327][ T1247] usb 5-1: config 0 has no interface number 0 [ 359.691376][ T1247] usb 5-1: config 0 interface 12 has no altsetting 0 [ 359.695545][ T1247] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 359.695573][ T1247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.695591][ T1247] usb 5-1: Product: syz [ 359.695603][ T1247] usb 5-1: Manufacturer: syz [ 359.695616][ T1247] usb 5-1: SerialNumber: syz [ 359.784669][ T1247] usb 5-1: config 0 descriptor?? [ 361.381861][ T1247] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71 [ 361.381918][ T1247] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 361.381933][ T1247] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 361.382028][ T1247] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 361.442474][ T1247] usb 5-1: USB disconnect, device number 22 [ 361.474501][ T6309] udevd[6309]: setting owner of /dev/bus/usb/005/022 to uid=0, gid=0 failed: No such file or directory [ 362.678942][ T9337] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1147'. [ 363.120327][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 363.638876][ T31] usb 2-1: device descriptor read/64, error -71 [ 363.888674][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 364.018771][ T31] usb 2-1: device descriptor read/64, error -71 [ 364.132255][ T5816] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 364.132862][ T31] usb usb2-port1: attempt power cycle [ 364.512403][ T5816] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.512429][ T5816] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.514254][ T5816] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 364.514280][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 364.514297][ T5816] usb 3-1: SerialNumber: syz [ 364.548663][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 364.595875][ T31] usb 2-1: device descriptor read/8, error -71 [ 365.020150][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 365.190010][ T31] usb 2-1: device descriptor read/8, error -71 [ 365.237431][ T5816] usb 3-1: 0:2 : does not exist [ 365.277198][ T5816] usb 3-1: USB disconnect, device number 23 [ 365.299522][ T31] usb usb2-port1: unable to enumerate USB device [ 365.349816][ T6309] udevd[6309]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.518193][ T9385] CIFS mount error: No usable UNC path provided in device string! [ 365.518193][ T9385] [ 365.518331][ T9385] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 367.169090][ T9398] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1168'. [ 368.092430][ T5935] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 368.518665][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 368.520475][ T5935] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.520496][ T5935] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.522731][ T5935] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 368.522752][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.522761][ T5935] usb 3-1: Product: syz [ 368.522768][ T5935] usb 3-1: Manufacturer: syz [ 368.522775][ T5935] usb 3-1: SerialNumber: syz [ 368.797397][ T5935] usb 3-1: 0:2 : does not exist [ 368.821146][ T5935] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 368.925294][ T5935] usb 3-1: USB disconnect, device number 24 [ 369.034426][ T6309] udevd[6309]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.288847][ T5874] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 369.418847][ T5874] usb 1-1: device descriptor read/64, error -71 [ 370.970878][ T5874] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 371.098678][ T5874] usb 1-1: device descriptor read/64, error -71 [ 371.210995][ T5874] usb usb1-port1: attempt power cycle [ 371.620165][ T5874] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 371.652509][ T5874] usb 1-1: device descriptor read/8, error -71 [ 372.738749][ T5874] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 372.958636][ T5874] usb 1-1: device not accepting address 28, error -71 [ 372.959085][ T5874] usb usb1-port1: unable to enumerate USB device [ 375.439525][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.455994][ T9528] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 375.456020][ T9528] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 375.631865][ T9539] FAT-fs (loop1): unable to read boot sector [ 375.945094][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.009774][ T9536] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 376.058427][ T9528] vhci_hcd vhci_hcd.0: Device attached [ 376.094690][ T5935] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 376.151450][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.238684][ T5935] usb 3-1: device descriptor read/64, error -71 [ 376.368457][ T9529] vhci_hcd: connection closed [ 376.390354][ T5816] usb 42-1: SetAddress Request (2) to port 0 [ 376.390442][ T5816] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 376.399274][ T1494] vhci_hcd: stop threads [ 376.410200][ T1494] vhci_hcd: release socket [ 376.431244][ T1494] vhci_hcd: disconnect device [ 376.487690][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.568888][ T5935] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 376.717301][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.815359][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.817493][ T5935] usb 3-1: device descriptor read/64, error -71 [ 376.828187][ T9556] ubi31: attaching mtd0 [ 376.831882][ T9556] ubi31: scanning is finished [ 377.055749][ T5935] usb usb3-port1: attempt power cycle [ 377.292481][ T9556] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 377.292507][ T9556] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 377.292522][ T9556] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 377.292537][ T9556] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 377.292552][ T9556] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 377.292560][ T9556] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 377.292568][ T9556] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 779075955 [ 377.292578][ T9556] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 377.295106][ T9561] ubi31: background thread "ubi_bgt31d" started, PID 9561 [ 377.466698][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.467701][ T5935] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 377.479534][ T5935] usb 3-1: device descriptor read/8, error -71 [ 377.719257][ T5935] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 377.749507][ T5935] usb 3-1: device descriptor read/8, error -71 [ 377.859242][ T5935] usb usb3-port1: unable to enumerate USB device [ 378.650467][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.727783][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.727857][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.786272][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.573602][ T1247] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 379.740819][ T1247] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.740836][ T1247] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 379.742248][ T1247] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 379.742265][ T1247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 379.742274][ T1247] usb 1-1: SerialNumber: syz [ 380.090067][ T1247] usb 1-1: 0:2 : does not exist [ 380.133861][ T1247] usb 1-1: USB disconnect, device number 29 [ 380.196998][ T6309] udevd[6309]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.510211][ T9594] FAT-fs (loop5): unable to read boot sector [ 381.565342][ T5816] usb 42-1: device descriptor read/8, error -110 [ 381.676551][ T9604] gfs2: not a GFS2 filesystem [ 381.700084][ T9604] binfmt_misc: register: failed to install interpreter file ./file0 [ 382.409838][ T5816] usb usb42-port1: attempt power cycle [ 383.066788][ T5816] usb usb42-port1: unable to enumerate USB device [ 384.648723][ T9634] /dev/nullb0: Can't open blockdev [ 384.651881][ T9634] binfmt_misc: register: failed to install interpreter file ./file0 [ 386.608131][ T9654] FAT-fs (loop5): unable to read boot sector [ 386.960999][ T9651] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 387.691762][ T9663] gfs2: not a GFS2 filesystem [ 387.695306][ T9663] binfmt_misc: register: failed to install interpreter file ./file0 [ 389.891963][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.085336][ T9731] autofs: Unknown parameter 'fd0x0000000000000000' [ 393.457922][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.636328][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.956539][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.956981][ T5874] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 394.138818][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 394.142522][ T5874] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 394.142540][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.142550][ T5874] usb 3-1: Product: syz [ 394.142557][ T5874] usb 3-1: Manufacturer: syz [ 394.142563][ T5874] usb 3-1: SerialNumber: syz [ 394.201707][ T5874] usb 3-1: config 0 descriptor?? [ 394.222569][ T5874] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 394.260386][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 394.265042][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 394.266955][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 394.268481][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 394.312624][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 394.439741][ T5874] gspca_sn9c2028: read1 error -32 [ 394.949192][ T5874] gspca_sn9c2028: read1 error -110 [ 394.949287][ T5874] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -110 [ 395.005565][ T1181] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.372372][ T1181] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.402792][ T5874] usb 3-1: USB disconnect, device number 29 [ 395.891387][ T1181] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.927494][ T9739] chnl_net:caif_netlink_parms(): no params data found [ 396.184958][ T1181] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.294609][ T9771] autofs: Unknown parameter 'fd0x0000000000000000' [ 396.406060][ T5823] Bluetooth: hci1: command tx timeout [ 396.676590][ T9739] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.676781][ T9739] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.677020][ T9739] bridge_slave_0: entered allmulticast mode [ 396.682215][ T9739] bridge_slave_0: entered promiscuous mode [ 396.686130][ T9739] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.686339][ T9739] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.686543][ T9739] bridge_slave_1: entered allmulticast mode [ 396.690747][ T9739] bridge_slave_1: entered promiscuous mode [ 396.734243][ T1247] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 396.891551][ T1247] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 396.891583][ T1247] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 396.891618][ T1247] usb 2-1: config 220 interface 0 has no altsetting 0 [ 396.945113][ T1247] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 396.945142][ T1247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.945159][ T1247] usb 2-1: Product: syz [ 396.945172][ T1247] usb 2-1: Manufacturer: syz [ 396.945184][ T1247] usb 2-1: SerialNumber: syz [ 397.172972][ T9739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.186376][ T9739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.347304][ T9789] FAT-fs (loop1): unable to read boot sector [ 397.626709][ T1247] uvcvideo 2-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 397.626742][ T1247] uvcvideo 2-1:220.0: No valid video chain found. [ 397.670864][ T1247] usb 2-1: USB disconnect, device number 14 [ 398.026597][ T9739] team0: Port device team_slave_0 added [ 398.070171][ T9739] team0: Port device team_slave_1 added [ 398.531937][ T5823] Bluetooth: hci1: command tx timeout [ 399.172025][ T9804] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 399.378717][ T1247] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 399.435477][ T9739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.435494][ T9739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.435518][ T9739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.438433][ T9739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.438447][ T9739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.438471][ T9739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.558699][ T1247] usb 2-1: Using ep0 maxpacket: 16 [ 399.563531][ T1247] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 399.563553][ T1247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.563563][ T1247] usb 2-1: Product: syz [ 399.563570][ T1247] usb 2-1: Manufacturer: syz [ 399.563577][ T1247] usb 2-1: SerialNumber: syz [ 399.567661][ T1247] usb 2-1: config 0 descriptor?? [ 399.612170][ T1247] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 399.990835][ T1247] gspca_sn9c2028: read1 error -32 [ 400.510548][ T1247] gspca_sn9c2028: read1 error -110 [ 400.510650][ T1247] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -110 [ 400.538716][ T5823] Bluetooth: hci1: command tx timeout [ 401.485081][ T9820] ALSA: mixer_oss: invalid OSS volume '' [ 401.485102][ T9820] ALSA: mixer_oss: invalid OSS volume '' [ 401.485120][ T9820] ALSA: mixer_oss: invalid OSS volume '' [ 401.556526][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.031105][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.997904][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.006737][ T1247] usb 2-1: USB disconnect, device number 15 [ 403.040573][ T5823] Bluetooth: hci1: command tx timeout [ 403.813345][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.904161][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.041750][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.149634][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.291299][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.664762][ T9847] CIFS mount error: No usable UNC path provided in device string! [ 404.664762][ T9847] [ 404.664853][ T9847] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 405.180100][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.611043][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.040107][ C0] vkms_vblank_simulate: vblank timer overrun [ 407.432253][ T1181] bond0 (unregistering): Released all slaves [ 407.942798][ T9739] hsr_slave_0: entered promiscuous mode [ 407.944145][ T9739] hsr_slave_1: entered promiscuous mode [ 407.980361][ T9739] debugfs: 'hsr0' already exists in 'hsr' [ 407.980404][ T9739] Cannot create hsr debugfs directory [ 409.814884][ T9888] CIFS mount error: No usable UNC path provided in device string! [ 409.814884][ T9888] [ 409.814947][ T9888] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 410.388729][ T5874] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 410.562706][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 410.580249][ T5874] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 410.580277][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.580295][ T5874] usb 2-1: Product: syz [ 410.580307][ T5874] usb 2-1: Manufacturer: syz [ 410.580333][ T5874] usb 2-1: SerialNumber: syz [ 410.623111][ T5874] usb 2-1: config 0 descriptor?? [ 410.652821][ T5874] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 410.833077][ T5874] gspca_sn9c2028: read1 error -32 [ 410.889794][ T5920] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 411.069530][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 411.517401][ T9892] ALSA: mixer_oss: invalid OSS volume '' [ 411.517422][ T9892] ALSA: mixer_oss: invalid OSS volume '' [ 411.517434][ T9892] ALSA: mixer_oss: invalid OSS volume '' [ 411.543195][ T5874] gspca_sn9c2028: read1 error -110 [ 411.543296][ T5874] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -110 [ 411.938133][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.785310][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.928238][ T5920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.928264][ T5920] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.936223][ T5920] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 412.936252][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.936270][ T5920] usb 5-1: Product: syz [ 412.936283][ T5920] usb 5-1: Manufacturer: syz [ 412.936295][ T5920] usb 5-1: SerialNumber: syz [ 412.970045][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.143949][ T1247] usb 2-1: USB disconnect, device number 16 [ 413.241037][ T5920] usb 5-1: 0:2 : does not exist [ 413.246689][ T5920] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 413.303966][ T5920] usb 5-1: USB disconnect, device number 23 [ 413.421887][ T6078] udevd[6078]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.490954][ T1181] hsr_slave_0: left promiscuous mode [ 413.537347][ T1181] hsr_slave_1: left promiscuous mode [ 413.646727][ T1181] veth1_macvtap: left promiscuous mode [ 413.647025][ T1181] veth0_macvtap: left promiscuous mode [ 413.647411][ T1181] veth1_vlan: left promiscuous mode [ 413.658204][ T1181] veth0_vlan: left promiscuous mode [ 414.182540][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.406464][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.491333][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.579106][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.689298][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.464844][ T9938] No control pipe specified [ 417.852702][ T9960] No control pipe specified [ 418.899659][ T5887] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 419.048772][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 419.079336][ T5887] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 419.079372][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.079389][ T5887] usb 1-1: Product: syz [ 419.079401][ T5887] usb 1-1: Manufacturer: syz [ 419.079412][ T5887] usb 1-1: SerialNumber: syz [ 419.091034][ T5887] usb 1-1: config 0 descriptor?? [ 419.185192][ T5887] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 419.439315][ T5887] gspca_sn9c2028: read1 error -32 [ 419.955160][ T5887] gspca_sn9c2028: read1 error -110 [ 419.955222][ T5887] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -110 [ 420.272271][ T5887] usb 1-1: USB disconnect, device number 30 [ 421.534758][ T9986] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 422.749449][ T9993] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 432.468784][ T5874] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 432.668701][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 432.672890][ T5874] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 432.672909][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.672919][ T5874] usb 3-1: Product: syz [ 432.672925][ T5874] usb 3-1: Manufacturer: syz [ 432.672932][ T5874] usb 3-1: SerialNumber: syz [ 432.677786][ T5874] usb 3-1: config 0 descriptor?? [ 432.997674][T10042] CIFS mount error: No usable UNC path provided in device string! [ 432.997674][T10042] [ 432.997739][T10042] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 433.575458][ T5874] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 433.625519][ T5874] gspca_sn9c2028: read1 error -32 [ 434.145973][ T5874] gspca_sn9c2028: read1 error -110 [ 434.146069][ T5874] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -110 [ 434.588791][ T5874] usb 3-1: USB disconnect, device number 30 [ 434.849696][T10059] gfs2: not a GFS2 filesystem [ 434.871670][T10059] binfmt_misc: register: failed to install interpreter file ./file0 [ 435.740279][ T5874] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 435.889950][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 435.891565][ T5874] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.891579][ T5874] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.894130][ T5874] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 435.894145][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.894155][ T5874] usb 3-1: Product: syz [ 435.894162][ T5874] usb 3-1: Manufacturer: syz [ 435.894169][ T5874] usb 3-1: SerialNumber: syz [ 436.174020][ T5874] usb 3-1: 0:2 : does not exist [ 436.197222][ T5874] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 436.252579][ T5874] usb 3-1: USB disconnect, device number 31 [ 436.337998][T10034] udevd[10034]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.071219][T10088] CIFS mount error: No usable UNC path provided in device string! [ 437.071219][T10088] [ 437.071284][T10088] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 438.224371][T10097] gfs2: not a GFS2 filesystem [ 438.244964][T10097] binfmt_misc: register: failed to install interpreter file ./file0 [ 440.206065][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.206150][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.492405][T10111] ubi: mtd0 is already attached to ubi31 [ 440.851904][ T9739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 440.973415][ T9739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 441.062287][ T9739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 441.127339][ T9739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 441.586676][ T9739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.218204][T10154] CIFS mount error: No usable UNC path provided in device string! [ 442.218204][T10154] [ 442.218267][T10154] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 442.775935][ T9739] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.820915][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.821151][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.857672][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.865021][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.274022][ T9739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.462294][ T9739] veth0_vlan: entered promiscuous mode [ 449.512528][ T9739] veth1_vlan: entered promiscuous mode [ 449.576433][ T9739] veth0_macvtap: entered promiscuous mode [ 449.589020][ T9739] veth1_macvtap: entered promiscuous mode [ 450.671559][ T9739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.712819][ T9739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.781248][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.800844][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.801844][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.827961][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.861579][T10209] No control pipe specified [ 452.407833][T10229] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 457.901633][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 457.963196][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 457.965747][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 458.013728][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 458.014509][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 458.235158][T10265] No control pipe specified [ 460.058754][ T5823] Bluetooth: hci5: command tx timeout [ 461.031933][T10277] syz.4.1397 (10277) used greatest stack depth: 17848 bytes left [ 462.138784][ T5823] Bluetooth: hci5: command tx timeout [ 462.890854][T10309] CIFS mount error: No usable UNC path provided in device string! [ 462.890854][T10309] [ 462.890918][T10309] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 463.948626][ T31] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 464.016625][T10314] No control pipe specified [ 464.265107][ T5823] Bluetooth: hci5: command tx timeout [ 464.280126][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.280143][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 464.280166][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 464.280177][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.283237][ T31] usb 1-1: config 0 descriptor?? [ 464.297951][ T31] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 464.385140][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.356093][ T10] usb 1-1: USB disconnect, device number 31 [ 466.054184][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.309021][ T5823] Bluetooth: hci5: command tx timeout [ 466.641079][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.747770][T10261] chnl_net:caif_netlink_parms(): no params data found [ 467.254814][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.868205][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.185603][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.648836][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.728862][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.179124][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.358814][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.657576][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.376851][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.426370][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.216784][T10372] No control pipe specified [ 473.164174][T10261] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.164335][T10261] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.164558][T10261] bridge_slave_0: entered allmulticast mode [ 473.208860][T10261] bridge_slave_0: entered promiscuous mode [ 473.339969][T10261] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.340047][T10261] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.340170][T10261] bridge_slave_1: entered allmulticast mode [ 473.341731][T10261] bridge_slave_1: entered promiscuous mode [ 473.856940][T10261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.866436][T10261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.672784][T10261] team0: Port device team_slave_0 added [ 475.674931][T10261] team0: Port device team_slave_1 added [ 476.237233][ T58] bridge_slave_1: left allmulticast mode [ 476.237252][ T58] bridge_slave_1: left promiscuous mode [ 476.248762][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.434936][ T58] bridge_slave_0: left allmulticast mode [ 476.434963][ T58] bridge_slave_0: left promiscuous mode [ 476.435199][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.621503][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.667854][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.055280][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.347001][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.062164][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.039630][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.079342][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.108768][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 483.121628][ T58] bond0 (unregistering): Released all slaves [ 483.230651][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.233297][T10261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.233313][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.233342][T10261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.261340][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 483.261385][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.261408][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.261427][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 483.262892][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 483.262915][ T31] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 483.262932][ T31] usb 2-1: Manufacturer: syz [ 483.282011][ T31] usb 2-1: config 0 descriptor?? [ 483.366178][T10261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.366196][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.366221][T10261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.540764][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.583227][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.842960][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.919129][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 483.919249][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 483.939365][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.957488][ T31] usb 2-1: USB disconnect, device number 17 [ 484.346912][ C0] vkms_vblank_simulate: vblank timer overrun [ 484.384968][T10452] No control pipe specified [ 485.191696][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.575061][T10261] hsr_slave_0: entered promiscuous mode [ 485.582226][T10261] hsr_slave_1: entered promiscuous mode [ 485.583236][T10261] debugfs: 'hsr0' already exists in 'hsr' [ 485.583260][T10261] Cannot create hsr debugfs directory [ 485.849166][ T58] hsr_slave_0: left promiscuous mode [ 486.044692][ T58] hsr_slave_1: left promiscuous mode [ 486.047210][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.047469][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.114917][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.114944][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.955181][ T58] veth1_macvtap: left promiscuous mode [ 486.955292][ T58] veth0_macvtap: left promiscuous mode [ 486.955546][ T58] veth1_vlan: left promiscuous mode [ 486.955736][ T58] veth0_vlan: left promiscuous mode [ 489.883125][T10491] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 490.607842][T10501] No control pipe specified [ 491.828329][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.694900][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.938653][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.017140][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.148748][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.193143][ T58] team0 (unregistering): Port device team_slave_1 removed [ 493.354470][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.496862][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.662805][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.749679][ T58] team0 (unregistering): Port device team_slave_0 removed [ 494.079146][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.216553][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.333220][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.380146][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.547834][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.999568][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.048285][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.193922][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.263259][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.423142][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.491936][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.422359][T10531] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 499.890510][T10539] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 501.691839][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.691905][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.824223][T10261] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 505.897439][T10261] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 506.081744][T10261] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 506.186211][T10261] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 506.791544][T10261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.831041][T10261] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.852865][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.853096][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.885268][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.885413][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.187220][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.756249][T10261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.560183][T10261] veth0_vlan: entered promiscuous mode [ 510.620684][T10261] veth1_vlan: entered promiscuous mode [ 510.878924][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.228193][T10261] veth0_macvtap: entered promiscuous mode [ 512.389484][T10261] veth1_macvtap: entered promiscuous mode [ 512.757743][T10261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.930595][T10261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.979245][T10711] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 516.094272][T10725] No control pipe specified [ 516.604003][T10733] fuse: Bad value for 'fd' [ 517.716753][T10738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 517.723166][T10738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 517.730546][T10738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 517.737464][T10738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 517.738197][T10738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 519.819158][T10738] Bluetooth: hci1: command tx timeout [ 520.235458][T10759] No control pipe specified [ 522.032467][T10738] Bluetooth: hci1: command tx timeout [ 522.044857][T10767] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 524.100559][T10783] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 524.104723][T10738] Bluetooth: hci1: command tx timeout [ 526.139068][T10738] Bluetooth: hci1: command tx timeout [ 527.944781][T10735] chnl_net:caif_netlink_parms(): no params data found [ 529.598809][ T31] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 529.881293][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.881318][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.884407][ T31] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 529.884432][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 529.884449][ T31] usb 5-1: SerialNumber: syz [ 529.967166][T10735] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.967644][T10735] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.968302][T10735] bridge_slave_0: entered allmulticast mode [ 529.996361][T10735] bridge_slave_0: entered promiscuous mode [ 530.008889][T10735] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.009210][T10735] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.009547][T10735] bridge_slave_1: entered allmulticast mode [ 530.013401][T10735] bridge_slave_1: entered promiscuous mode [ 530.154275][ T31] usb 5-1: 0:2 : does not exist [ 530.446530][T10830] No control pipe specified [ 530.475811][ T31] usb 5-1: USB disconnect, device number 24 [ 530.802243][T10536] udevd[10536]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.037066][T10735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.110776][T10735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.822552][T10735] team0: Port device team_slave_0 added [ 531.993716][T10735] team0: Port device team_slave_1 added [ 532.224871][ T58] bridge_slave_1: left allmulticast mode [ 532.224891][ T58] bridge_slave_1: left promiscuous mode [ 532.225048][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.324796][ T58] bridge_slave_0: left allmulticast mode [ 532.324824][ T58] bridge_slave_0: left promiscuous mode [ 532.343874][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.608401][T10877] tmpfs: Bad value for 'mpol' [ 537.368907][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 537.528165][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.528190][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.529779][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 537.529804][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 537.529822][ T10] usb 2-1: SerialNumber: syz [ 537.789079][ T5816] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 537.789232][ T31] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 537.854434][ T10] usb 2-1: 0:2 : does not exist [ 537.885835][ T10] usb 2-1: USB disconnect, device number 18 [ 537.971794][ T5816] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 537.971823][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.977845][ T31] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 537.977871][ T31] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 537.977903][ T31] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 537.977928][ T31] usb 5-1: config 220 has no interface number 2 [ 537.977999][ T31] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 537.978024][ T31] usb 5-1: config 220 interface 0 has no altsetting 0 [ 537.978041][ T31] usb 5-1: config 220 interface 76 has no altsetting 0 [ 537.978057][ T31] usb 5-1: config 220 interface 1 has no altsetting 0 [ 537.980996][ T31] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 537.981025][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.981043][ T31] usb 5-1: Product: syz [ 537.981058][ T31] usb 5-1: Manufacturer: syz [ 537.981089][ T31] usb 5-1: SerialNumber: syz [ 537.988165][ T5816] usb 1-1: config 0 descriptor?? [ 538.053125][T10536] udevd[10536]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.373104][ T31] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 538.373143][ T31] uvcvideo 5-1:220.0: No valid video chain found. [ 538.419205][ T31] usb 5-1: USB disconnect, device number 25 [ 538.842466][ T31] usb 1-1: USB disconnect, device number 32 [ 540.905369][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.779525][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.030902][ T58] bond0 (unregistering): Released all slaves [ 543.058294][T10923] netlink: 'syz.0.1513': attribute type 12 has an invalid length. [ 543.058318][T10923] netlink: 'syz.0.1513': attribute type 29 has an invalid length. [ 543.058330][T10923] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1513'. [ 543.059908][T10735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.059923][T10735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.059947][T10735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.109784][T10735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.109800][T10735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.109825][T10735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.593949][T10735] hsr_slave_0: entered promiscuous mode [ 544.613510][T10735] hsr_slave_1: entered promiscuous mode [ 544.614101][T10735] debugfs: 'hsr0' already exists in 'hsr' [ 544.614116][T10735] Cannot create hsr debugfs directory [ 545.019727][ T58] hsr_slave_0: left promiscuous mode [ 545.054666][T10945] CIFS mount error: No usable UNC path provided in device string! [ 545.054666][T10945] [ 545.054679][T10945] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 545.149153][ T58] hsr_slave_1: left promiscuous mode [ 545.150942][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.150960][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.175832][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.175852][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.421003][ T58] veth1_macvtap: left promiscuous mode [ 545.421117][ T58] veth0_macvtap: left promiscuous mode [ 545.421392][ T58] veth1_vlan: left promiscuous mode [ 545.421582][ T58] veth0_vlan: left promiscuous mode [ 546.701481][ T10] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 546.857511][ T10] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 546.857530][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.887953][ T10] usb 5-1: config 0 descriptor?? [ 547.929668][ T7350] usb 5-1: USB disconnect, device number 26 [ 550.996844][ T58] team0 (unregistering): Port device team_slave_1 removed [ 551.043416][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 551.056561][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 551.061587][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 551.064064][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 551.065000][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 551.309313][ T58] team0 (unregistering): Port device team_slave_0 removed [ 553.098715][ T5823] Bluetooth: hci5: command tx timeout [ 553.670631][T10967] geneve2: entered promiscuous mode [ 553.670650][T10967] geneve2: entered allmulticast mode [ 554.359893][ T31] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 554.436879][T10993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.521403][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.521429][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 554.523001][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 554.523028][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 554.523046][ T31] usb 1-1: SerialNumber: syz [ 554.895144][ T31] usb 1-1: 0:2 : does not exist [ 554.934515][ T31] usb 1-1: USB disconnect, device number 33 [ 555.194461][ T5823] Bluetooth: hci5: command tx timeout [ 555.215749][T10996] udevd[10996]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.372099][T11017] /dev/nullb0: Can't open blockdev [ 557.958610][ T5823] Bluetooth: hci5: command tx timeout [ 558.176677][T11020] No control pipe specified [ 559.088206][T10970] chnl_net:caif_netlink_parms(): no params data found [ 559.420290][T11026] /dev/nullb0: Can't open blockdev [ 559.980931][ T5823] Bluetooth: hci5: command tx timeout [ 562.008816][ T1162] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.575493][T11055] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 563.050292][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.050361][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.554074][ T1162] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.728872][ T7350] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 564.898820][ T7350] usb 2-1: Using ep0 maxpacket: 16 [ 564.966117][ T7350] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 564.966146][ T7350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.966164][ T7350] usb 2-1: Product: syz [ 564.966177][ T7350] usb 2-1: Manufacturer: syz [ 564.966190][ T7350] usb 2-1: SerialNumber: syz [ 565.198828][ T7350] usb 2-1: config 0 descriptor?? [ 565.496006][ T7350] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 565.663727][ T1162] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.693243][ T7350] gspca_sn9c2028: read1 error -32 [ 565.713430][T10970] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.713601][T10970] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.713826][T10970] bridge_slave_0: entered allmulticast mode [ 565.727018][T10970] bridge_slave_0: entered promiscuous mode [ 565.745360][T10970] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.745541][T10970] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.745789][T10970] bridge_slave_1: entered allmulticast mode [ 565.749829][T10970] bridge_slave_1: entered promiscuous mode [ 566.306530][ T7350] gspca_sn9c2028: read1 error -110 [ 566.306618][ T7350] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -110 [ 567.234933][T11094] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 567.273409][ T1162] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.308172][ T5874] usb 2-1: USB disconnect, device number 19 [ 567.338415][T10970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.422780][T10970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.895140][T10970] team0: Port device team_slave_0 added [ 569.164496][T10970] team0: Port device team_slave_1 added [ 569.208702][ T5921] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 569.351248][T10735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 569.352336][T11109] fuse: Bad value for 'fd' [ 569.652531][ T5921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.652548][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 569.654063][ T5921] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 569.654088][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 569.654106][ T5921] usb 2-1: SerialNumber: syz [ 569.980749][T10735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 570.150683][ T5921] usb 2-1: 0:2 : does not exist [ 570.172561][ T5921] usb 2-1: USB disconnect, device number 20 [ 570.207773][T10970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.207789][T10970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.207811][T10970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.262846][T10735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 570.463168][T10996] udevd[10996]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.720001][T10970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.720012][T10970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.720026][T10970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.738654][T10735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 572.110944][T10970] hsr_slave_0: entered promiscuous mode [ 572.118000][T10970] hsr_slave_1: entered promiscuous mode [ 572.122310][T10970] debugfs: 'hsr0' already exists in 'hsr' [ 572.122335][T10970] Cannot create hsr debugfs directory [ 573.918743][ T5921] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 574.096304][ T5921] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 574.098804][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.098833][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.098853][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 574.109544][ T5921] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 574.109571][ T5921] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 574.109589][ T5921] usb 1-1: Manufacturer: syz [ 574.181567][ T5921] usb 1-1: config 0 descriptor?? [ 575.413706][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 575.423045][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 575.424636][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 575.425878][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 575.427074][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 575.525689][ T5921] usbhid 1-1:0.0: can't add hid device: -71 [ 575.525813][ T5921] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 575.536711][ T5921] usb 1-1: USB disconnect, device number 34 [ 577.273373][ T1162] team0: Port device bridge1 removed [ 577.526055][T11159] Bluetooth: hci3: command tx timeout [ 578.150920][T11188] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1568'. [ 579.571837][T11159] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 579.571874][T11159] CPU: 0 UID: 0 PID: 11159 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 579.571887][T11159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 579.571895][T11159] Workqueue: hci4 hci_rx_work [ 579.572040][T11159] Call Trace: [ 579.572047][T11159] [ 579.572053][T11159] dump_stack_lvl+0x189/0x250 [ 579.572119][T11159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.572132][T11159] ? __pfx__printk+0x10/0x10 [ 579.572154][T11159] ? kernfs_path_from_node+0x2c/0x280 [ 579.572186][T11159] ? kernfs_path_from_node+0x243/0x280 [ 579.572198][T11159] ? kernfs_path_from_node+0x2c/0x280 [ 579.572213][T11159] sysfs_create_dir_ns+0x259/0x280 [ 579.572227][T11159] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 579.572281][T11159] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 579.572296][T11159] ? rt_spin_unlock+0x161/0x200 [ 579.572308][T11159] kobject_add_internal+0x5a5/0xb50 [ 579.572377][T11159] kobject_add+0x155/0x220 [ 579.572400][T11159] ? __pfx_kobject_add+0x10/0x10 [ 579.572418][T11159] ? get_device_parent+0x370/0x3a0 [ 579.572487][T11159] device_add+0x408/0xb50 [ 579.572502][T11159] hci_conn_add_sysfs+0xd5/0x1e0 [ 579.572557][T11159] le_conn_complete_evt+0xf39/0x1500 [ 579.572616][T11159] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 579.572629][T11159] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 579.572662][T11159] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.572698][T11159] ? skb_pull_data+0xfb/0x200 [ 579.572785][T11159] hci_le_conn_complete_evt+0x187/0x450 [ 579.572802][T11159] hci_event_packet+0x78f/0x1200 [ 579.572837][T11159] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 579.572851][T11159] ? __pfx_hci_event_packet+0x10/0x10 [ 579.572868][T11159] ? hci_send_to_monitor+0xe2/0x570 [ 579.572884][T11159] hci_rx_work+0x46a/0xe80 [ 579.572899][T11159] ? process_scheduled_works+0x9ef/0x17b0 [ 579.572929][T11159] process_scheduled_works+0xae1/0x17b0 [ 579.572960][T11159] ? __pfx_process_scheduled_works+0x10/0x10 [ 579.572984][T11159] worker_thread+0x8a0/0xda0 [ 579.572996][T11159] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 579.573013][T11159] ? __kthread_parkme+0x7b/0x200 [ 579.573030][T11159] kthread+0x711/0x8a0 [ 579.573044][T11159] ? __pfx_worker_thread+0x10/0x10 [ 579.573053][T11159] ? __pfx_kthread+0x10/0x10 [ 579.573062][T11159] ? rt_spin_unlock+0x150/0x200 [ 579.573075][T11159] ? rt_spin_unlock+0x161/0x200 [ 579.573084][T11159] ? __pfx_kthread+0x10/0x10 [ 579.573095][T11159] ret_from_fork+0x4bc/0x870 [ 579.573118][T11159] ? __pfx_ret_from_fork+0x10/0x10 [ 579.573136][T11159] ? __switch_to_asm+0x39/0x70 [ 579.573148][T11159] ? __switch_to_asm+0x33/0x70 [ 579.573159][T11159] ? __pfx_kthread+0x10/0x10 [ 579.573171][T11159] ret_from_fork_asm+0x1a/0x30 [ 579.573193][T11159] [ 579.573215][T11159] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 579.573240][T11159] Bluetooth: hci4: failed to register connection device [ 579.578983][T11159] Bluetooth: hci3: command tx timeout [ 579.624803][ T1162] bond0 (unregistering): Released all slaves [ 579.792220][T11147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1556'. [ 579.843765][T11199] erspan0: entered promiscuous mode [ 579.843790][T11199] erspan0: entered allmulticast mode [ 581.581574][T11159] Bluetooth: hci4: command 0x0406 tx timeout [ 581.581714][T11159] Bluetooth: hci4: unexpected event for opcode 0x043d [ 581.659376][T11159] Bluetooth: hci3: command tx timeout [ 582.498815][ T5921] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 583.100356][ T5921] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 583.100385][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.100402][ T5921] usb 1-1: Product: syz [ 583.100414][ T5921] usb 1-1: Manufacturer: syz [ 583.100427][ T5921] usb 1-1: SerialNumber: syz [ 583.151520][ T5921] usb 1-1: config 0 descriptor?? [ 583.205488][ T5921] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 583.240086][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 583.241613][ T5921] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 583.241682][ T5921] usb 1-1: media controller created [ 583.358941][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.379864][T11220] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 583.493608][ T5921] DVB: Unable to find symbol mt352_attach() [ 583.532221][T11229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.603088][ T5921] DVB: Unable to find symbol nxt6000_attach() [ 583.603099][ T5921] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 583.638820][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 583.662014][ T5921] dvb-usb: schedule remote query interval to 1000 msecs. [ 583.662031][ T5921] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 583.662041][ T5921] dvb-usb: bulk message failed: -22 (7/0) [ 583.662050][ T5921] dvb-usb: bulk message failed: -22 (7/0) [ 583.729371][ T5921] usb 1-1: USB disconnect, device number 35 [ 583.738772][T11159] Bluetooth: hci3: command tx timeout [ 583.941065][ T5921] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 583.950841][T11231] capability: warning: `syz.4.1581' uses 32-bit capabilities (legacy support in use) [ 584.459887][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.527752][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.574741][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.658168][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.760001][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.810820][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.932224][ T1162] hsr_slave_0: left promiscuous mode [ 584.969964][ T1162] hsr_slave_1: left promiscuous mode [ 585.041135][T11255] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 585.291326][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.730314][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.785272][ T1162] veth1_macvtap: left promiscuous mode [ 585.785383][ T1162] veth0_macvtap: left promiscuous mode [ 585.790176][ T1162] veth1_vlan: left promiscuous mode [ 585.790361][ T1162] veth0_vlan: left promiscuous mode [ 586.411224][ C0] vkms_vblank_simulate: vblank timer overrun [ 586.679146][ C0] vkms_vblank_simulate: vblank timer overrun [ 587.097893][T11279] qrtr: Invalid version 0 [ 587.394369][ C0] vkms_vblank_simulate: vblank timer overrun [ 587.524438][ C0] vkms_vblank_simulate: vblank timer overrun [ 587.582572][ C0] vkms_vblank_simulate: vblank timer overrun [ 587.717719][ C0] vkms_vblank_simulate: vblank timer overrun [ 587.850168][T11283] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1590'. [ 587.873110][ C0] vkms_vblank_simulate: vblank timer overrun [ 587.982773][ C0] vkms_vblank_simulate: vblank timer overrun [ 590.436228][ T5921] IPVS: starting estimator thread 0... [ 590.696777][T11295] IPVS: using max 14 ests per chain, 33600 per kthread [ 594.236603][T11308] syz.0.1597 (11308): drop_caches: 2 [ 596.600169][T11159] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 598.655477][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 599.601464][T11279] warning: `syz.1.1588' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 600.151170][T11342] syz.1.1606 (11342) used greatest stack depth: 16248 bytes left [ 600.513536][T11350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1608'. [ 600.698693][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 601.354544][T11356] tipc: Started in network mode [ 601.354585][T11356] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 601.357832][T11356] tipc: Enabled bearer , priority 10 [ 601.651545][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 601.673523][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 601.676688][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 601.692840][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 601.694843][T11358] netlink: 'syz.0.1610': attribute type 54 has an invalid length. [ 601.695244][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 602.358070][ T10] tipc: Node number set to 4269801488 [ 602.771522][T10970] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 602.904647][T10970] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 602.937739][T10970] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 603.210636][T10970] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 603.491967][T11157] chnl_net:caif_netlink_parms(): no params data found [ 603.899428][T11159] Bluetooth: hci1: command tx timeout [ 603.926663][T11399] ------------[ cut here ]------------ [ 603.926686][T11399] WARNING: CPU: 0 PID: 11399 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 603.926757][T11399] Modules linked in: [ 603.926776][T11399] CPU: 0 UID: 0 PID: 11399 Comm: syz.1.1614 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 603.926797][T11399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 603.926808][T11399] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 603.926826][T11399] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 c1 1f 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 603.926842][T11399] RSP: 0018:ffffc900051478e0 EFLAGS: 00010287 [ 603.926858][T11399] RAX: ffffffff81b8a4d9 RBX: 0000000000000000 RCX: 0000000000080000 [ 603.926870][T11399] RDX: ffffc90005c3a000 RSI: 000000000000016e RDI: 000000000000016f [ 603.926882][T11399] RBP: ffffc90005147a70 R08: 0000000000000000 R09: 0000000000000000 [ 603.926894][T11399] R10: dffffc0000000000 R11: fffffbfff1deed6f R12: dffffc0000000000 [ 603.926909][T11399] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888037b80791 [ 603.926921][T11399] FS: 00007fe5f0e1e6c0(0000) GS:ffff888126bc2000(0000) knlGS:0000000000000000 [ 603.926937][T11399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 603.926950][T11399] CR2: 0000200000ffb020 CR3: 0000000054fb8000 CR4: 00000000003526f0 [ 603.926967][T11399] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 603.926979][T11399] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 603.926990][T11399] Call Trace: [ 603.926998][T11399] [ 603.927011][T11399] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 603.927040][T11399] ? __pfx_cgroup_freeze+0x10/0x10 [ 603.927057][T11399] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 603.927089][T11399] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 603.927110][T11399] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 603.927145][T11399] ? mutex_lock_nested+0x154/0x1d0 [ 603.927167][T11399] ? cgroup_kn_lock_live+0x13c/0x230 [ 603.927197][T11399] cgroup_freeze_write+0x156/0x1c0 [ 603.927221][T11399] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 603.927242][T11399] ? kernfs_root+0x1c/0x230 [ 603.927262][T11399] ? kernfs_root+0x1c/0x230 [ 603.927286][T11399] ? kernfs_root+0x1ea/0x230 [ 603.927305][T11399] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 603.927327][T11399] cgroup_file_write+0x39e/0x740 [ 603.927353][T11399] ? __pfx_cgroup_file_write+0x10/0x10 [ 603.927386][T11399] ? __pfx_cgroup_file_write+0x10/0x10 [ 603.927402][T11399] kernfs_fop_write_iter+0x3b0/0x540 [ 603.927429][T11399] vfs_write+0x5d5/0xb40 [ 603.927474][T11399] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 603.927494][T11399] ? __pfx_vfs_write+0x10/0x10 [ 603.927508][T11399] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 603.927536][T11399] ? mutex_lock_nested+0x154/0x1d0 [ 603.927553][T11399] ? fdget_pos+0x253/0x320 [ 603.927584][T11399] ksys_write+0x14b/0x260 [ 603.927605][T11399] ? __pfx_ksys_write+0x10/0x10 [ 603.927625][T11399] ? do_syscall_64+0xbe/0xfa0 [ 603.927708][T11399] do_syscall_64+0xfa/0xfa0 [ 603.927728][T11399] ? lockdep_hardirqs_on+0x9c/0x150 [ 603.927747][T11399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.927785][T11399] ? clear_bhb_loop+0x60/0xb0 [ 603.927809][T11399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.927829][T11399] RIP: 0033:0x7fe5f2bbefc9 [ 603.927851][T11399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.927867][T11399] RSP: 002b:00007fe5f0e1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 603.927886][T11399] RAX: ffffffffffffffda RBX: 00007fe5f2e15fa0 RCX: 00007fe5f2bbefc9 [ 603.927901][T11399] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000005 [ 603.927915][T11399] RBP: 00007fe5f2c41f91 R08: 0000000000000000 R09: 0000000000000000 [ 603.927929][T11399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.927941][T11399] R13: 00007fe5f2e16038 R14: 00007fe5f2e15fa0 R15: 00007ffe423356c8 [ 603.927977][T11399] [ 603.927997][T11399] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 603.928012][T11399] CPU: 0 UID: 0 PID: 11399 Comm: syz.1.1614 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 603.928034][T11399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 603.928047][T11399] Call Trace: [ 603.928056][T11399] [ 603.928064][T11399] dump_stack_lvl+0x99/0x250 [ 603.928098][T11399] ? __asan_memcpy+0x40/0x70 [ 603.928136][T11399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.928160][T11399] ? __pfx__printk+0x10/0x10 [ 603.928195][T11399] vpanic+0x237/0x6d0 [ 603.928219][T11399] ? __pfx_vpanic+0x10/0x10 [ 603.928247][T11399] panic+0xb9/0xc0 [ 603.928265][T11399] ? __pfx_panic+0x10/0x10 [ 603.928300][T11399] __warn+0x31b/0x4b0 [ 603.928318][T11399] ? cgroup_freeze+0x80a/0xf90 [ 603.928339][T11399] ? cgroup_freeze+0x80a/0xf90 [ 603.928358][T11399] report_bug+0x2be/0x4f0 [ 603.928417][T11399] ? cgroup_freeze+0x80a/0xf90 [ 603.928435][T11399] ? cgroup_freeze+0x80a/0xf90 [ 603.928453][T11399] ? cgroup_freeze+0x80c/0xf90 [ 603.928470][T11399] handle_bug+0x84/0x160 [ 603.928497][T11399] exc_invalid_op+0x1a/0x50 [ 603.928528][T11399] asm_exc_invalid_op+0x1a/0x20 [ 603.928547][T11399] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 603.928566][T11399] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 c1 1f 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 603.928584][T11399] RSP: 0018:ffffc900051478e0 EFLAGS: 00010287 [ 603.928603][T11399] RAX: ffffffff81b8a4d9 RBX: 0000000000000000 RCX: 0000000000080000 [ 603.928617][T11399] RDX: ffffc90005c3a000 RSI: 000000000000016e RDI: 000000000000016f [ 603.928631][T11399] RBP: ffffc90005147a70 R08: 0000000000000000 R09: 0000000000000000 [ 603.928645][T11399] R10: dffffc0000000000 R11: fffffbfff1deed6f R12: dffffc0000000000 [ 603.928661][T11399] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888037b80791 [ 603.928685][T11399] ? cgroup_freeze+0x809/0xf90 [ 603.928716][T11399] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 603.928749][T11399] ? __pfx_cgroup_freeze+0x10/0x10 [ 603.928765][T11399] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 603.928791][T11399] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 603.928812][T11399] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 603.928839][T11399] ? mutex_lock_nested+0x154/0x1d0 [ 603.928855][T11399] ? cgroup_kn_lock_live+0x13c/0x230 [ 603.928882][T11399] cgroup_freeze_write+0x156/0x1c0 [ 603.928905][T11399] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 603.928925][T11399] ? kernfs_root+0x1c/0x230 [ 603.928945][T11399] ? kernfs_root+0x1c/0x230 [ 603.928967][T11399] ? kernfs_root+0x1ea/0x230 [ 603.928986][T11399] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 603.929007][T11399] cgroup_file_write+0x39e/0x740 [ 603.929030][T11399] ? __pfx_cgroup_file_write+0x10/0x10 [ 603.929063][T11399] ? __pfx_cgroup_file_write+0x10/0x10 [ 603.929088][T11399] kernfs_fop_write_iter+0x3b0/0x540 [ 603.929113][T11399] vfs_write+0x5d5/0xb40 [ 603.929132][T11399] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 603.929148][T11399] ? __pfx_vfs_write+0x10/0x10 [ 603.929160][T11399] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 603.929183][T11399] ? mutex_lock_nested+0x154/0x1d0 [ 603.929197][T11399] ? fdget_pos+0x253/0x320 [ 603.929221][T11399] ksys_write+0x14b/0x260 [ 603.929237][T11399] ? __pfx_ksys_write+0x10/0x10 [ 603.929254][T11399] ? do_syscall_64+0xbe/0xfa0 [ 603.929274][T11399] do_syscall_64+0xfa/0xfa0 [ 603.929289][T11399] ? lockdep_hardirqs_on+0x9c/0x150 [ 603.929306][T11399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.929321][T11399] ? clear_bhb_loop+0x60/0xb0 [ 603.929338][T11399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.929351][T11399] RIP: 0033:0x7fe5f2bbefc9 [ 603.929364][T11399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.929376][T11399] RSP: 002b:00007fe5f0e1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 603.929391][T11399] RAX: ffffffffffffffda RBX: 00007fe5f2e15fa0 RCX: 00007fe5f2bbefc9 [ 603.929402][T11399] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000005 [ 603.929411][T11399] RBP: 00007fe5f2c41f91 R08: 0000000000000000 R09: 0000000000000000 [ 603.929420][T11399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.929429][T11399] R13: 00007fe5f2e16038 R14: 00007fe5f2e15fa0 R15: 00007ffe423356c8 [ 603.929456][T11399] [ 603.929701][T11399] Kernel Offset: disabled