last executing test programs: 14.003444303s ago: executing program 0 (id=1532): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x1, &(0x7f0000006680)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000000000"], 0x122}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0xd5}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000008ec0)={0x0, 0x0, &(0x7f0000008e80)={&(0x7f0000008e40)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) exit(0x4) 13.968683221s ago: executing program 1 (id=1533): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f00000012c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x6f, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @pad1, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}, @ra={0x5, 0x2, 0x6}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6, 0x4, 0x1, 0x9, 0x0, [@empty, @private0]}}}, @hopopts={{0x198, 0x29, 0x36, {0x5e, 0x2f, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe1, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast1]}}}], 0x380}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.901611914s ago: executing program 0 (id=1536): memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc, 0x0, 0x1}}, 0x40) get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f00008b2000/0x4000)=nil, 0x3) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[], 0x18}], 0x1}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) socket(0x400000000010, 0x3, 0x0) read$msr(r3, &(0x7f0000000300)=""/193, 0xc1) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) 12.159910283s ago: executing program 4 (id=1537): sendto(0xffffffffffffffff, 0x0, 0x0, 0x40008c1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000ed0301000000000000000200000a14000000ed03010000000000000000000700"], 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000001d00)={0x13, 0x10, 0xfa00, {&(0x7f0000005d40), 0xffffffffffffffff, 0x2}}, 0x18) 12.157939212s ago: executing program 1 (id=1538): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x88) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syslog(0xf33e6bac, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) syslog(0x9, 0x0, 0x0) 11.310450425s ago: executing program 3 (id=1540): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4620, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x18, 0x0, &(0x7f0000000080)) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r6, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000000), &(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400fdff11007e8cccd34b9f2d3eb89bd20000000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40c0080) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r9, &(0x7f0000000540)=[{{&(0x7f0000000100)=@xdp={0x2c, 0x1, r7, 0x2c}, 0x80, 0x0}}, {{&(0x7f0000000700)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80, 0x0}}, {{&(0x7f0000000440)=@nfc_llcp={0x27, 0x0, 0x0, 0x6, 0x9c, 0xf4, "2a5c0021648c08994a6d2e78ab044a986f12691303d25b4201c1a778fd350c7f61eb47710b38bb60eb7aa44438b1873716daf923af055659f3b75ae043efe3", 0xb}, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)="dee8ff50d22f07126c6e3783c55553be573d69f08e867c545547dd64ae2f9ce2a6a811decf39327e0f8c78c9203e6802dc970938b7ce7c631ef09f02889886ccee2216936ac2a53ca9f52c61a54b8f430ba36c326490c0c77b3d3bfc0360f447e8d1cd98", 0x64}, {&(0x7f0000000980)="7599a3170497bb4a6a7584e0b61dff80b89221801e110b0f152b0181690a4b2c60ba8d21eb5ebd2c559e37d3e47816e640dc45e6863170147ffd353d4841a77226b8fb10e8fb2ee5a65e3b0525216ddabe519870f182ced0868a5c085eaa5c14a5f4be3206872e66911515882ddd5816dfc6bc3e72648cbb68173d2478f48b0b2ebe9211397773fcbd6661d47e89e8d5379b5d36c33ca994fbe59e45669bd8ac989b266d7ea99049027a60e3665d2e8a3264b50b74cc5e400c26cd516cc9fdcdac7f62528ca2ff892daab05a5ae521647181222f7cc43cc0", 0xd8}, {&(0x7f0000000640)="b1589d8e4e1ea0a816fd6e66f1bb6686", 0x10}], 0x3, &(0x7f0000000780)=[@txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}], 0x48}}], 0x3, 0x2404c8d4) 10.781311679s ago: executing program 0 (id=1541): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x2, &(0x7f00000001c0)=[&(0x7f0000002000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil], 0x0, &(0x7f0000000240), 0x0) 9.347684132s ago: executing program 4 (id=1542): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc082}, 0x4000800) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="400601000004b3"], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b750000000109021b00010000000009"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = socket(0x10, 0x3, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100080}, [@generic={0x73, 0x1, 0x1, 0x37}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) 9.3357846s ago: executing program 0 (id=1543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r1, 0xc0386105, 0x0) msgsnd(0x0, 0x0, 0x8, 0x800) msgrcv(0x0, 0x0, 0x1d, 0x2, 0x1800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020605000000000000000000070000000c00078008001240000100010500010006000000050005000a00000005000400000000000900020073797a310000000013000300686173683a6e65742c696661"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 9.255193714s ago: executing program 2 (id=1544): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, 0x0, 0x72) 9.196592879s ago: executing program 3 (id=1545): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb62", 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 9.162162312s ago: executing program 1 (id=1546): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc082}, 0x4000800) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="400601000004b3"], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b750000000109021b00010000000009"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = socket(0x10, 0x3, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100080}, [@generic={0x73, 0x1, 0x1, 0x37}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) 8.910030202s ago: executing program 2 (id=1547): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 7.610151407s ago: executing program 2 (id=1548): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000027c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002780)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x2370}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x7}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x66, 0x7, 0x0, 0x1, 0x9, 0x8, 0x3}}, {0xa, 0x2, [0x5, 0x7af, 0xa000]}}, {{0x1c, 0x1, {0x7, 0xcb, 0x4, 0x0, 0x1, 0x80000000, 0x0, 0x3}}, {0xa, 0x2, [0x4, 0xb, 0x3]}}, {{0x1c, 0x1, {0x5, 0xfb, 0x1, 0xcc75, 0x0, 0xe98c, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x2]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0xac}, 0x1, 0x0, 0x0, 0x14}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pread64(r7, 0x0, 0x0, 0x337a4002) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r8 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_access(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="73797374656d5f753a6563745f7330d7d878e8c4de202f7573722f7362696e2f6e74706420303030303030303030303030303030"], 0x43) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x850) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x1}}, 0x30) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000002800)={"7ce7e9aac5edace854a7429cd9891ad9", r10, 0x0, {0x3, 0x2}, {0x7, 0xffffc38b}, 0x1000, [0x3, 0x5, 0x0, 0x8000000000000001, 0x1, 0x7, 0xfffffffffffffa31, 0x3, 0xffffffffffffffff, 0x96fe, 0x101, 0x7, 0x7, 0xfffffffffffff001, 0xb, 0x6]}) 7.546366077s ago: executing program 3 (id=1549): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}]}, 0x10) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaabb7fc9bb68d1df88a82b008100190008004ebd02f900680000082f9078ac1414bbac1414bb868700000000020f1ad9a4cd3bdbed2faeb6ca28ae0005d46a11634e2c62aedc01037b07101f3462d0fcfe0f647f6c28f4d157000da3e23df9148913333cd499051188f763d72d71cddf89e9be603984f006102784755e41ecd35e59b6d313b83e060b25974a58669da2a4dd0612d2d2d1fb3c6dd4e8eb9ff1ef232c6e64020f3fa96b73c2e7a272a2a3fe3dd044183430000000050000000600000005000000030000000344447bb1e00000010000000be000000200008ad86401010000000000e000000200000fffac141442000000066401010000000004ac1414aa00000008ffffffff0000000c000c21880b00fa00009b2047b600aa02605ba2d4d43ad536c3ead7ecc4c480adbcded174c7e91ced0004c8936012c776402e558872da2b52513290220f56811c8f0d6c4fe271892546669ae20a60d7fe38ac933428f50c85503e657d3ca40dcafb3bfbb37423ae8ffdc4ea9f64a6594bf2c3f7b76c81b92525c50e59300aa2ab958d6b1ffd656b7dd1eebbfc6441b800e7a0377b8fafcd2c7cc5cb8674aac57676cc96cabf92d356c8ed183430e3698919935602bf2ad8e0e85cf6e40a86319fae1029657f6ffd4a8ce88980d3d9daef15a657b15de657d35463966a87f5ca546f9c070075761f0808cdf8eaa9dc067e9a2b30c4f0a3984999a8ed973c94c680f20147040008000001f03291972cf310546effe1f556d9d152d80955de9d24d23fb9bfa475a0e616af1f1f9b6cd0732715dc32d1d89417bd000086dde044262c7deb71f3ad2075f421a376502d21fd380f95c20320016eeb637396877d86bdbfa381a12be1f2a916d96a47f188305bbc11e07e3f513e8e101d800aa43d698e1ddcd56577d52b69281987db802118b70536"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, &(0x7f0000000380)={0x0}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4c) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 6.619143434s ago: executing program 3 (id=1550): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803", 0x81}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9", 0x78}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d3672656730000000000000000014000200677265746170300000000000000000000800030007000000140002007465616d3000"/125, @ANYRES32, @ANYRES32=r0, @ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="400001801400020070696d36726567300000000000000000140002", @ANYRES8, @ANYBLOB="080003000300000008000100", @ANYRES32=r0, @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.523705536s ago: executing program 2 (id=1551): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000000000000000000000000000095000000000000008520000005000000851000000100000095000000000000009500000000000000fc37b7f7dadce0afff2144f055552d34dd4e04f2a91e2a55"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = syz_ublk_setup_io_uring(0x352d, &(0x7f00000009c0)={0x0, 0xee5d, 0x2, 0x0, 0x36f}, &(0x7f0000000300), &(0x7f0000000680), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400), 0x1) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d1e, &(0x7f0000000500)=0x59) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtclass={0x74, 0x28, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xf}, {0xffff, 0x2}, {0xffff, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xff}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x6967dff6}}}, @TCA_RATE={0x6, 0x5, {0xff, 0x1}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7}}}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}]}, 0x74}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000e76b8680f2c8248beba2bbdab953a2ebfbc3627e4297284ebd35a6363645a7d3f8a098baeccad6504e38e15fa5f09051cd08fb392e243a2d1ed8e2efbf87a4f8cee6b38547cb3a4f64632d874401473d45c1307a2a5e4ed82b39a6fe0a4ff1644b1143d9cee0b3985a20477fd60a90a2098db758f394", @ANYRES32=r5, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703230008000000b7040000000000008500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x8030) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x62}], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x6}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) 6.483665471s ago: executing program 3 (id=1552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc082}, 0x4000800) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="400601000004b3"], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b750000000109021b00010000000009"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = socket(0x10, 0x3, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100080}, [@generic={0x73, 0x1, 0x1, 0x37}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) 5.467179433s ago: executing program 0 (id=1553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1022000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x14, 0x0, 0xc32, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20000010) socket(0x10, 0x803, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x1, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) read$eventfd(r6, &(0x7f0000000340), 0x8) 4.567429869s ago: executing program 4 (id=1554): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_dev$sndpcmp(0x0, 0x1ff, 0x80000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r8, 0xc2604111, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) 4.451172997s ago: executing program 0 (id=1555): memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r2 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r3, &(0x7f00000008c0)={&(0x7f0000000900)=@pppoe={0x18, 0x0, {0x4, @broadcast, 'team0\x00'}}, 0x80, 0x0}, 0x20004000) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x5000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc, 0x0, 0x1}}, 0x40) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106"], 0x18}], 0x1}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0) socket(0x400000000010, 0x3, 0x0) read$msr(r4, &(0x7f0000000300)=""/193, 0xc1) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) 4.449097293s ago: executing program 2 (id=1556): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() getpgid(r2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x94, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x101042) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) 3.188295925s ago: executing program 4 (id=1557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r1 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1022000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x14, 0x0, 0xc32, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20000010) socket(0x10, 0x803, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r1, 0x1, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) read$eventfd(r7, &(0x7f0000000340), 0x8) 2.779675544s ago: executing program 1 (id=1558): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1c100039", @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf253500000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8080) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r6, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f00000010c0)=""/133, 0x85}], 0x2}, 0x3}], 0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd29, 0xfffffffc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0xc, 0xd6, 0x6, 0x10000, 0xffffffde, 0x344f, "85cc21e13f2c32c0e64f344bee6c85b7", 0x0, 0x7, 0x2, 0x5, 0x1, 0x7, 0x4}) 2.667610436s ago: executing program 3 (id=1559): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x301000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x0, 0x2, 0x10000000000, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x2, 0x0, 0x1}, 0xfd}, 0x18) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000800)="784f99e63ebbcd5c", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001b00)="0f6a9a", 0x3}], 0x1}}], 0x2, 0x40000001) write$FUSE_INIT(r1, &(0x7f0000001240)={0x50, 0x0, r2, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0xc}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r5, 0x401070cd, &(0x7f0000000000)) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000080)) syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) sched_setscheduler(0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x4, 0xac5) syz_clone3(&(0x7f0000000900)={0x23820400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) setsockopt$sock_int(r6, 0x1, 0xa, &(0x7f0000000040)=0x40, 0x4) 1.460157188s ago: executing program 4 (id=1560): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}]}, 0x10) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, &(0x7f0000000380)={0x0}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4c) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 985.288496ms ago: executing program 1 (id=1561): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f00000012c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x6f, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @pad1, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}, @ra={0x5, 0x2, 0x6}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6, 0x4, 0x1, 0x9, 0x0, [@empty, @private0]}}}, @hopopts={{0x198, 0x29, 0x36, {0x5e, 0x2f, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe1, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast1]}}}], 0x380}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 475.900689ms ago: executing program 4 (id=1562): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000027c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002780)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x2370}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x7}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x66, 0x7, 0x0, 0x1, 0x9, 0x8, 0x3}}, {0xa, 0x2, [0x5, 0x7af, 0xa000]}}, {{0x1c, 0x1, {0x7, 0xcb, 0x4, 0x0, 0x1, 0x80000000, 0x0, 0x3}}, {0xa, 0x2, [0x4, 0xb, 0x3]}}, {{0x1c, 0x1, {0x5, 0xfb, 0x1, 0xcc75, 0x0, 0xe98c, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x2]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0xac}, 0x1, 0x0, 0x0, 0x14}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pread64(r7, 0x0, 0x0, 0x337a4002) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r8 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_access(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="73797374656d5f753a6563745f7330d7d878e8c4de202f7573722f7362696e2f6e747064203030303030303030303030303030303030"], 0x43) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x850) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x1}}, 0x30) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000002800)={"7ce7e9aac5edace854a7429cd9891ad9", r10, 0x0, {0x3, 0x2}, {0x7, 0xffffc38b}, 0x1000, [0x3, 0x5, 0x0, 0x8000000000000001, 0x1, 0x7, 0xfffffffffffffa31, 0x3, 0xffffffffffffffff, 0x96fe, 0x101, 0x7, 0x7, 0xfffffffffffff001, 0xb, 0x6]}) 317.881854ms ago: executing program 2 (id=1563): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, 0x0, 0x0, 0x1c}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x0, 0x7, {0xffffffffffffffff}, {0xee00}, 0xff, 0x8000000000000001}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x640, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) setreuid(0x0, 0xee00) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f00000003c0)={0x8, {"c23b585272aca28d9cad01a3cdd1e3a9", "d40000007dcbfb5d3cf7c2cac100", "b0e953ee24cbee8739aa9f2a423b3429"}, 0x4, 0x6}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x4, 0x5, 0x30, 0x20}, 0x0, 0x0, 0x1, [{0x2, &(0x7f00000001c0)=@string={0x2}}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 1 (id=1564): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r1 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1022000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x14, 0x0, 0xc32, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20000010) socket(0x10, 0x803, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r1, 0x1, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) read$eventfd(r7, &(0x7f0000000340), 0x8) kernel console output (not intermixed with test programs): 71) [ 337.115632][ T5720] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 337.170766][ T5720] usbhid 1-1:0.0: can't add hid device: -71 [ 337.197308][ T5720] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 337.245367][ T5720] usb 1-1: USB disconnect, device number 10 [ 337.548825][ T8271] Mount JFS Failure: -5 [ 342.805414][ T8303] netlink: 48 bytes leftover after parsing attributes in process `syz.0.698'. [ 344.103801][ T4928] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 345.612402][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'. [ 345.622936][ T8318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.705'. [ 345.708776][ T8319] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 346.601846][ T8327] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 346.642349][ T8327] netlink: 224 bytes leftover after parsing attributes in process `syz.0.707'. [ 347.013292][ T5720] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 347.292915][ T5720] usb 5-1: Using ep0 maxpacket: 32 [ 347.301390][ T5720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.313815][ T5720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.323886][ T5720] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 347.333454][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.345809][ T5720] usb 5-1: config 0 descriptor?? [ 347.362899][ T5720] hub 5-1:0.0: USB hub found [ 347.572088][ T8343] netlink: 48 bytes leftover after parsing attributes in process `syz.0.711'. [ 347.794180][ T5720] hub 5-1:0.0: 26 ports detected [ 347.850429][ T5720] hub 5-1:0.0: insufficient power available to use all downstream ports [ 348.131706][ T5720] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 348.153722][ T5720] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 348.379261][ T5720] usbhid 5-1:0.0: can't add hid device: -71 [ 348.386294][ T5720] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 348.428929][ T5720] usb 5-1: USB disconnect, device number 9 [ 351.050418][ T8377] netlink: 44 bytes leftover after parsing attributes in process `syz.2.720'. [ 351.100552][ T8377] netlink: 51 bytes leftover after parsing attributes in process `syz.2.720'. [ 351.327793][ T8377] netlink: 51 bytes leftover after parsing attributes in process `syz.2.720'. [ 351.371146][ T8377] netlink: 44 bytes leftover after parsing attributes in process `syz.2.720'. [ 351.470421][ T8377] netlink: 43 bytes leftover after parsing attributes in process `syz.2.720'. [ 351.480260][ T8377] netlink: 'syz.2.720': attribute type 5 has an invalid length. [ 351.494888][ T8377] netlink: 43 bytes leftover after parsing attributes in process `syz.2.720'. [ 355.350190][ T8413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.762886][ T5721] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 358.956417][ T5721] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 358.984855][ T5721] usb 1-1: config 0 has no interface number 0 [ 359.030158][ T5721] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 359.078397][ T5721] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 359.128155][ T5721] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 359.174268][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.197238][ T5721] usb 1-1: Product: syz [ 359.206925][ T5721] usb 1-1: Manufacturer: syz [ 359.221998][ T5721] usb 1-1: SerialNumber: syz [ 359.247987][ T5721] usb 1-1: config 0 descriptor?? [ 359.300009][ T8432] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 359.314434][ T8432] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 360.236653][ T8432] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 360.256082][ T8432] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 360.918688][ T8432] fuse: Bad value for 'fd' [ 360.980133][ T5721] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 360.992090][ T5721] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 361.019301][ T5721] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 361.040807][ T5721] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 361.057966][ T5721] usb 1-1: USB disconnect, device number 11 [ 361.345898][ T5735] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 361.513158][ T5735] usb 5-1: Using ep0 maxpacket: 8 [ 361.535933][ T5735] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 361.559381][ T5735] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 361.582767][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.600806][ T5735] usb 5-1: Product: syz [ 361.622724][ T5735] usb 5-1: Manufacturer: syz [ 361.632391][ T5735] usb 5-1: SerialNumber: syz [ 361.653890][ T5735] usb 5-1: config 0 descriptor?? [ 361.686587][ T5735] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 361.711159][ T5735] usb 5-1: setting power ON [ 361.722085][ T5735] dvb-usb: bulk message failed: -22 (2/0) [ 361.760392][ T5735] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 361.800441][ T5735] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 361.840114][ T5735] usb 5-1: media controller created [ 361.876223][ T5735] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.049233][ T5735] usb 5-1: selecting invalid altsetting 6 [ 363.151826][ T5735] usb 5-1: digital interface selection failed (-22) [ 363.178194][ T5735] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 363.182392][ T8442] netlink: 'syz.4.737': attribute type 4 has an invalid length. [ 363.306191][ T5735] usb 5-1: setting power OFF [ 363.870081][ T5735] dvb-usb: bulk message failed: -22 (2/0) [ 363.946662][ T5735] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 364.285964][ T5735] (NULL device *): no alternate interface [ 364.382147][ T5735] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 364.771006][ T5721] usb 5-1: USB disconnect, device number 10 [ 365.429277][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'. [ 366.873777][ T8506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.753'. [ 366.882832][ T8506] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 367.365671][ T8512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.747'. [ 368.026567][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 368.035827][ T8517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.755'. [ 371.772982][ T5615] Bluetooth: hci5: command 0x1003 tx timeout [ 371.886760][ T4928] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 373.566070][ T8568] netlink: 48 bytes leftover after parsing attributes in process `syz.2.766'. [ 375.656762][ T8592] Mount JFS Failure: -5 [ 377.686171][ T8609] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 378.430396][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.923366][ T5720] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 380.355368][ T5720] usb 1-1: Using ep0 maxpacket: 16 [ 380.393330][ T5720] usb 1-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 380.417961][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 380.433611][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 380.454285][ T5720] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 380.471762][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.501262][ T5720] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 380.604300][ T5720] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 380.620690][ T5720] usb 1-1: Manufacturer: syz [ 380.827081][ T5720] usb 1-1: config 0 descriptor?? [ 381.625505][ T5720] rc_core: IR keymap rc-hauppauge not found [ 381.641000][ T5720] Registered IR keymap rc-empty [ 381.651891][ T5720] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 381.682888][ T5720] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 381.773973][ T5720] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 381.810259][ T5720] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 381.861701][ T5720] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 381.904265][ T5720] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 381.942826][ T5720] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 381.974402][ T5720] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.086720][ T5720] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.382851][ T5720] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.422770][ T5720] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.453004][ T5720] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.637193][ T5720] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.662787][ T5720] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.865071][ T5720] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 382.890049][ T5720] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 382.923434][ T5720] usb 1-1: USB disconnect, device number 12 [ 383.178606][ T8671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8671 comm=syz.3.792 [ 383.512627][ T8670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.792'. [ 384.004819][ T8681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.794'. [ 384.014321][ T8681] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 384.896128][ T8691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.798'. [ 386.830778][ T8706] Mount JFS Failure: -5 [ 387.133135][ T5827] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 387.385760][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 387.422714][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.476926][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.535878][ T5827] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 387.570123][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.632080][ T5827] usb 2-1: config 0 descriptor?? [ 387.676803][ T5827] hub 2-1:0.0: USB hub found [ 387.752764][ T5719] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 387.929159][ T5719] usb 3-1: Using ep0 maxpacket: 16 [ 387.965314][ T8718] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 388.231296][ T5719] usb 3-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 388.298567][ T5827] hub 2-1:0.0: 26 ports detected [ 388.323887][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 388.343830][ T5827] hub 2-1:0.0: insufficient power available to use all downstream ports [ 388.558991][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 388.747576][ T5719] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 388.778441][ T5719] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.806517][ T5719] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 388.817345][ T5719] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 388.825845][ T5719] usb 3-1: Manufacturer: syz [ 388.930587][ T5719] usb 3-1: config 0 descriptor?? [ 389.365759][ T5827] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 389.388260][ T5827] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 389.522895][ T5719] rc_core: IR keymap rc-hauppauge not found [ 389.523975][ T5827] usbhid 2-1:0.0: can't add hid device: -71 [ 389.528844][ T5719] Registered IR keymap rc-empty [ 389.986698][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 390.073483][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 390.077469][ T5827] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 390.094157][ T5719] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 390.185727][ T5719] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 390.251379][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 390.274059][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 390.304936][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 390.362798][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 390.496124][ T8740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.809'. [ 390.585588][ T8741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.812'. [ 390.595004][ T8741] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 391.247908][ T5827] usb 2-1: USB disconnect, device number 12 [ 391.248617][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 391.312783][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 391.342825][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 391.364450][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 391.387224][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 391.423175][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 391.479306][ T5719] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 391.574425][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.811'. [ 391.979816][ T5719] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 392.042128][ T5719] usb 3-1: USB disconnect, device number 12 [ 392.283319][ T8755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.025165][ T8762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.067031][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'. [ 393.135312][ T8762] bridge0: port 3(netdevsim0) entered blocking state [ 393.142446][ T8762] bridge0: port 3(netdevsim0) entered disabled state [ 393.152427][ T8762] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 393.169656][ T8762] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 393.178932][ T8762] bridge0: port 3(netdevsim0) entered blocking state [ 393.185764][ T8762] bridge0: port 3(netdevsim0) entered forwarding state [ 396.857948][ T8785] netlink: 28 bytes leftover after parsing attributes in process `syz.3.823'. [ 397.264357][ T5719] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 397.565516][ T5719] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 397.890943][ T5719] usb 1-1: config 0 has no interface number 0 [ 397.989479][ T5719] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 398.000723][ T5719] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 398.017614][ T5719] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 398.050056][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.483211][ T5719] usb 1-1: Product: syz [ 398.490296][ T5719] usb 1-1: Manufacturer: syz [ 398.496539][ T5719] usb 1-1: SerialNumber: syz [ 398.506271][ T5719] usb 1-1: config 0 descriptor?? [ 398.512049][ T8787] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 398.606675][ T8787] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 399.092930][ T8810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.830'. [ 399.567098][ T8787] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 399.709031][ T8787] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 399.845284][ T5719] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 399.890209][ T8787] fuse: Bad value for 'fd' [ 399.900233][ T5719] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 400.267562][ T5719] usb 1-1: USB disconnect, device number 13 [ 400.342293][ T8815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.805755][ T8823] netlink: 40 bytes leftover after parsing attributes in process `syz.1.833'. [ 403.582750][ T5799] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 403.666181][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 403.744674][ T5799] usb 1-1: Using ep0 maxpacket: 16 [ 403.768530][ T5799] usb 1-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 403.802292][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.846635][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 403.877339][ T5720] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 403.899373][ T5799] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 403.919642][ T5799] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.944148][ T5799] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 403.960346][ T5799] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 403.980283][ T5799] usb 1-1: Manufacturer: syz [ 404.023830][ T5799] usb 1-1: config 0 descriptor?? [ 404.042751][ T5720] usb 4-1: device descriptor read/64, error -71 [ 404.295972][ T5720] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 404.785995][ T5799] rc_core: IR keymap rc-hauppauge not found [ 404.792036][ T5720] usb 4-1: device descriptor read/64, error -71 [ 404.809512][ T5799] Registered IR keymap rc-empty [ 404.830019][ T5799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 404.882797][ T5799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 404.922942][ T5720] usb usb4-port1: attempt power cycle [ 404.929042][ T5799] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 404.982273][ T5799] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 405.039886][ T5799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 405.102880][ T5799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 405.157254][ T5799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 405.208588][ T5799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 405.256059][ T5799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 405.293915][ T5720] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 405.312397][ T5799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 405.353426][ T5720] usb 4-1: device descriptor read/8, error -71 [ 405.367937][ T5799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 405.415348][ T5799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 405.472922][ T5799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 405.534412][ T5799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 405.583819][ T5799] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 405.612934][ T5720] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 405.627249][ T5799] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 405.663596][ T5720] usb 4-1: device descriptor read/8, error -71 [ 405.711358][ T5799] usb 1-1: USB disconnect, device number 14 [ 405.778387][ T5720] usb usb4-port1: unable to enumerate USB device [ 406.392945][ T5827] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 406.842776][ T5827] usb 5-1: Using ep0 maxpacket: 16 [ 406.865952][ T5827] usb 5-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 406.910288][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 406.967943][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 407.018616][ T5827] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 407.111402][ T5827] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.169876][ T5827] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 407.321032][ T5827] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 408.252857][ T5827] usb 5-1: Manufacturer: syz [ 408.337609][ T5827] usb 5-1: config 0 descriptor?? [ 409.273099][ T5827] rc_core: IR keymap rc-hauppauge not found [ 409.289434][ T5827] Registered IR keymap rc-empty [ 409.304834][ T5827] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 409.342785][ T5827] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 409.373777][ T5827] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 409.446743][ T5827] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 409.495941][ T5827] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 409.534439][ T5827] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 409.762763][ T5827] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 409.804825][ T5827] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 410.417257][ T5827] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 410.442764][ T5827] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 410.482778][ T5827] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 410.533193][ T5827] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 410.734310][ T5827] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 410.884184][ T5827] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 410.928889][ T5827] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 410.981769][ T5827] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 411.030121][ T5827] usb 5-1: USB disconnect, device number 11 [ 412.354143][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 412.472970][ T5799] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 412.632955][ T5799] usb 4-1: device descriptor read/64, error -71 [ 412.833240][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'. [ 412.842159][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.867'. [ 412.932878][ T5799] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 413.108379][ T5799] usb 4-1: device descriptor read/64, error -71 [ 413.255003][ T5799] usb usb4-port1: attempt power cycle [ 413.793510][ T5799] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 413.847393][ T5799] usb 4-1: device descriptor read/8, error -71 [ 414.617328][ T5799] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 414.940825][ T5799] usb 4-1: device descriptor read/8, error -71 [ 415.223263][ T5799] usb usb4-port1: unable to enumerate USB device [ 415.455555][ T8948] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 415.477664][ T5720] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 415.932993][ T5720] usb 3-1: Using ep0 maxpacket: 16 [ 415.959073][ T5720] usb 3-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 416.523534][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 416.532556][ T8957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.874'. [ 416.583376][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 416.726895][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 416.824438][ T5720] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 416.909114][ T5720] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.927822][ T5720] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 416.937206][ T5720] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 416.947362][ T5720] usb 3-1: Manufacturer: syz [ 416.990498][ T5720] usb 3-1: config 0 descriptor?? [ 417.632722][ T5720] rc_core: IR keymap rc-hauppauge not found [ 417.639369][ T5720] Registered IR keymap rc-empty [ 417.644765][ T5720] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 417.667052][ T5720] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 417.976443][ T5720] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 418.007342][ T5720] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 418.036731][ T5720] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 418.065182][ T5720] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 418.093423][ T5720] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 418.113048][ T5720] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 418.133081][ T5720] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 418.156346][ T5720] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 418.187828][ T5720] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 418.223010][ T5720] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 418.292758][ T5720] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 418.300671][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 418.319481][ T8983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.882'. [ 418.329050][ T5720] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 418.332740][ T5712] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 418.359659][ T5720] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 418.376089][ T5720] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 418.388674][ T5720] usb 3-1: USB disconnect, device number 13 [ 418.494693][ T5712] usb 4-1: device descriptor read/64, error -71 [ 418.882862][ T5712] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 419.064762][ T5712] usb 4-1: device descriptor read/64, error -71 [ 419.193098][ T5712] usb usb4-port1: attempt power cycle [ 419.782762][ T5721] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 419.937966][ T9005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.543657][ T5712] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 420.558241][ T5721] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 420.605243][ T5721] usb 3-1: config 0 has no interface number 0 [ 420.661117][ T5721] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 420.754067][ T5721] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 421.002183][ T5721] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 421.088945][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.197694][ T5721] usb 3-1: Product: syz [ 421.261782][ T5721] usb 3-1: Manufacturer: syz [ 421.389479][ T5721] usb 3-1: SerialNumber: syz [ 421.676894][ T5712] usb 4-1: device descriptor read/8, error -71 [ 421.686337][ T5721] usb 3-1: config 0 descriptor?? [ 421.701958][ T8996] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 421.715757][ T8996] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 422.297628][ T5721] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 422.311716][ T5721] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 422.390285][ T5721] usb 3-1: USB disconnect, device number 14 [ 423.163847][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 423.199473][ T9028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.895'. [ 425.983155][ T5721] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 426.122874][ T5721] usb 3-1: device descriptor read/64, error -71 [ 426.363032][ T5721] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 426.502880][ T5721] usb 3-1: device descriptor read/64, error -71 [ 426.613702][ T5721] usb usb3-port1: attempt power cycle [ 426.952906][ T5721] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 426.975250][ T5721] usb 3-1: device descriptor read/8, error -71 [ 427.213348][ T5721] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 427.243221][ T4928] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 427.271859][ T9056] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 427.590965][ T5721] usb 3-1: device descriptor read/8, error -71 [ 427.966953][ T5721] usb usb3-port1: unable to enumerate USB device [ 433.420720][ T4928] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 435.082738][ T5719] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 435.302720][ T5719] usb 1-1: Using ep0 maxpacket: 16 [ 435.311240][ T5719] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.322715][ T5719] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 435.336042][ T5719] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 435.345903][ T5719] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 435.354215][ T5719] usb 1-1: Manufacturer: syz [ 435.363210][ T5719] usb 1-1: config 0 descriptor?? [ 436.875359][ T9158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.912021][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.927'. [ 437.595863][ T1219] usb 1-1: USB disconnect, device number 15 [ 439.866897][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.949189][ T9199] Mount JFS Failure: -5 [ 443.200549][ T5721] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 443.487337][ T5721] usb 2-1: Using ep0 maxpacket: 16 [ 443.597078][ T5721] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.612460][ T5721] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 443.655891][ T5721] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 443.852122][ T5721] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 443.867185][ T5721] usb 2-1: Manufacturer: syz [ 443.879191][ T5721] usb 2-1: config 0 descriptor?? [ 446.428004][ T9255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.540821][ T805] usb 2-1: USB disconnect, device number 13 [ 447.875857][ T9277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.916579][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.958'. [ 450.222738][ T5719] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 450.252804][ T5827] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 450.393034][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 450.410887][ T5719] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 450.424362][ T5827] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 450.426752][ T9312] netlink: 20 bytes leftover after parsing attributes in process `syz.1.968'. [ 450.441664][ T5719] usb 3-1: config 0 has no interface number 0 [ 450.449308][ T5827] usb 1-1: config 0 has no interface number 0 [ 450.456703][ T5719] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 450.481116][ T5719] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 450.501781][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.513505][ T9312] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 450.534779][ T5719] usb 3-1: Product: syz [ 450.539720][ T5719] usb 3-1: Manufacturer: syz [ 450.546213][ T5719] usb 3-1: SerialNumber: syz [ 450.565130][ T5719] usb 3-1: config 0 descriptor?? [ 450.591813][ T5719] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 450.609611][ T5827] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 450.632688][ T5827] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 450.636937][ T5719] em28xx 3-1:0.132: Video interface 132 found: [ 450.722791][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.970'. [ 451.081121][ T5719] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 451.098132][ T5827] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 451.113171][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.136138][ T5827] usb 1-1: Product: syz [ 451.147599][ T5827] usb 1-1: Manufacturer: syz [ 451.161527][ T5827] usb 1-1: SerialNumber: syz [ 451.180943][ T5827] usb 1-1: config 0 descriptor?? [ 451.188929][ T9307] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 451.197413][ T9307] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 451.427988][ T9307] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 451.435786][ T9307] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 451.556528][ T9303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.581278][ T9303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.600773][ T9303] trusted_key: encrypted_key: insufficient parameters specified [ 451.641855][ T5719] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 451.650824][ T5827] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 451.655456][ T5719] em28xx 3-1:0.132: board has no eeprom [ 451.686005][ T9307] fuse: Bad value for 'fd' [ 451.691692][ T9320] sd 0:0:1:0: PR command failed: 1026 [ 451.700693][ T5827] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 451.718884][ T9320] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 451.743138][ T5719] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 451.769296][ T9320] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 451.836366][ T5719] em28xx 3-1:0.132: analog set to bulk mode. [ 451.929260][ T5799] em28xx 3-1:0.132: Registering V4L2 extension [ 452.187743][ T5827] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 452.201744][ T5827] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 452.219186][ T5719] usb 3-1: USB disconnect, device number 19 [ 452.241236][ T5827] usb 1-1: USB disconnect, device number 16 [ 452.287947][ T5719] em28xx 3-1:0.132: Disconnecting em28xx [ 454.705474][ T9341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.737036][ T5799] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 455.744822][ T5799] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 455.751989][ T5799] em28xx 3-1:0.132: No AC97 audio processor [ 455.833323][ T5799] usb 3-1: Decoder not found [ 455.902009][ T5799] em28xx 3-1:0.132: failed to create media graph [ 455.923612][ T5799] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 455.961782][ T5799] em28xx 3-1:0.132: Remote control support is not available for this card. [ 455.999227][ T5719] em28xx 3-1:0.132: Closing input extension [ 456.052973][ T9357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.056238][ T5719] em28xx 3-1:0.132: Freeing device [ 457.276605][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 458.555989][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.984'. [ 459.991014][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.982'. [ 461.239629][ T9395] fuse: Bad value for 'fd' [ 467.015732][ T5615] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 467.214998][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 468.092008][ T9455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1002'. [ 468.114608][ T5799] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 468.294640][ T5799] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 468.315623][ T5799] usb 1-1: config 0 has no interface number 0 [ 468.321885][ T5799] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 468.333502][ T5799] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 468.348023][ T5799] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 468.358015][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.369499][ T5799] usb 1-1: Product: syz [ 468.377970][ T5799] usb 1-1: Manufacturer: syz [ 468.392166][ T5799] usb 1-1: SerialNumber: syz [ 468.414493][ T5799] usb 1-1: config 0 descriptor?? [ 468.444248][ T9452] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 468.465184][ T9452] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 468.472924][ T805] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 468.710908][ T9452] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 468.886182][ T9452] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 469.023561][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.996'. [ 469.065004][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 469.307634][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.324067][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.336378][ T805] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 469.347399][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.368942][ T805] usb 2-1: config 0 descriptor?? [ 469.399535][ T805] hub 2-1:0.0: USB hub found [ 469.567825][ T9452] fuse: Bad value for 'fd' [ 469.718152][ T9478] Mount JFS Failure: -5 [ 470.541800][ T5799] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 470.700002][ T5799] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 470.728097][ T805] hub 2-1:0.0: 26 ports detected [ 470.813803][ T805] hub 2-1:0.0: insufficient power available to use all downstream ports [ 470.863223][ T5799] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 470.938944][ T5799] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 470.958133][ T5799] usb 1-1: USB disconnect, device number 17 [ 470.994051][ T805] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 471.000444][ T805] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 471.023547][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'. [ 471.032474][ T9487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1009'. [ 471.066028][ T805] usbhid 2-1:0.0: can't add hid device: -71 [ 471.079908][ T805] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 471.119102][ T9485] sd 0:0:1:0: PR command failed: 1026 [ 471.133613][ T9485] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 471.146781][ T9485] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 471.174372][ T805] usb 2-1: USB disconnect, device number 14 [ 472.275550][ T6669] Bluetooth: hci5: Frame reassembly failed (-84) [ 474.186569][ T4928] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 474.195806][ T5615] Bluetooth: hci5: command 0x1003 tx timeout [ 477.611322][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1021'. [ 478.244181][ T9544] netlink: 'syz.0.1024': attribute type 1 has an invalid length. [ 478.262124][ T9544] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1024'. [ 478.397429][ T9548] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 478.882437][ T9553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1025'. [ 479.405331][ T9557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.502743][ T5735] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 482.149034][ T5712] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 482.172752][ T5735] usb 5-1: Using ep0 maxpacket: 16 [ 482.183323][ T5735] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.194686][ T5735] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 482.210489][ T5735] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 482.222336][ T5735] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 482.231635][ T5735] usb 5-1: Manufacturer: syz [ 482.241652][ T5735] usb 5-1: config 0 descriptor?? [ 482.303156][ T5712] usb 1-1: Using ep0 maxpacket: 16 [ 482.313869][ T5712] usb 1-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 482.329129][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.412815][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 482.439945][ T5712] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 482.463953][ T5712] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.601314][ T5712] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 482.617132][ T5712] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 482.632722][ T5712] usb 1-1: Manufacturer: syz [ 483.031212][ T5712] usb 1-1: config 0 descriptor?? [ 483.364234][ T5712] rc_core: IR keymap rc-hauppauge not found [ 483.389267][ T5712] Registered IR keymap rc-empty [ 483.407877][ T5712] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 483.506160][ T9590] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 483.682780][ T5712] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 483.714590][ T5712] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 483.863152][ T5712] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 483.901881][ T5712] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 483.953045][ T5712] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 484.002808][ T5712] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 484.042769][ T5712] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 484.096954][ T5712] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 484.097439][ T5719] usb 5-1: USB disconnect, device number 12 [ 484.203830][ T805] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 484.256715][ T5712] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 484.373244][ T9600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1036'. [ 484.416295][ T805] usb 3-1: Using ep0 maxpacket: 32 [ 484.473327][ T5712] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 484.485491][ T805] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 484.497569][ T805] usb 3-1: config 0 has no interface number 0 [ 484.514726][ T805] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 484.527559][ T805] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 484.532764][ T5712] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 484.536890][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.553976][ T805] usb 3-1: Product: syz [ 484.559082][ T805] usb 3-1: Manufacturer: syz [ 484.566689][ T805] usb 3-1: SerialNumber: syz [ 484.576224][ T805] usb 3-1: config 0 descriptor?? [ 484.592837][ T5712] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 484.593651][ T805] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 484.636471][ T805] em28xx 3-1:0.132: Video interface 132 found: [ 484.654714][ T5712] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 484.705724][ T5712] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 485.938351][ T805] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 486.016323][ T5712] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 486.089568][ T5712] usb 1-1: USB disconnect, device number 18 [ 487.321775][ T805] em28xx 3-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 487.378285][ T805] em28xx 3-1:0.132: board has no eeprom [ 487.452793][ T805] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 487.582693][ T805] em28xx 3-1:0.132: analog set to bulk mode. [ 487.588851][ T5719] em28xx 3-1:0.132: Registering V4L2 extension [ 487.602243][ T805] usb 3-1: USB disconnect, device number 20 [ 487.615345][ T805] em28xx 3-1:0.132: Disconnecting em28xx [ 489.117430][ T5719] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 489.204368][ T5719] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 489.226736][ T5719] em28xx 3-1:0.132: No AC97 audio processor [ 489.244172][ T5719] usb 3-1: Decoder not found [ 489.258469][ T5719] em28xx 3-1:0.132: failed to create media graph [ 489.272705][ T5719] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 489.287496][ T5719] em28xx 3-1:0.132: Remote control support is not available for this card. [ 489.404263][ T805] em28xx 3-1:0.132: Closing input extension [ 489.424803][ T805] em28xx 3-1:0.132: Freeing device [ 489.673294][ T24] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 491.134221][ T24] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 491.156356][ T24] usb 4-1: config 0 has no interface number 0 [ 491.197138][ T24] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 491.233820][ T24] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 491.314463][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 491.322987][ T9647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1049'. [ 491.578421][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.612197][ T24] usb 4-1: Product: syz [ 491.630943][ T24] usb 4-1: Manufacturer: syz [ 491.642263][ T24] usb 4-1: SerialNumber: syz [ 491.663705][ T24] usb 4-1: config 0 descriptor?? [ 491.680365][ T9631] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 491.693401][ T9631] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 491.898837][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 491.934781][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'. [ 491.943704][ T9651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1051'. [ 491.958215][ T24] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 492.016757][ T24] usb 4-1: USB disconnect, device number 21 [ 493.142205][ T9660] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1042'. [ 493.184869][ T9660] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1042'. [ 493.229932][ T9660] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1042'. [ 493.327565][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1053'. [ 493.630578][ T9660] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1042'. [ 493.707747][ T9660] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1042'. [ 493.722892][ T9660] netlink: 'syz.0.1042': attribute type 5 has an invalid length. [ 493.757370][ T9660] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1042'. [ 496.348651][ T9687] netlink: 'syz.1.1040': attribute type 1 has an invalid length. [ 496.369789][ T9687] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1040'. [ 496.579647][ T5735] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 496.742797][ T5735] usb 5-1: Using ep0 maxpacket: 32 [ 496.782843][ T5719] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 496.965124][ T5719] usb 4-1: Using ep0 maxpacket: 32 [ 496.995361][ T5719] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 497.004015][ T5735] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 497.015607][ T5719] usb 4-1: config 0 has no interface number 0 [ 497.036150][ T5719] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 497.099271][ T5719] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 497.120947][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.152065][ T5719] usb 4-1: Product: syz [ 497.169412][ T5719] usb 4-1: Manufacturer: syz [ 497.195216][ T5719] usb 4-1: SerialNumber: syz [ 497.269230][ T5719] usb 4-1: config 0 descriptor?? [ 497.347337][ T5719] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 497.368408][ T5719] em28xx 4-1:0.132: Video interface 132 found: [ 497.437442][ T5735] usb 5-1: config 0 has no interface number 0 [ 497.445664][ T5735] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 497.472467][ T5735] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 497.487491][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.503562][ T5735] usb 5-1: Product: syz [ 497.512696][ T5735] usb 5-1: Manufacturer: syz [ 497.517434][ T5735] usb 5-1: SerialNumber: syz [ 497.532900][ T5735] usb 5-1: config 0 descriptor?? [ 497.552582][ T5735] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 497.578223][ T5735] em28xx 5-1:0.132: Video interface 132 found: [ 497.703579][ T5719] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 498.220421][ T5735] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 498.351216][ T5719] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 498.365847][ T5719] em28xx 4-1:0.132: board has no eeprom [ 499.200197][ T9694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.430155][ T9694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.789719][ T5719] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 499.854472][ T5719] em28xx 4-1:0.132: analog set to bulk mode. [ 499.885504][ T5721] em28xx 4-1:0.132: Registering V4L2 extension [ 499.911311][ T5735] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 499.954827][ T1219] usb 4-1: USB disconnect, device number 22 [ 500.089637][ T5735] em28xx 5-1:0.132: board has no eeprom [ 500.104323][ T1219] em28xx 4-1:0.132: Disconnecting em28xx [ 500.702742][ T5735] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 500.735290][ T5735] em28xx 5-1:0.132: analog set to bulk mode. [ 501.138113][ T5735] usb 5-1: USB disconnect, device number 13 [ 501.177508][ T5735] em28xx 5-1:0.132: Disconnecting em28xx [ 501.228638][ T5721] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 501.353495][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.367050][ T5721] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 501.377809][ T5721] em28xx 4-1:0.132: No AC97 audio processor [ 501.399452][ T5721] usb 4-1: Decoder not found [ 501.404374][ T5721] em28xx 4-1:0.132: failed to create media graph [ 501.410894][ T5721] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 502.221887][ T5721] em28xx 4-1:0.132: Remote control support is not available for this card. [ 502.256724][ T5712] em28xx 5-1:0.132: Registering V4L2 extension [ 502.378777][ T9749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.424057][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 503.134785][ T9752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'. [ 503.637987][ T9757] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 503.663764][ T5712] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 503.694476][ T5712] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 503.710241][ T9759] netlink: 'syz.2.1075': attribute type 1 has an invalid length. [ 503.726635][ T5712] em28xx 5-1:0.132: No AC97 audio processor [ 503.742264][ T9759] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1075'. [ 503.775900][ T5712] usb 5-1: Decoder not found [ 503.795397][ T5712] em28xx 5-1:0.132: failed to create media graph [ 503.822011][ T5712] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 503.849823][ T5712] em28xx 5-1:0.132: Remote control support is not available for this card. [ 503.879871][ T1219] em28xx 4-1:0.132: Closing input extension [ 504.857522][ T5735] em28xx 5-1:0.132: Closing input extension [ 504.869006][ T1219] em28xx 4-1:0.132: Freeing device [ 504.883948][ T5735] em28xx 5-1:0.132: Freeing device [ 506.342936][ T5721] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 506.553016][ T5721] usb 1-1: Using ep0 maxpacket: 32 [ 506.635467][ T5721] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 506.742581][ T5721] usb 1-1: config 0 has no interface number 0 [ 506.829499][ T5721] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 507.058887][ T5721] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 507.145667][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.174170][ T5721] usb 1-1: Product: syz [ 507.208157][ T5721] usb 1-1: Manufacturer: syz [ 507.224038][ T5721] usb 1-1: SerialNumber: syz [ 507.238393][ T5721] usb 1-1: config 0 descriptor?? [ 507.282573][ T5721] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 507.332947][ T5721] em28xx 1-1:0.132: Video interface 132 found: [ 508.279925][ T5721] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 509.456083][ T5721] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 509.628625][ T5721] em28xx 1-1:0.132: board has no eeprom [ 509.762772][ T5721] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 509.870710][ T5721] em28xx 1-1:0.132: analog set to bulk mode. [ 510.162402][ T24] em28xx 1-1:0.132: Registering V4L2 extension [ 510.233221][ T9807] Mount JFS Failure: -5 [ 510.341926][ T5721] usb 1-1: USB disconnect, device number 19 [ 511.404858][ T5721] em28xx 1-1:0.132: Disconnecting em28xx [ 511.522743][ T5735] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 512.244075][ T5735] usb 3-1: Using ep0 maxpacket: 32 [ 512.290096][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.388397][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.410396][ T5735] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 512.447876][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.635005][ T5735] usb 3-1: config 0 descriptor?? [ 512.715447][ T5735] hub 3-1:0.0: USB hub found [ 512.729352][ T24] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 512.773282][ T24] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 512.806062][ T24] em28xx 1-1:0.132: No AC97 audio processor [ 512.836140][ T24] usb 1-1: Decoder not found [ 512.856509][ T24] em28xx 1-1:0.132: failed to create media graph [ 512.885340][ T24] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 512.915690][ T24] em28xx 1-1:0.132: Remote control support is not available for this card. [ 512.941434][ T5721] em28xx 1-1:0.132: Closing input extension [ 513.020330][ T5735] hub 3-1:0.0: 26 ports detected [ 513.132505][ T9830] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 513.379489][ T5721] em28xx 1-1:0.132: Freeing device [ 513.406758][ T5735] hub 3-1:0.0: insufficient power available to use all downstream ports [ 513.504520][ T5735] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 513.530579][ T5735] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 513.604024][ T5735] usbhid 3-1:0.0: can't add hid device: -71 [ 513.622790][ T5735] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 513.722909][ T5735] usb 3-1: USB disconnect, device number 21 [ 515.181817][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'. [ 515.278058][ T9844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1096'. [ 519.292827][ T4928] Bluetooth: hci5: command 0x1003 tx timeout [ 519.366152][ T5615] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 520.776157][ T9882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 520.788932][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 522.135350][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 522.146605][ T9888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1108'. [ 522.847496][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 523.389587][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 523.576952][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'. [ 524.316342][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.334321][ T9914] netlink: 'syz.1.1113': attribute type 1 has an invalid length. [ 524.350448][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 524.389589][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 524.402443][ T9914] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1113'. [ 524.536510][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 524.549962][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 524.558275][ T24] usb 4-1: Manufacturer: syz [ 524.571305][ T24] usb 4-1: config 0 descriptor?? [ 526.022837][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 526.212800][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 526.228779][ T24] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 526.260644][ T24] usb 3-1: config 0 has no interface number 0 [ 526.280267][ T24] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 526.316190][ T24] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 526.332747][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.353558][ T24] usb 3-1: Product: syz [ 526.360929][ T24] usb 3-1: Manufacturer: syz [ 526.386480][ T24] usb 3-1: SerialNumber: syz [ 526.410645][ T24] usb 3-1: config 0 descriptor?? [ 526.429001][ T24] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 526.449449][ T24] em28xx 3-1:0.132: Video interface 132 found: [ 527.873449][ T24] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 527.903772][ T5742] usb 4-1: USB disconnect, device number 23 [ 527.997839][ T24] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 528.046509][ T24] em28xx 3-1:0.132: board has no eeprom [ 528.183497][ T24] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 528.199919][ T24] em28xx 3-1:0.132: analog set to bulk mode. [ 528.224705][ T5721] em28xx 3-1:0.132: Registering V4L2 extension [ 528.233588][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 528.242515][ T9943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1122'. [ 528.729922][ T24] usb 3-1: USB disconnect, device number 22 [ 528.748553][ T24] em28xx 3-1:0.132: Disconnecting em28xx [ 530.460528][ T5721] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 530.485104][ T5721] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 530.652724][ T5721] em28xx 3-1:0.132: No AC97 audio processor [ 530.666969][ T5721] usb 3-1: Decoder not found [ 530.678865][ T5721] em28xx 3-1:0.132: failed to create media graph [ 530.692714][ T5721] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 530.702360][ T5721] em28xx 3-1:0.132: Remote control support is not available for this card. [ 530.726256][ T24] em28xx 3-1:0.132: Closing input extension [ 531.637023][ T24] em28xx 3-1:0.132: Freeing device [ 531.793623][ T9972] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1131'. [ 531.835670][ T9972] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1131'. [ 531.866933][ T9972] netlink: 'syz.3.1131': attribute type 5 has an invalid length. [ 531.895674][ T9972] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1131'. [ 531.929512][ T9976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1130'. [ 531.939808][ T9976] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 532.989588][ T9978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1132'. [ 533.256253][ T1219] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 533.281530][ T9996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'. [ 533.343997][ T5742] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 533.472114][ T1219] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 533.539233][ T1219] usb 2-1: config 0 has no interface number 0 [ 533.573828][ T5742] usb 3-1: Using ep0 maxpacket: 16 [ 533.586897][ T1219] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 533.609309][ T1219] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 533.621161][ T9998] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1136'. [ 533.621627][ T5742] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.630404][ T9998] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1136'. [ 533.642289][ T5742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 533.651945][ T9998] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1136'. [ 533.667618][ T5742] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 533.680567][ T9998] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1136'. [ 533.693169][ T9998] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1136'. [ 533.702344][ T9998] netlink: 'syz.4.1136': attribute type 5 has an invalid length. [ 533.702531][ T1219] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 533.710680][ T5721] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 533.719563][ T1219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.727566][ T9998] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1136'. [ 533.735302][ T1219] usb 2-1: Product: syz [ 533.749420][ T1219] usb 2-1: Manufacturer: syz [ 533.754162][ T1219] usb 2-1: SerialNumber: syz [ 533.758916][ T5742] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 533.768145][ T5742] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 533.776303][ T5742] usb 3-1: Manufacturer: syz [ 533.784402][ T1219] usb 2-1: config 0 descriptor?? [ 533.790689][ T9984] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 533.798449][ T9984] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 533.807751][ T5742] usb 3-1: config 0 descriptor?? [ 534.035903][ T5721] usb 4-1: Using ep0 maxpacket: 32 [ 534.054915][ T5721] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 534.063784][ T5721] usb 4-1: config 0 has no interface number 0 [ 534.069959][ T5721] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 534.080461][ T9984] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 534.082584][ T5721] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 534.101463][ T9984] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 534.108964][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.118185][ T5721] usb 4-1: Product: syz [ 534.122435][ T5721] usb 4-1: Manufacturer: syz [ 534.127665][ T5721] usb 4-1: SerialNumber: syz [ 534.169050][ T5721] usb 4-1: config 0 descriptor?? [ 534.295189][ T5721] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 534.307055][ T5721] em28xx 4-1:0.132: Video interface 132 found: [ 534.596253][ T1219] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 534.599540][ T9984] fuse: Bad value for 'fd' [ 534.633019][ T1219] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 534.642803][ T1219] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 535.920597][ T1219] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 535.921552][ T5721] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 535.933110][ T1219] usb 2-1: USB disconnect, device number 15 [ 536.041151][ T5742] usb 3-1: USB disconnect, device number 23 [ 536.506567][ T5721] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 536.557198][ T5721] em28xx 4-1:0.132: board has no eeprom [ 536.748731][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.816171][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.854434][ T5742] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 536.965808][ T9991] trusted_key: encrypted_key: insufficient parameters specified [ 537.679228][ T5721] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 537.729306][ T5721] em28xx 4-1:0.132: analog set to bulk mode. [ 537.854898][ T24] em28xx 4-1:0.132: Registering V4L2 extension [ 538.228308][ T5721] usb 4-1: USB disconnect, device number 24 [ 538.414210][ T5742] usb 3-1: Using ep0 maxpacket: 16 [ 538.722395][ T5721] em28xx 4-1:0.132: Disconnecting em28xx [ 539.167247][ T5742] usb 3-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 539.177785][ T5742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 539.188820][ T5742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 539.198572][ T5742] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 539.557520][T10031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.788043][ T24] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 539.839000][ T5742] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.843479][ T24] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 540.007958][ T24] em28xx 4-1:0.132: No AC97 audio processor [ 540.554246][ T24] usb 4-1: Decoder not found [ 540.621646][ T24] em28xx 4-1:0.132: failed to create media graph [ 540.725072][ T24] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 540.855761][ T5742] usb 3-1: string descriptor 0 read error: -71 [ 540.861998][ T5742] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 540.875137][ T5742] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 540.886719][ T5742] usb 3-1: config 0 descriptor?? [ 540.892194][ T5742] usb 3-1: can't set config #0, error -71 [ 540.899935][ T5742] usb 3-1: USB disconnect, device number 24 [ 540.900724][ T24] em28xx 4-1:0.132: Remote control support is not available for this card. [ 541.627093][ T5721] em28xx 4-1:0.132: Closing input extension [ 541.641668][ T5721] em28xx 4-1:0.132: Freeing device [ 542.203526][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1147'. [ 544.201391][T10061] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 544.549953][T10064] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 545.864721][ T5721] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 549.817985][T10094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.171107][ T1219] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 555.365608][ T1219] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 555.380961][ T1219] usb 2-1: config 0 has no interface number 0 [ 555.394860][ T1219] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 555.473189][ T1219] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 555.518898][ T1219] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 555.539033][ T1219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.547735][ T1219] usb 2-1: Product: syz [ 555.555314][ T1219] usb 2-1: Manufacturer: syz [ 555.659636][ T1219] usb 2-1: SerialNumber: syz [ 555.667744][ T1219] usb 2-1: config 0 descriptor?? [ 555.676152][T10137] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 555.694096][T10137] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 555.764225][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'. [ 556.178041][T10137] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 556.186241][T10137] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 556.362848][ T5615] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 556.369973][ T4928] Bluetooth: hci5: command 0x1003 tx timeout [ 556.418534][T10137] fuse: Bad value for 'fd' [ 556.925238][ T1219] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 556.936133][ T1219] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 556.945735][ T1219] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 556.957012][ T1219] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 556.970568][ T1219] usb 2-1: USB disconnect, device number 16 [ 558.453140][ T7096] Bluetooth: hci5: Frame reassembly failed (-84) [ 559.325631][T10185] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 560.763574][ T5615] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 562.477415][T10211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.864074][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.430802][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1191'. [ 565.006042][ T7098] Bluetooth: hci5: Frame reassembly failed (-84) [ 566.022892][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 566.297150][T10238] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1198'. [ 566.307581][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 566.317950][ T24] usb 2-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 566.329633][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 566.341336][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 566.352181][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 566.362746][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 566.459107][T10238] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1198'. [ 566.468838][T10238] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1198'. [ 566.479215][T10238] netlink: 'syz.2.1198': attribute type 5 has an invalid length. [ 566.487780][T10238] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1198'. [ 566.487957][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 566.512716][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 566.520893][ T24] usb 2-1: Manufacturer: syz [ 566.665615][ T24] usb 2-1: config 0 descriptor?? [ 567.063865][ T5615] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 567.234751][ T24] rc_core: IR keymap rc-hauppauge not found [ 567.240765][ T24] Registered IR keymap rc-empty [ 567.249550][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 567.407769][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 567.433373][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 567.527352][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 567.567830][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 567.596616][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 567.633523][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 568.085105][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 569.042784][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 569.072765][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 570.234245][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 570.272798][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 570.339546][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1204'. [ 570.743440][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 570.783644][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 570.834347][ T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 570.866277][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 571.020849][ T24] usb 2-1: USB disconnect, device number 17 [ 571.036570][T10271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1206'. [ 571.045963][T10271] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 571.619721][T10282] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 573.572819][ T5827] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 573.802706][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 573.812716][ T5827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.869483][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 573.918792][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 573.960482][ T5827] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 573.998014][ T5827] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.041900][ T5827] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 574.067092][ T5827] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 574.082903][ T805] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 574.100354][ T5827] usb 4-1: Manufacturer: syz [ 574.163092][ T5827] usb 4-1: config 0 descriptor?? [ 575.364558][ T805] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 575.373356][ T805] usb 1-1: config 0 has no interface number 0 [ 575.379573][ T805] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 575.390975][ T805] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 575.413199][ T805] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 575.424264][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.432374][ T805] usb 1-1: Product: syz [ 575.436770][ T805] usb 1-1: Manufacturer: syz [ 575.441459][ T805] usb 1-1: SerialNumber: syz [ 575.449547][ T805] usb 1-1: config 0 descriptor?? [ 575.455792][T10305] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 575.463677][T10305] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 576.208082][T10305] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 576.230025][T10305] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 577.748758][ T5827] rc_core: IR keymap rc-hauppauge not found [ 577.773648][ T5827] Registered IR keymap rc-empty [ 577.804827][ T5827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 577.826596][ T805] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 577.846316][ T805] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 577.861124][ T805] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 577.872928][ T5827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 577.914948][ T805] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 577.935050][ T5827] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 578.001209][ T5827] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 578.084315][ T805] usb 1-1: USB disconnect, device number 20 [ 578.303278][T10330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1222'. [ 579.578328][ T5827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 579.609320][ T5827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 579.708408][ T5827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 579.752781][ T5827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 579.772776][ T5827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 579.803965][ T5827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 579.845962][ T5827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 580.383398][ T5827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 580.402760][ T5827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 580.422750][ T5827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 580.445214][ T5827] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 580.453964][ T5827] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 580.626579][ T5827] usb 4-1: USB disconnect, device number 26 [ 581.965030][T10351] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 582.321550][T10360] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1234'. [ 582.330781][T10360] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1234'. [ 582.340226][T10360] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1234'. [ 582.355124][T10360] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1234'. [ 582.365073][T10360] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1234'. [ 582.375814][T10360] netlink: 'syz.0.1234': attribute type 5 has an invalid length. [ 582.387757][T10360] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1234'. [ 582.437994][ T5721] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 582.540579][T10365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1223'. [ 582.549843][T10365] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 582.932743][ T5721] usb 4-1: Using ep0 maxpacket: 16 [ 582.950972][ T5721] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.957854][T10367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1235'. [ 582.980531][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 583.005714][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 583.028464][ T5721] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 583.050184][ T5721] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.079318][ T5721] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 583.095998][ T5721] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 583.112610][ T5721] usb 4-1: Manufacturer: syz [ 583.251349][ T5721] usb 4-1: config 0 descriptor?? [ 583.411514][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'. [ 583.731822][T10373] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 586.063936][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1242'. [ 586.565327][ T5721] rc_core: IR keymap rc-hauppauge not found [ 586.571855][ T5721] Registered IR keymap rc-empty [ 586.580049][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 586.622984][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 586.732173][ T5721] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 586.750630][ T5721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16 [ 586.773222][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 586.793439][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 587.302307][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 587.412495][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1244'. [ 587.428753][T10408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1244'. [ 587.532771][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 588.074237][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 588.093719][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 589.971311][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 589.992778][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 590.149552][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 590.302662][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 590.443753][ T5721] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 590.480931][ T5721] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 590.527326][ T5721] usb 4-1: USB disconnect, device number 27 [ 590.816656][ T7098] Bluetooth: hci5: Frame reassembly failed (-84) [ 591.178197][T10425] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 592.814115][ T5615] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 594.701099][T10440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1249'. [ 596.463284][ T805] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 596.618641][T10475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1262'. [ 596.904892][T10477] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1263'. [ 596.915256][T10477] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1263'. [ 596.922823][ T805] usb 3-1: Using ep0 maxpacket: 32 [ 596.929546][T10477] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1263'. [ 596.932159][ T805] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 596.947334][ T805] usb 3-1: config 0 has no interface number 0 [ 596.953595][ T805] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 596.966502][ T805] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 596.976358][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.979071][T10477] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1263'. [ 596.995867][ T805] usb 3-1: Product: syz [ 596.995897][T10477] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1263'. [ 597.009490][ T805] usb 3-1: Manufacturer: syz [ 597.009542][T10477] netlink: 'syz.0.1263': attribute type 5 has an invalid length. [ 597.023162][ T805] usb 3-1: SerialNumber: syz [ 597.023481][T10477] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1263'. [ 597.041554][ T805] usb 3-1: config 0 descriptor?? [ 597.053262][ T805] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 597.064088][ T805] em28xx 3-1:0.132: Video interface 132 found: [ 597.330849][T10483] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 597.776755][T10466] Bluetooth: hci5: command 0x1003 tx timeout [ 597.782946][ T5615] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 597.795644][ T805] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 598.254503][ T4928] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 598.481574][ T805] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 598.514285][ T805] em28xx 3-1:0.132: board has no eeprom [ 598.588008][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 598.597359][T10492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1267'. [ 598.777956][T10461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.020131][T10461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.604175][ T805] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 599.617680][ T805] em28xx 3-1:0.132: analog set to bulk mode. [ 599.759526][ T5721] em28xx 3-1:0.132: Registering V4L2 extension [ 599.769832][ T805] usb 3-1: USB disconnect, device number 25 [ 599.806493][ T805] em28xx 3-1:0.132: Disconnecting em28xx [ 599.822264][T10494] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1270'. [ 599.831707][T10494] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1270'. [ 599.840795][T10494] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1270'. [ 600.456297][T10494] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1270'. [ 600.485554][T10494] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1270'. [ 600.518094][T10494] netlink: 'syz.4.1270': attribute type 5 has an invalid length. [ 600.538938][T10494] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1270'. [ 600.634381][ T5721] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 600.734266][T10513] Mount JFS Failure: -5 [ 602.545415][ T5721] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 603.151496][ T5721] em28xx 3-1:0.132: No AC97 audio processor [ 603.290392][ T5721] usb 3-1: Decoder not found [ 603.295112][ T5721] em28xx 3-1:0.132: failed to create media graph [ 603.298817][T10531] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 603.317940][ T5721] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 603.329077][ T5721] em28xx 3-1:0.132: Remote control support is not available for this card. [ 603.338266][ T805] em28xx 3-1:0.132: Closing input extension [ 603.807241][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 603.827334][ T805] em28xx 3-1:0.132: Freeing device [ 603.832710][T10535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1277'. [ 604.728927][T10540] Mount JFS Failure: -5 [ 606.669353][ T5615] Bluetooth: hci5: command 0x1003 tx timeout [ 606.682098][ T4928] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 609.211744][T10567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1288'. [ 610.430835][T10578] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 610.779057][T10588] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1292'. [ 611.338710][ T5712] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 612.122705][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 612.160535][ T5712] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 612.758842][ T5712] usb 2-1: config 0 has no interface number 0 [ 612.795633][ T5712] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 612.943145][ T5712] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 612.969268][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.983751][ T5712] usb 2-1: Product: syz [ 612.988567][ T5712] usb 2-1: Manufacturer: syz [ 613.419093][ T5712] usb 2-1: SerialNumber: syz [ 613.432840][ T5712] usb 2-1: config 0 descriptor?? [ 613.450381][ T5712] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 613.470605][ T5712] em28xx 2-1:0.132: Video interface 132 found: [ 613.552111][T10608] Mount JFS Failure: -5 [ 613.988643][ T5712] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 614.350979][ T5712] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 615.757217][ T5712] em28xx 2-1:0.132: board has no eeprom [ 615.828601][ T5712] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 615.837623][ T5712] em28xx 2-1:0.132: analog set to bulk mode. [ 615.843957][ T5742] em28xx 2-1:0.132: Registering V4L2 extension [ 615.945137][ T5712] usb 2-1: USB disconnect, device number 18 [ 615.966896][ T5712] em28xx 2-1:0.132: Disconnecting em28xx [ 617.134381][ T5742] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 617.148307][ T5742] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 617.155770][ T5742] em28xx 2-1:0.132: No AC97 audio processor [ 617.529510][ T5742] usb 2-1: Decoder not found [ 617.535472][ T5742] em28xx 2-1:0.132: failed to create media graph [ 617.541879][ T5742] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 617.574338][ T5742] em28xx 2-1:0.132: Remote control support is not available for this card. [ 617.589695][ T5712] em28xx 2-1:0.132: Closing input extension [ 617.602537][ T5712] em28xx 2-1:0.132: Freeing device [ 618.331714][T10639] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 619.298734][T10652] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1307'. [ 619.426805][T10654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1308'. [ 619.436429][T10654] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 620.289819][ T5742] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 621.454979][ T5742] usb 2-1: Using ep0 maxpacket: 32 [ 621.475791][ T5742] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 621.511749][ T5742] usb 2-1: config 0 has no interface number 0 [ 621.524890][ T5742] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 621.544139][ T5742] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 621.557912][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.645168][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1314'. [ 621.654202][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1314'. [ 622.515819][ T5742] usb 2-1: Product: syz [ 622.520754][ T5742] usb 2-1: Manufacturer: syz [ 622.527364][ T5742] usb 2-1: SerialNumber: syz [ 622.774424][ T5742] usb 2-1: config 0 descriptor?? [ 622.817631][ T5742] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 622.843623][ T5742] em28xx 2-1:0.132: Video interface 132 found: [ 622.984041][ T5742] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 623.527164][ T5742] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 623.551923][ T5742] em28xx 2-1:0.132: board has no eeprom [ 623.704686][ T5742] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 623.738170][ T5742] em28xx 2-1:0.132: analog set to bulk mode. [ 623.810464][T10691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1318'. [ 624.175578][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.197191][ T5712] em28xx 2-1:0.132: Registering V4L2 extension [ 624.230444][ T5742] usb 2-1: USB disconnect, device number 19 [ 624.301889][ T5712] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 624.338023][ T5742] em28xx 2-1:0.132: Disconnecting em28xx [ 624.736704][ T5615] Bluetooth: hci5: command 0x1003 tx timeout [ 624.745498][ T4928] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 625.015639][ T5712] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 625.026134][ T5712] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 625.035609][ T5712] em28xx 2-1:0.132: No AC97 audio processor [ 625.484714][ T5712] usb 2-1: Decoder not found [ 625.498459][ T5712] em28xx 2-1:0.132: failed to create media graph [ 625.513732][ T5712] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 625.537549][ T5712] em28xx 2-1:0.132: Remote control support is not available for this card. [ 625.546297][ T5742] em28xx 2-1:0.132: Closing input extension [ 625.555902][ T5742] em28xx 2-1:0.132: Freeing device [ 625.902759][T10717] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1322'. [ 628.155937][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1326'. [ 628.164997][T10734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1326'. [ 628.672835][ T5721] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 628.942758][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 629.008493][ T5721] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 629.049708][ T5721] usb 2-1: config 0 has no interface number 0 [ 629.171171][ T5721] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 629.434028][ T5721] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 629.513943][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.546905][ T5721] usb 2-1: Product: syz [ 629.563081][ T5721] usb 2-1: Manufacturer: syz [ 629.592279][ T5721] usb 2-1: SerialNumber: syz [ 629.816082][ T5721] usb 2-1: config 0 descriptor?? [ 629.890089][ T5721] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 629.925438][ T5721] em28xx 2-1:0.132: Video interface 132 found: [ 630.065719][T10750] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 630.239522][ T5721] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 631.183578][T10731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.209523][T10731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.304786][ T5721] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 631.322841][ T5721] em28xx 2-1:0.132: board has no eeprom [ 631.815646][ T5721] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 631.892231][ T5721] em28xx 2-1:0.132: analog set to bulk mode. [ 632.254503][T10748] em28xx 2-1:0.132: Registering V4L2 extension [ 632.362405][T10769] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 632.464252][T10772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'. [ 633.008176][ T5721] usb 2-1: USB disconnect, device number 20 [ 633.031742][ T5721] em28xx 2-1:0.132: Disconnecting em28xx [ 634.622692][T10748] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 634.662776][T10748] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 634.670736][T10748] em28xx 2-1:0.132: No AC97 audio processor [ 635.256318][T10748] usb 2-1: Decoder not found [ 635.295885][T10748] em28xx 2-1:0.132: failed to create media graph [ 635.310932][T10748] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 635.329682][T10748] em28xx 2-1:0.132: Remote control support is not available for this card. [ 635.338779][ T5721] em28xx 2-1:0.132: Closing input extension [ 635.419339][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1341'. [ 635.428732][T10796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1341'. [ 635.620600][ T5721] em28xx 2-1:0.132: Freeing device [ 635.628869][T10798] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 638.313035][T10832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1351'. [ 639.382719][T10748] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 639.966462][T10853] Mount JFS Failure: -5 [ 640.117166][T10748] usb 1-1: Using ep0 maxpacket: 32 [ 640.391274][T10855] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 640.547514][T10748] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 640.556722][T10748] usb 1-1: config 0 has no interface number 0 [ 640.563263][T10748] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 640.585784][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 640.594761][T10858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1359'. [ 640.618635][T10748] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 640.682997][T10748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.739351][T10748] usb 1-1: Product: syz [ 640.791610][T10748] usb 1-1: Manufacturer: syz [ 640.843187][T10748] usb 1-1: SerialNumber: syz [ 641.043108][T10748] usb 1-1: config 0 descriptor?? [ 641.312379][T10748] usb 1-1: can't set config #0, error -71 [ 641.740796][ T7096] Bluetooth: hci5: Frame reassembly failed (-84) [ 642.518942][T10748] usb 1-1: USB disconnect, device number 21 [ 644.177025][ T5615] Bluetooth: hci5: command 0x1003 tx timeout [ 644.185071][ T4928] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 645.377303][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1366'. [ 646.932908][T10890] Mount JFS Failure: -5 [ 647.192816][ T5712] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 647.374989][ T5712] usb 3-1: Using ep0 maxpacket: 32 [ 647.461056][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.485991][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.524969][ T5712] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 647.579382][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.633541][ T5712] usb 3-1: config 0 descriptor?? [ 647.665277][ T5712] hub 3-1:0.0: USB hub found [ 647.911711][T10901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1372'. [ 648.082743][ T5712] hub 3-1:0.0: 26 ports detected [ 648.088165][ T5712] hub 3-1:0.0: insufficient power available to use all downstream ports [ 649.021909][ T5712] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 649.168431][ T5712] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 649.258633][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1374'. [ 650.152868][ T5712] usbhid 3-1:0.0: can't add hid device: -71 [ 650.159097][ T5712] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 650.193874][ T5712] usb 3-1: USB disconnect, device number 26 [ 650.650872][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1380'. [ 650.659997][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1380'. [ 651.478529][T10929] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1377'. [ 651.667850][T10929] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1377'. [ 651.690508][T10929] netlink: 'syz.2.1377': attribute type 5 has an invalid length. [ 651.721650][T10929] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1377'. [ 651.738222][ T5721] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 651.934786][ T5721] usb 1-1: Using ep0 maxpacket: 16 [ 652.004475][ T5721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.026395][ T5721] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 652.099993][ T5721] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 652.144105][ T5721] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 652.184048][ T5721] usb 1-1: Manufacturer: syz [ 652.380797][ T5721] usb 1-1: config 0 descriptor?? [ 654.573790][ T4928] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 654.982899][T10748] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 655.164341][ T5712] usb 1-1: USB disconnect, device number 22 [ 655.668956][T10984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1391'. [ 655.677999][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 655.715396][T10748] usb 2-1: Using ep0 maxpacket: 32 [ 655.730394][T10748] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 655.750316][T10748] usb 2-1: config 0 has no interface number 0 [ 655.763422][T10748] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 655.801570][T10748] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 655.911010][T10748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.921189][T10748] usb 2-1: Product: syz [ 655.928028][T10748] usb 2-1: Manufacturer: syz [ 655.939035][T10748] usb 2-1: SerialNumber: syz [ 656.007961][T10748] usb 2-1: config 0 descriptor?? [ 656.029340][T10748] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 656.058222][T10748] em28xx 2-1:0.132: Video interface 132 found: [ 657.055872][T10748] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 659.096515][T10748] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 659.112301][T10748] em28xx 2-1:0.132: board has no eeprom [ 659.190459][T10748] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 659.203305][T10748] em28xx 2-1:0.132: analog set to bulk mode. [ 659.209711][ T5720] em28xx 2-1:0.132: Registering V4L2 extension [ 659.526497][T11016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1400'. [ 659.575342][ T5720] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 659.607654][T10748] usb 2-1: USB disconnect, device number 21 [ 659.621459][ T5720] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 659.639014][T10748] em28xx 2-1:0.132: Disconnecting em28xx [ 660.282844][T11026] Mount JFS Failure: -5 [ 660.495038][ T5615] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 661.633475][ T5720] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 661.657767][ T5720] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 661.726688][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'. [ 661.735871][T11036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1404'. [ 662.675384][ T5720] em28xx 2-1:0.132: No AC97 audio processor [ 662.682890][ T5720] usb 2-1: Decoder not found [ 662.687526][ T5720] em28xx 2-1:0.132: failed to create media graph [ 662.694038][ T5720] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 662.702429][ T5720] em28xx 2-1:0.132: Remote control support is not available for this card. [ 662.711182][T10748] em28xx 2-1:0.132: Closing input extension [ 662.720652][T10748] em28xx 2-1:0.132: Freeing device [ 663.166311][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 663.175933][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 663.951642][ T7098] Bluetooth: hci5: Frame reassembly failed (-84) [ 663.966024][ T7098] Bluetooth: hci5: Frame reassembly failed (-84) [ 666.373286][ T4928] Bluetooth: hci5: command 0x1003 tx timeout [ 666.381659][ T5615] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 666.473307][T11073] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1413'. [ 666.482487][T11073] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1413'. [ 666.491658][T11073] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1413'. [ 666.505547][T11073] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1413'. [ 666.514867][T11073] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1413'. [ 666.533423][T11073] netlink: 'syz.2.1413': attribute type 5 has an invalid length. [ 666.543283][T11073] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1413'. [ 668.101483][T11087] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 671.052814][T11121] Mount JFS Failure: -5 [ 671.866760][T11126] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 672.354720][T11131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 672.365283][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1430'. [ 672.712713][ T5742] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 673.340513][ T5742] usb 5-1: Using ep0 maxpacket: 32 [ 673.465908][ T5742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.603249][ T5742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.703928][ T5742] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 673.713094][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.734179][ T5742] usb 5-1: config 0 descriptor?? [ 673.776222][ T5742] hub 5-1:0.0: USB hub found [ 674.059777][ T5742] hub 5-1:0.0: 26 ports detected [ 674.099866][ T5742] hub 5-1:0.0: insufficient power available to use all downstream ports [ 674.128992][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1439'. [ 674.556520][ T5742] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 674.572434][ T5742] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 674.589116][ T5742] usbhid 5-1:0.0: can't add hid device: -71 [ 674.595446][ T5742] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 674.625287][ T5742] usb 5-1: USB disconnect, device number 14 [ 675.322877][ T5720] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 675.597264][T11176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 675.609948][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'. [ 675.792901][ T5720] usb 2-1: Using ep0 maxpacket: 16 [ 675.814439][ T5720] usb 2-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 676.788903][T11184] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 676.830905][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 676.873406][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 676.915694][ T5720] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 676.945801][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1445'. [ 676.958346][ T5720] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 676.974190][ T5720] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 676.989608][ T5720] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 677.171060][ T5720] usb 2-1: Manufacturer: syz [ 677.185551][ T5720] usb 2-1: config 0 descriptor?? [ 677.188359][T11194] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 677.271005][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 677.512864][ T5720] rc_core: IR keymap rc-hauppauge not found [ 677.528222][ T5720] Registered IR keymap rc-empty [ 677.543599][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 677.582770][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 677.624224][ T5720] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 677.670949][ T5720] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 677.763466][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 677.871466][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 677.935934][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 678.014776][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 678.165278][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 678.383004][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 678.414894][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 678.590430][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 678.613890][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 678.644890][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 678.851259][ T5720] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 679.168379][ T5720] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 679.408017][ T5720] usb 2-1: USB disconnect, device number 22 [ 682.240402][T11229] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1457'. [ 682.474638][T11229] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1457'. [ 682.607418][T11229] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1457'. [ 682.655463][T11233] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1457'. [ 682.689960][T11233] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1457'. [ 682.713170][T11233] netlink: 'syz.1.1457': attribute type 5 has an invalid length. [ 682.737243][T11233] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1457'. [ 685.949262][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.009850][T11272] kthread_run failed with err -4 [ 688.488193][T11299] Mount JFS Failure: -5 [ 689.130177][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1476'. [ 689.140329][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'. [ 689.736385][T11312] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 689.774388][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1478'. [ 690.495669][T11314] Can't find ip_set type hash [ 690.694912][T11324] netlink: 'syz.0.1480': attribute type 1 has an invalid length. [ 690.702805][T11324] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1480'. [ 692.908292][ T30] audit: type=1400 audit(1778947086.886:317): avc: denied { write } for pid=11335 comm="syz.3.1484" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 693.085027][T11343] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 695.333746][T11361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1489'. [ 695.343369][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 695.983165][T11368] Mount JFS Failure: -5 [ 697.145325][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1494'. [ 697.622964][ T5615] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 698.116425][T11389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1496'. [ 701.802228][T11422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 701.813333][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1506'. [ 705.152497][T11432] Mount JFS Failure: -5 [ 705.389079][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1510'. [ 706.970507][T11451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1514'. [ 708.302827][T10642] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 709.114774][T11466] Can't find ip_set type hash:net, [ 709.333087][T10642] usb 3-1: Using ep0 maxpacket: 32 [ 709.384400][T10642] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.511631][T10642] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.534859][T10642] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 709.570491][T10642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.315070][T10642] usb 3-1: config 0 descriptor?? [ 710.330783][T10642] usb 3-1: can't set config #0, error -71 [ 710.398553][T10642] usb 3-1: USB disconnect, device number 27 [ 710.421668][T11475] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1522'. [ 710.435127][T11475] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1522'. [ 710.452740][T11475] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1522'. [ 710.523575][T11479] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1522'. [ 710.543100][T11479] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1522'. [ 710.586669][T11479] netlink: 'syz.2.1522': attribute type 5 has an invalid length. [ 710.663129][T11479] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1522'. [ 714.972899][T10748] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 715.137667][T10748] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 715.249837][T11509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 715.289874][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1523'. [ 716.086747][T10748] usb 4-1: config 0 has no interface number 0 [ 716.114709][T10748] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 716.127728][T10748] usb 4-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 716.140807][T10748] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 716.149971][T10748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.198334][T10748] usb 4-1: Product: syz [ 716.203724][T10748] usb 4-1: Manufacturer: syz [ 716.209667][T10748] usb 4-1: SerialNumber: syz [ 716.218889][T10748] usb 4-1: config 0 descriptor?? [ 716.227625][T11502] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 716.242282][T10748] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 716.253269][T10748] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 717.421694][T11519] Can't find ip_set type hash:net, [ 717.588569][T11520] fuse: Bad value for 'fd' [ 718.453919][T11530] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1534'. [ 718.476168][T11530] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1534'. [ 718.491802][T11530] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1534'. [ 718.511055][T11530] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1534'. [ 718.527703][T11530] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1534'. [ 718.546764][T11530] netlink: 'syz.4.1534': attribute type 5 has an invalid length. [ 718.567566][T11530] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1534'. [ 719.775091][ T5721] usb 4-1: USB disconnect, device number 28 [ 722.692886][T10748] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 722.782934][ T1219] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 722.878204][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 722.887455][T11578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1547'. [ 723.421014][ T1219] usb 2-1: Using ep0 maxpacket: 32 [ 723.533017][T10748] usb 5-1: Using ep0 maxpacket: 32 [ 723.607333][T10748] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 723.653687][T10748] usb 5-1: config 0 has no interface number 0 [ 723.693967][T10748] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 723.797894][T10748] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 723.838254][ T1219] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 723.846727][ T1219] usb 2-1: config 0 has no interface number 0 [ 723.852912][ T1219] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 723.858182][T10748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.864853][ T1219] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 723.881951][ T1219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.890049][ T1219] usb 2-1: Product: syz [ 723.894269][ T1219] usb 2-1: Manufacturer: syz [ 723.899727][ T1219] usb 2-1: SerialNumber: syz [ 723.908145][ T1219] usb 2-1: config 0 descriptor?? [ 723.909515][T10748] usb 5-1: Product: syz [ 723.921958][ T1219] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 723.931881][ T1219] em28xx 2-1:0.132: Video interface 132 found: [ 723.941487][T10748] usb 5-1: Manufacturer: syz [ 723.952898][T10748] usb 5-1: SerialNumber: syz [ 723.979374][T10748] usb 5-1: config 0 descriptor?? [ 724.015849][T10748] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 724.042744][T10748] em28xx 5-1:0.132: Video interface 132 found: [ 724.422753][ T1219] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 724.425339][T11582] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1548'. [ 724.482258][T11582] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1548'. [ 724.548383][T10748] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 724.644555][T11582] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1548'. [ 724.682522][T11584] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1548'. [ 724.777418][T11584] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1548'. [ 724.848622][T11584] netlink: 'syz.2.1548': attribute type 5 has an invalid length. [ 724.885006][T11584] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1548'. [ 725.100334][T10748] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 725.120064][T11591] netlink: 'syz.2.1551': attribute type 1 has an invalid length. [ 725.152801][T11591] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1551'. [ 725.353528][T11560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.472352][T11560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.726295][T10748] em28xx 5-1:0.132: board has no eeprom [ 725.728943][T11570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.956565][T11594] Can't find ip_set type hash:net,ifa [ 725.963643][T11570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.971495][T11560] trusted_key: encrypted_key: insufficient parameters specified [ 726.079472][ T1219] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 726.117912][ T1219] em28xx 2-1:0.132: board has no eeprom [ 726.132791][T10748] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 726.144729][T10748] em28xx 5-1:0.132: analog set to bulk mode. [ 726.152471][ T5720] em28xx 5-1:0.132: Registering V4L2 extension [ 726.166054][T10748] usb 5-1: USB disconnect, device number 15 [ 726.184025][T10748] em28xx 5-1:0.132: Disconnecting em28xx [ 726.204822][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 726.317600][ T1219] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 726.342686][ T1219] em28xx 2-1:0.132: analog set to bulk mode. [ 726.370495][ T1219] usb 2-1: USB disconnect, device number 23 [ 726.387461][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 726.397774][ T1219] em28xx 2-1:0.132: Disconnecting em28xx [ 726.399180][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 726.525475][ T24] usb 4-1: config 0 has no interface number 0 [ 726.640135][ T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 726.859552][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 726.925268][ T5720] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 726.948297][ T5720] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 726.956340][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.973278][ T5720] em28xx 5-1:0.132: No AC97 audio processor [ 727.006538][ T24] usb 4-1: Product: syz [ 727.010863][ T24] usb 4-1: Manufacturer: syz [ 727.018501][ T5720] usb 5-1: Decoder not found [ 727.023217][ T24] usb 4-1: SerialNumber: syz [ 727.027851][ T5720] em28xx 5-1:0.132: failed to create media graph [ 727.036812][ T24] usb 4-1: config 0 descriptor?? [ 727.041813][ T5720] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 727.067884][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 727.086832][ T5720] em28xx 5-1:0.132: Remote control support is not available for this card. [ 727.095691][ T24] em28xx 4-1:0.132: Video interface 132 found: [ 727.131743][T10642] em28xx 2-1:0.132: Registering V4L2 extension [ 728.635198][ T24] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 728.818149][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 728.836727][ T24] em28xx 4-1:0.132: board has no eeprom [ 728.952756][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 728.965596][ T24] em28xx 4-1:0.132: analog set to bulk mode. [ 728.980047][ T24] usb 4-1: USB disconnect, device number 29 [ 728.989053][ T24] em28xx 4-1:0.132: Disconnecting em28xx [ 729.699629][T10642] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 729.842272][T11629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1558'. [ 730.053116][T10642] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 730.126981][T10642] em28xx 2-1:0.132: No AC97 audio processor [ 730.161408][T10642] usb 2-1: Decoder not found [ 730.170680][T10642] em28xx 2-1:0.132: failed to create media graph [ 730.189137][T10642] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 730.211026][T10642] em28xx 2-1:0.132: Remote control support is not available for this card. [ 730.236741][T11628] sd 0:0:1:0: PR command failed: 1026 [ 730.242249][T11628] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 730.302712][T11628] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 731.084260][ T1219] em28xx 2-1:0.132: Closing input extension [ 731.116877][T10748] em28xx 5-1:0.132: Closing input extension [ 731.127140][ T1219] em28xx 2-1:0.132: Freeing device [ 731.150224][ T5721] em28xx 4-1:0.132: Registering V4L2 extension [ 731.180004][T10748] em28xx 5-1:0.132: Freeing device [ 731.311778][T11643] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1562'. [ 731.365544][T11643] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1562'. [ 731.414327][T11643] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1562'. [ 731.454705][T11648] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1562'. [ 731.474301][T11648] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1562'. [ 731.519906][T11648] netlink: 'syz.4.1562': attribute type 5 has an invalid length. [ 731.536378][ T5721] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 731.560974][ T5721] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 731.573140][T11648] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1562'. [ 731.592713][ T5721] em28xx 4-1:0.132: No AC97 audio processor [ 731.608154][ T5721] usb 4-1: Decoder not found [ 731.618035][ T5721] em28xx 4-1:0.132: failed to create media graph [ 731.636070][ T5721] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 731.799186][ T5721] em28xx 4-1:0.132: Remote control support is not available for this card. [ 731.808206][ T24] em28xx 4-1:0.132: Closing input extension [ 731.814437][ T24] ================================================================== [ 731.822515][ T24] BUG: KASAN: slab-use-after-free in media_device_unregister+0x59d/0x610 [ 731.830967][ T24] Read of size 8 at addr ffff888090008210 by task kworker/1:0/24 [ 731.838692][ T24] [ 731.841040][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 731.841075][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 731.841095][ T24] Workqueue: usb_hub_wq hub_event [ 731.841138][ T24] Call Trace: [ 731.841145][ T24] [ 731.841154][ T24] dump_stack_lvl+0x100/0x190 [ 731.841184][ T24] print_report+0x13d/0x4b0 [ 731.841216][ T24] ? __virt_addr_valid+0x239/0x430 [ 731.841243][ T24] ? media_device_unregister+0x59d/0x610 [ 731.841269][ T24] kasan_report+0xdf/0x1d0 [ 731.841295][ T24] ? media_device_unregister+0x59d/0x610 [ 731.841324][ T24] media_device_unregister+0x59d/0x610 [ 731.841351][ T24] em28xx_unregister_media_device+0x4e/0xe0 [ 731.841388][ T24] em28xx_release_resources+0x79/0x1b0 [ 731.841424][ T24] em28xx_usb_disconnect.cold+0x17d/0x253 [ 731.841461][ T24] usb_unbind_interface+0x1dd/0x9e0 [ 731.841486][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 731.841522][ T24] device_remove+0x12a/0x180 [ 731.841557][ T24] device_release_driver_internal+0x44e/0x620 [ 731.841584][ T24] bus_remove_device+0x2bc/0x560 [ 731.841621][ T24] ? __pfx_bus_remove_device+0x10/0x10 [ 731.841663][ T24] ? __pfx_device_remove_attrs+0x10/0x10 [ 731.841705][ T24] device_del+0x376/0x9b0 [ 731.841729][ T24] ? __pfx_device_del+0x10/0x10 [ 731.841750][ T24] ? kobject_put+0xb9/0x640 [ 731.841775][ T24] usb_disable_device+0x367/0x810 [ 731.841813][ T24] usb_disconnect+0x2e2/0x9a0 [ 731.841849][ T24] hub_event+0x1d0c/0x4af0 [ 731.841891][ T24] ? __lock_acquire+0x4a5/0x2630 [ 731.841919][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 731.841952][ T24] ? __pfx_hub_event+0x10/0x10 [ 731.841983][ T24] ? assoc_array_insert+0xc10/0x32c0 [ 731.842017][ T24] ? rcu_is_watching+0x12/0xc0 [ 731.842054][ T24] process_one_work+0xa0e/0x1980 [ 731.842090][ T24] ? __pfx_process_one_work+0x10/0x10 [ 731.842125][ T24] ? __pfx_hub_event+0x10/0x10 [ 731.842157][ T24] worker_thread+0x5ef/0xe50 [ 731.842191][ T24] ? kthread+0x13a/0x450 [ 731.842217][ T24] ? __pfx_worker_thread+0x10/0x10 [ 731.842243][ T24] kthread+0x370/0x450 [ 731.842270][ T24] ? __pfx_kthread+0x10/0x10 [ 731.842298][ T24] ret_from_fork+0x72b/0xd50 [ 731.842328][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 731.842358][ T24] ? __switch_to+0x800/0x1100 [ 731.842394][ T24] ? __pfx_kthread+0x10/0x10 [ 731.842421][ T24] ret_from_fork_asm+0x1a/0x30 [ 731.842463][ T24] [ 731.842471][ T24] [ 732.080928][ T24] Allocated by task 5721: [ 732.085248][ T24] kasan_save_stack+0x30/0x50 [ 732.089919][ T24] kasan_save_track+0x14/0x30 [ 732.094596][ T24] __kasan_kmalloc+0xaa/0xb0 [ 732.099171][ T24] em28xx_v4l2_init.cold+0x94/0x3a40 [ 732.104444][ T24] em28xx_init_extension+0x13a/0x200 [ 732.109722][ T24] request_module_async+0x61/0x80 [ 732.114732][ T24] process_one_work+0xa0e/0x1980 [ 732.119663][ T24] worker_thread+0x5ef/0xe50 [ 732.124245][ T24] kthread+0x370/0x450 [ 732.128302][ T24] ret_from_fork+0x72b/0xd50 [ 732.132881][ T24] ret_from_fork_asm+0x1a/0x30 [ 732.137639][ T24] [ 732.139940][ T24] Freed by task 5721: [ 732.143902][ T24] kasan_save_stack+0x30/0x50 [ 732.148565][ T24] kasan_save_track+0x14/0x30 [ 732.153223][ T24] kasan_save_free_info+0x3b/0x70 [ 732.158238][ T24] __kasan_slab_free+0x5f/0x80 [ 732.162986][ T24] kfree+0x223/0x6c0 [ 732.166871][ T24] kref_put.isra.0+0x53/0x75 [ 732.171441][ T24] em28xx_v4l2_init.cold+0x280/0x3a40 [ 732.176800][ T24] em28xx_init_extension+0x13a/0x200 [ 732.182067][ T24] request_module_async+0x61/0x80 [ 732.187073][ T24] process_one_work+0xa0e/0x1980 [ 732.192020][ T24] worker_thread+0x5ef/0xe50 [ 732.196619][ T24] kthread+0x370/0x450 [ 732.200687][ T24] ret_from_fork+0x72b/0xd50 [ 732.205276][ T24] ret_from_fork_asm+0x1a/0x30 [ 732.210044][ T24] [ 732.212350][ T24] The buggy address belongs to the object at ffff888090008000 [ 732.212350][ T24] which belongs to the cache kmalloc-8k of size 8192 [ 732.226392][ T24] The buggy address is located 528 bytes inside of [ 732.226392][ T24] freed 8192-byte region [ffff888090008000, ffff88809000a000) [ 732.240262][ T24] [ 732.242570][ T24] The buggy address belongs to the physical page: [ 732.248959][ T24] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x90008 [ 732.257713][ T24] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 732.266193][ T24] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 732.273724][ T24] page_type: f5(slab) [ 732.277697][ T24] raw: 00fff00000000040 ffff88813fe32280 dead000000000122 0000000000000000 [ 732.286272][ T24] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 732.294844][ T24] head: 00fff00000000040 ffff88813fe32280 dead000000000122 0000000000000000 [ 732.303500][ T24] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 732.312158][ T24] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 732.320812][ T24] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 732.329483][ T24] page dumped because: kasan: bad access detected [ 732.335888][ T24] page_owner tracks the page as allocated [ 732.341580][ T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11635, tgid 11630 (syz.4.1560), ts 730322388615, free_ts 730299095593 [ 732.363101][ T24] post_alloc_hook+0x153/0x170 [ 732.367860][ T24] get_page_from_freelist+0x11a6/0x33b0 [ 732.373401][ T24] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 732.379288][ T24] new_slab+0xa6/0x6c0 [ 732.383348][ T24] refill_objects+0x277/0x420 [ 732.388020][ T24] __pcs_replace_empty_main+0x375/0x650 [ 732.393556][ T24] __kmalloc_noprof+0x688/0x850 [ 732.398399][ T24] n_hdlc_alloc_buf+0x5b/0xf0 [ 732.403072][ T24] n_hdlc_tty_open+0x26b/0x520 [ 732.407826][ T24] tty_ldisc_open+0xa2/0x120 [ 732.412401][ T24] tty_set_ldisc+0x325/0x740 [ 732.416979][ T24] tty_ioctl+0x695/0x1640 [ 732.421303][ T24] __x64_sys_ioctl+0x18e/0x210 [ 732.426051][ T24] do_syscall_64+0x10b/0xf80 [ 732.430641][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.436517][ T24] page last free pid 11630 tgid 11630 stack trace: [ 732.442996][ T24] __free_frozen_pages+0x747/0x1040 [ 732.448190][ T24] qlist_free_all+0x47/0xf0 [ 732.452683][ T24] kasan_quarantine_reduce+0x1a0/0x1f0 [ 732.458138][ T24] __kasan_slab_alloc+0x69/0x90 [ 732.462971][ T24] kmem_cache_alloc_noprof+0x241/0x6e0 [ 732.468426][ T24] vm_area_dup+0x27/0x8e0 [ 732.472745][ T24] __split_vma+0x18c/0xd90 [ 732.477176][ T24] vma_modify+0x1cf4/0x25c0 [ 732.481668][ T24] vma_modify_flags+0x257/0x3d0 [ 732.486510][ T24] mprotect_fixup+0x27a/0xe30 [ 732.491201][ T24] do_mprotect_pkey+0xa4b/0xef0 [ 732.496130][ T24] __x64_sys_mprotect+0x78/0xc0 [ 732.500980][ T24] do_syscall_64+0x10b/0xf80 [ 732.505576][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.511456][ T24] [ 732.513759][ T24] Memory state around the buggy address: [ 732.519368][ T24] ffff888090008100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 732.527413][ T24] ffff888090008180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 732.535456][ T24] >ffff888090008200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 732.543494][ T24] ^ [ 732.548062][ T24] ffff888090008280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 732.556102][ T24] ffff888090008300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 732.564149][ T24] ================================================================== [ 732.593012][ T30] audit: type=1400 audit(1778947127.066:318): avc: denied { read } for pid=4959 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 732.621428][ T30] audit: type=1400 audit(1778947127.106:319): avc: denied { search } for pid=4959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.624547][ T24] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 732.624567][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 732.624594][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 732.624609][ T24] Workqueue: usb_hub_wq hub_event [ 732.624644][ T24] Call Trace: [ 732.624652][ T24] [ 732.624660][ T24] dump_stack_lvl+0x100/0x190 [ 732.624688][ T24] vpanic+0x552/0x970 [ 732.624709][ T24] ? __pfx_vpanic+0x10/0x10 [ 732.624729][ T24] ? mark_held_locks+0x40/0x70 [ 732.624759][ T24] ? media_device_unregister+0x59d/0x610 [ 732.624783][ T24] panic+0xd1/0xe0 [ 732.624801][ T24] ? __pfx_panic+0x10/0x10 [ 732.624823][ T24] ? media_device_unregister+0x59d/0x610 [ 732.624846][ T24] ? preempt_schedule_common+0x42/0xc0 [ 732.624880][ T24] check_panic_on_warn.cold+0x19/0x34 [ 732.624903][ T24] end_report.part.0+0x3a/0x90 [ 732.624933][ T24] kasan_report.cold+0xe/0x18 [ 732.624964][ T24] ? media_device_unregister+0x59d/0x610 [ 732.624990][ T24] media_device_unregister+0x59d/0x610 [ 732.625023][ T24] em28xx_unregister_media_device+0x4e/0xe0 [ 732.625058][ T24] em28xx_release_resources+0x79/0x1b0 [ 732.625093][ T24] em28xx_usb_disconnect.cold+0x17d/0x253 [ 732.625128][ T24] usb_unbind_interface+0x1dd/0x9e0 [ 732.625152][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 732.625187][ T24] device_remove+0x12a/0x180 [ 732.625220][ T24] device_release_driver_internal+0x44e/0x620 [ 732.625247][ T24] bus_remove_device+0x2bc/0x560 [ 732.625279][ T24] ? __pfx_bus_remove_device+0x10/0x10 [ 732.625312][ T24] ? __pfx_device_remove_attrs+0x10/0x10 [ 732.625348][ T24] device_del+0x376/0x9b0 [ 732.625368][ T24] ? __pfx_device_del+0x10/0x10 [ 732.625387][ T24] ? kobject_put+0xb9/0x640 [ 732.625409][ T24] usb_disable_device+0x367/0x810 [ 732.625444][ T24] usb_disconnect+0x2e2/0x9a0 [ 732.625476][ T24] hub_event+0x1d0c/0x4af0 [ 732.625517][ T24] ? __lock_acquire+0x4a5/0x2630 [ 732.625544][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 732.625575][ T24] ? __pfx_hub_event+0x10/0x10 [ 732.625605][ T24] ? assoc_array_insert+0xc10/0x32c0 [ 732.625638][ T24] ? rcu_is_watching+0x12/0xc0 [ 732.625673][ T24] process_one_work+0xa0e/0x1980 [ 732.625708][ T24] ? __pfx_process_one_work+0x10/0x10 [ 732.625740][ T24] ? __pfx_hub_event+0x10/0x10 [ 732.625772][ T24] worker_thread+0x5ef/0xe50 [ 732.625803][ T24] ? kthread+0x13a/0x450 [ 732.625828][ T24] ? __pfx_worker_thread+0x10/0x10 [ 732.625855][ T24] kthread+0x370/0x450 [ 732.625879][ T24] ? __pfx_kthread+0x10/0x10 [ 732.625905][ T24] ret_from_fork+0x72b/0xd50 [ 732.625933][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 732.625961][ T24] ? __switch_to+0x800/0x1100 [ 732.625993][ T24] ? __pfx_kthread+0x10/0x10 [ 732.626024][ T24] ret_from_fork_asm+0x1a/0x30 [ 732.626061][ T24] [ 732.643278][ T24] Kernel Offset: disabled