last executing test programs: 15m20.143673539s ago: executing program 4 (id=864): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)={0xd46, 0x3, 0x6, 0x7}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x1, @loopback, 0x4}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000005c0)="9b", 0x1}], 0x1}}], 0x1, 0x8044) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000044c0)={0x14, 0x4e, 0x1, 0x70bd2d, 0xfffffffe, {0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 15m11.034143484s ago: executing program 4 (id=878): timerfd_create(0x4, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x3, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb19ffef06b6d1fff919327c75193a37bfd8eccb5961ba7d48b24796f3025fac2b1f91877"], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a40)={0x670, 0x27, 0x4, 0x70bd2a, 0x25dfdbff, {0x1d}, [@nested={0x341, 0x4a, 0x0, 0x1, [@generic="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", @nested={0x4, 0xc8}, @generic="d1aa591f410fa65f7ff42520afe29637f8e1d0d73ea6d54bd51d460e3798f16b36ebc817865f40ab4eb3b80748d0d736a70db3ca2f848fb616b625ff5825493477bc5bbd811b963cd714dc5a79c3a069908379b8225edff5a5dd03bb11", @generic="e4619a7175280a5f28faf5efebb4a9a5476e029d7a709e86f33050bedb1ab5d005ce2b4cec0672fa9c43a333c9984079cbb400546a0f0d7acdac644af0d0f27018995293bde8419dd6d81225b91226e2a42bf6d017cdd8b03b41a36bd21c6b6b3faf9e838de2f2c3eb6e0aa0b8649a01f63d0f1c64d6b9ac0c251ee33cea4b2683705aadfb716ae6646671c41214cc506bb2dce5cb764b9227611bb9f2c30ca9a3a9025391a1b2709104c476b7480468f760e9b84a9c908dc7605feaf48fcbfad46c6c765eea819afb149ba9ecca8eb777c735e0ef814b9c5e7e8e506e511870bf57c7541d5f5d93ecf4203cfaf6eea944bfca5a217e687591", @nested={0x4, 0x90}, @nested={0x4, 0x89}, @typed={0xc, 0x80, 0x0, 0x0, @u64=0x1}, @generic="bc7a9215a02e4b0290f3be29fcb0cea774af795aad60fc990acc0aaed1251e77169139e347f215868cd991136d3da25bee2a37e6bb970d53ad5132fc1e40c9c06097abb54101f447d40bbf503c17f09196d45b8296fd6fc9f29a20e6186effea718460c681a02a28315ed7ea53e45c0fc2cda07552c23a60eef63b01b4007740920c67be3e880ee6b71e85e41666700f54889aa9c9a6b312a240aaee8d20bb96cc2bb890b048253aa4de9168b639f40d00f64b9ee290b460800577e683896e45195c22c7b4f71f440da599346a116a44e55e16"]}, @nested={0x5e, 0x41, 0x0, 0x1, [@nested={0x4, 0x19}, @nested={0x4, 0x93}, @generic="63a9c920b56404c9c71cb0e72e627391483b9f86714cc46a7a85ba32ea3eb0878d3608d9bf39735d8e2789487d570c3717e70204e00886bef3aedeb2cb664d5232dcab83c2fd5298a1ffbbbb395f", @nested={0x4, 0x47}]}, @generic="84914f7838ddaf93850f85cb6201c363356677e65ab10fa7a3c82cd0702ac26955e491ab8483e36deae251b6484337bea20cf656f01af749a084d4a44b203d5629a8f956a448caa21a4f3f3a4f8b1ba588f9e252027b9bcb8b8c2c79c46d5ae1b010e5591f1af1f93771ced5c4218f70cd468bf6608669789a7d60f5092944dfdcb052b4428c9dc8b21de507d3af5fe26c030e3ae7c8a1edd3e64e40bf68fce85cc818153e140ac13851", @generic="7f59aa8f77b4f1fc2b0a51036d02bcce0d3d4a3078a77ceb1fff2163d1d4141938fa05e4efa131ce99ff40511dd4acb5e4ade0428f6f8946601095cb289eb9cdbaa7c04578dcc5f789aa56f12f3511739a4d732c8a275d9a0b05233350b3cd8a4f55fc94f616b03fb97ed9bcb76e5cb5b5e62073f734185cad744a0792bf67d1252a39a9e7f1f869c20bf154a101d79b5fa9a7cdf7959000b9c1ab5c42c47e92d840f8edf5d4b2e75591efdcbf2ed1a206c410b389ef2ef1e40c50", @nested={0x41, 0x125, 0x0, 0x1, [@generic="d312103e441668092e32fab5b3a5a22a346ea448d5d12049a8085149a48d3b1efa", @typed={0x14, 0xb7, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x147}, @nested={0x4, 0x6}]}, @generic="1b7e8022946a0a643075ef94d7f5c1459c5e8208902f069235ae7e4d5e3f2acaacf7640643595e317be669d49f621da1506ef0a8f90aa8", @generic="f6cf945e3d11dd28d3e2f51b4c6ec2f341b729e0d5c2d5e332f51713def9de1a8606669fc1cb31d03c22718ddb7f87f59608c14434d1b9936ba2fe8ad7849419c1291f4dd4874e6a9656261dabfd5644bc286aea6b04932d9178e208eb99a39d09aa174c1d447b27528b33e241eba24983d3b01c43e121a5328d77d23dd81d5ed752ab21fd113c635473b4b8f2e38adca5d5be729e91e338e9039d78460a2995db8578702dd7db176d2137584d5a865ba1336b7cac3f57dc842d90f2a535821afbfa9abede", @typed={0x8, 0x104, 0x0, 0x0, @uid}, @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x8}}]}, 0x670}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r3}, 0x38) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x4, 0x7ff, 0x2, 0x1000, 0x1, 0x0, '\x00', 0x0, r4, 0x10000002, 0x1001}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x5, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x12) socket$nl_generic(0x10, 0x3, 0x10) 15m1.732593204s ago: executing program 4 (id=899): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() socket$kcm(0x2, 0x1, 0x84) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000080), 0x10) listen(r2, 0x0) accept4$llc(r2, 0x0, 0x0, 0x0) 14m58.538312832s ago: executing program 4 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x30}}, 0x0) 14m56.091100829s ago: executing program 4 (id=905): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fe"], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 14m54.85051198s ago: executing program 4 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) setrlimit(0x8, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2$9p(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4e, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000800)={'#! ', './file0'}, 0xb) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x88, &(0x7f0000000080)={[{@nogrpid}, {@noauto_da_alloc}, {@nogrpid}, {@nobarrier}, {@errors_remount}, {@quota}]}, 0x3, 0x459, &(0x7f0000000580)="$eJzs3M1rHOUfAPDv7GbT9ya/H/WlL2q0isWXpElr7cGLouBBQdBDPcYkLbXbRpoIthSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurYIyMrszze5m89pNNu1+PjDt88w86fP97syz+8w83QTQs4ayP5KI3RHxa0QM1KvNDYbqf92avzLx1/yViSTS9M0/k1q7m/NXJoqmxc/tKip9EaVPkzjYpt+ZS5fPjVerUxfz+sjs+fdGZi5dfvbs+fEzU2emLoydPHn82OjzJ8ae60ieWV43D3w4fWj/q29fe33i1LV3fvomKfJvyaNDhpY7+ESadri77trTUE76uhgIa1KuD9Oo1Mb/QJRj4eQNxCufdDU4YEOlaZrev/ThubRmW6TAPSgxtqFHFR/02f1vsW3S1GNLuPFi/QYoy/tWvtWP9EUpb1Npub/tpKGIODX395fZFhvzHAIAoMl32fznmXbzv1I0Phfam6+hDEbE/yLi/xFxIiL2RcR9EbW2D0TEg2vsv3WRZPH8Z++68lqtbP73Qr62Vd+KVaxi9heD5by2p5Z/JTl9tjp1NI/sSFS2ZfXRZfr4/uVfPm97IO+imP9lWxZDMRfMG/3Rt635xybHZ8fvIOUmNz6OONDXmH/x+ie3VwKyV2R/RBxY9b/6T9q4vHX2qa8PLdVyaMX8l9GBdab0q4gn6+d/LlryLyTLr0+ObI/q1NGR4qpY7OfrV99Yqv87yr8DsvO/M9qf/9xg0rheO7P2Pq7+9tmS9zQr59/++u9P3mra98H47OzF0Yj+5LV60I37x1rajS20z/I/crhd/qXae1zxShyMiOwifigiHo6IR/LYH42IxyLi8OLUrvfnhR9fevzdWqGynvw3Vpb/5JrO/0KhP1r3tC+Uz/3wbVOng2vJPzv/x2ulI/me1bz/rSau9V3NAAAAcPcpRcTuSErDt8ul0vBw/f/w74udper0zOzTp6ffvzBZ/47AYFRKxZOugYbnoaP5bX1RH2upH8ufG39R3lGrD09MVye7nTz0uF1LjP/M7+VuRwdsuHWto23vfBzA5vN9Tehdxj/0LuMfeleb8b+jKKQDmxwMsKnaff5/1IU4gM3XMv4t+0EPcf8Pvcv4h95l/ENPmtkRK39J/p4r/Jv/9sOtEs/dWIjSlghDYYMK3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA//+a3+19") 14m38.583772482s ago: executing program 32 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) setrlimit(0x8, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2$9p(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4e, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000800)={'#! ', './file0'}, 0xb) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x88, &(0x7f0000000080)={[{@nogrpid}, {@noauto_da_alloc}, {@nogrpid}, {@nobarrier}, {@errors_remount}, {@quota}]}, 0x3, 0x459, &(0x7f0000000580)="$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") 13m23.442074746s ago: executing program 3 (id=1026): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000, 0x0, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x7cd5d000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001a0000000000000000000000002f4bf127432e"], 0x0, 0x1a, 0x0, 0xd}, 0x28) mkdirat(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='sched_switch\x00', r4}, 0x18) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fffffff}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x140}}, 0x0) tkill(r1, 0x3b) getpgrp(0xffffffffffffffff) 13m22.075018886s ago: executing program 3 (id=1027): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180), &(0x7f0000000080)="0a4ef2385d7ca6754e474d586a22a874ced9105db51e1e177893dcea1dd66aa9bf8e40b4f9bb7787d86c54a41cc926335b1f", 0x32, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 13m19.391344052s ago: executing program 3 (id=1030): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000074c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000600)=[{0x80, 0x117, 0xc, "3f5e6f3c9d1f8d06d8f766041e136f07c46f6f8bf0b0ef1c36bd429062a2829645abc5bda597269123c2f53019bdbda5beb3020b265982c5567246fc92044a26bb42571ba0457357eea7b69b335cdb849e8fead78ffcafd96eda33b7c548c2212b1dbffa1c825d677712c8667a90"}, {0x68, 0x0, 0x3, "ba9992248ef488b974dc307be4f83e92a17eb435279af8d5de5634ee1cee22a29f155527ebcf978ffe2340c2120bc2b346e29e779a7e8bdd1320606b9373afd3a6b966da4bc02f5152e89c3d06e87d38c4"}, {0x38, 0x10d, 0x5, "77ef7767a3d874ad3b0fbe133ce6b94f0d44b739ad5708d870a2af13321d332ee0e5a297566b"}, {0x18, 0x119, 0x4, "0d24ab"}], 0x138}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[{0x20, 0x10b, 0x40000000, "73800dffba0a629a3f23ab0b2c73e25d"}, {0x10, 0x88, 0x1}, {0x48, 0x10c, 0xf, "81155870312619ceeaa4487650bef548a805576c7c271d7af897e14344adba7db19254639a68b6f0d76dd2ee5a95ae5082ee8d"}, {0xff0, 0x119, 0x0, "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"}, {0x40, 0x104, 0x9d9e, "7d6e08a52f4ec24fabc631a10fb07aa8696575317af579a6d8221f525f68548e781697d15cd33a26eae04c40"}, {0xc0, 0x10e, 0x1, "737ca9a65a972e68397bec44d739fef045529546298edbccd4db585a9fe86ec9624d77b9d1b263631a3c9a687cb2f7a2ce412d0254394c3cad8aa3f268476ccd2e04e7be517485576cf80c57a39c7bc18d07b143de87df39db7861e3bac904e322e85bdf574479e9d2b3e112dee26267c400e133e1a867f1b47e9b6619fcdc10ab496c6b8f942134c4fe8a6a1a321113b1e0c2f344976f2b550a1846f2317554eeb894666ce176c71a0d"}, {0x28, 0x1, 0x2bd, "c9b104b7fb16422f0b14f282a685d6d2dba80123a39601"}], 0x1190}}, {{&(0x7f0000000880)=@x25, 0x80, &(0x7f0000000800)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006300)}}], 0x4, 0x8044) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x900, 0x1a4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040200) 13m13.138597347s ago: executing program 3 (id=1038): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mkdir(&(0x7f0000001040)='./file0\x00', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 13m10.693467184s ago: executing program 3 (id=1042): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254", 0x6}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8f", 0x4}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e6", 0x2}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000000200)="ba", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000580)="b8a2", 0x2}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000000880)="8714", 0x2}, {&(0x7f0000000900)="11", 0x1}], 0x3}}], 0x4, 0x4000000) 13m9.13936807s ago: executing program 3 (id=1046): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x19, "90f50180e64f61909103f1fbbc2b81c9f144d76e44c700100000e52829e7cb8393"}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_io_uring_setup(0x588, &(0x7f0000000140)={0x0, 0xaede, 0x0, 0x2, 0x330}, &(0x7f0000000100), &(0x7f0000000280)) 12m51.315977888s ago: executing program 33 (id=1046): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x19, "90f50180e64f61909103f1fbbc2b81c9f144d76e44c700100000e52829e7cb8393"}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_io_uring_setup(0x588, &(0x7f0000000140)={0x0, 0xaede, 0x0, 0x2, 0x330}, &(0x7f0000000100), &(0x7f0000000280)) 12m46.662133284s ago: executing program 2 (id=1061): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 12m38.391934261s ago: executing program 2 (id=1069): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x1], [0x20000000, 0x500, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6], [0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]], '\x00', [{0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {}, {0x0, 0x9}], '\x00', 0x6b4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bcb, 0x80, 0xffffffff, 0x40001c8}, &(0x7f0000001300), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 12m37.335938476s ago: executing program 2 (id=1071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() memfd_create(0x0, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() ioprio_get$pid(0x2, r4) r5 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r5, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r5, r5, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 12m34.124313415s ago: executing program 2 (id=1072): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r4, 0x0, r5, 0x0, 0x10000000000016, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) 12m27.672546346s ago: executing program 2 (id=1078): timerfd_create(0x4, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x3, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb19ffef06b6d1fff919327c75193a37bfd8eccb5961ba7d48b24796f3025fac2b1f91877"], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a40)={0x670, 0x27, 0x4, 0x70bd2a, 0x25dfdbff, {0x1d}, [@nested={0x341, 0x4a, 0x0, 0x1, [@generic="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", @nested={0x4, 0xc8}, @generic="d1aa591f410fa65f7ff42520afe29637f8e1d0d73ea6d54bd51d460e3798f16b36ebc817865f40ab4eb3b80748d0d736a70db3ca2f848fb616b625ff5825493477bc5bbd811b963cd714dc5a79c3a069908379b8225edff5a5dd03bb11", @generic="e4619a7175280a5f28faf5efebb4a9a5476e029d7a709e86f33050bedb1ab5d005ce2b4cec0672fa9c43a333c9984079cbb400546a0f0d7acdac644af0d0f27018995293bde8419dd6d81225b91226e2a42bf6d017cdd8b03b41a36bd21c6b6b3faf9e838de2f2c3eb6e0aa0b8649a01f63d0f1c64d6b9ac0c251ee33cea4b2683705aadfb716ae6646671c41214cc506bb2dce5cb764b9227611bb9f2c30ca9a3a9025391a1b2709104c476b7480468f760e9b84a9c908dc7605feaf48fcbfad46c6c765eea819afb149ba9ecca8eb777c735e0ef814b9c5e7e8e506e511870bf57c7541d5f5d93ecf4203cfaf6eea944bfca5a217e687591", @nested={0x4, 0x90}, @nested={0x4, 0x89}, @typed={0xc, 0x80, 0x0, 0x0, @u64=0x1}, @generic="bc7a9215a02e4b0290f3be29fcb0cea774af795aad60fc990acc0aaed1251e77169139e347f215868cd991136d3da25bee2a37e6bb970d53ad5132fc1e40c9c06097abb54101f447d40bbf503c17f09196d45b8296fd6fc9f29a20e6186effea718460c681a02a28315ed7ea53e45c0fc2cda07552c23a60eef63b01b4007740920c67be3e880ee6b71e85e41666700f54889aa9c9a6b312a240aaee8d20bb96cc2bb890b048253aa4de9168b639f40d00f64b9ee290b460800577e683896e45195c22c7b4f71f440da599346a116a44e55e16"]}, @nested={0x5e, 0x41, 0x0, 0x1, [@nested={0x4, 0x19}, @nested={0x4, 0x93}, @generic="63a9c920b56404c9c71cb0e72e627391483b9f86714cc46a7a85ba32ea3eb0878d3608d9bf39735d8e2789487d570c3717e70204e00886bef3aedeb2cb664d5232dcab83c2fd5298a1ffbbbb395f", @nested={0x4, 0x47}]}, @generic="84914f7838ddaf93850f85cb6201c363356677e65ab10fa7a3c82cd0702ac26955e491ab8483e36deae251b6484337bea20cf656f01af749a084d4a44b203d5629a8f956a448caa21a4f3f3a4f8b1ba588f9e252027b9bcb8b8c2c79c46d5ae1b010e5591f1af1f93771ced5c4218f70cd468bf6608669789a7d60f5092944dfdcb052b4428c9dc8b21de507d3af5fe26c030e3ae7c8a1edd3e64e40bf68fce85cc818153e140ac13851", @generic="7f59aa8f77b4f1fc2b0a51036d02bcce0d3d4a3078a77ceb1fff2163d1d4141938fa05e4efa131ce99ff40511dd4acb5e4ade0428f6f8946601095cb289eb9cdbaa7c04578dcc5f789aa56f12f3511739a4d732c8a275d9a0b05233350b3cd8a4f55fc94f616b03fb97ed9bcb76e5cb5b5e62073f734185cad744a0792bf67d1252a39a9e7f1f869c20bf154a101d79b5fa9a7cdf7959000b9c1ab5c42c47e92d840f8edf5d4b2e75591efdcbf2ed1a206c410b389ef2ef1e40c50", @nested={0x41, 0x125, 0x0, 0x1, [@generic="d312103e441668092e32fab5b3a5a22a346ea448d5d12049a8085149a48d3b1efa", @typed={0x14, 0xb7, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x147}, @nested={0x4, 0x6}]}, @generic="1b7e8022946a0a643075ef94d7f5c1459c5e8208902f069235ae7e4d5e3f2acaacf7640643595e317be669d49f621da1506ef0a8f90aa8", @generic="f6cf945e3d11dd28d3e2f51b4c6ec2f341b729e0d5c2d5e332f51713def9de1a8606669fc1cb31d03c22718ddb7f87f59608c14434d1b9936ba2fe8ad7849419c1291f4dd4874e6a9656261dabfd5644bc286aea6b04932d9178e208eb99a39d09aa174c1d447b27528b33e241eba24983d3b01c43e121a5328d77d23dd81d5ed752ab21fd113c635473b4b8f2e38adca5d5be729e91e338e9039d78460a2995db8578702dd7db176d2137584d5a865ba1336b7cac3f57dc842d90f2a535821afbfa9abede", @typed={0x8, 0x104, 0x0, 0x0, @uid}, @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x8}}]}, 0x670}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r3}, 0x38) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x4, 0x7ff, 0x2, 0x1000, 0x1, 0x0, '\x00', 0x0, r4, 0x10000002, 0x1001}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x5, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x3, 0x12) socket$nl_generic(0x10, 0x3, 0x10) 12m23.856348024s ago: executing program 2 (id=1083): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) r1 = gettid() socket$kcm(0x2, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000080), 0x10) listen(r2, 0x0) accept4$llc(r2, 0x0, 0x0, 0x0) 12m7.089816487s ago: executing program 34 (id=1083): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) r1 = gettid() socket$kcm(0x2, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000080), 0x10) listen(r2, 0x0) accept4$llc(r2, 0x0, 0x0, 0x0) 8m22.7959747s ago: executing program 6 (id=1410): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) sched_setaffinity(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x1, 0x9, 0x8) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x4c}}, 0x0) 8m20.777225622s ago: executing program 6 (id=1413): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32, @ANYBLOB="003000000000000014001a80100004800c00"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 8m19.523078412s ago: executing program 6 (id=1417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) memfd_create(0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = gettid() ioprio_get$pid(0x2, r3) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r4, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 8m8.169462541s ago: executing program 6 (id=1429): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64e", 0x13}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) preadv2(r3, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 8m0.336259639s ago: executing program 6 (id=1438): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x33, 0x0, &(0x7f00000003c0)) setsockopt$sock_int(r1, 0x1, 0x2d, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x5, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) 7m56.875107686s ago: executing program 6 (id=1442): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) lchown(0x0, 0x0, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') lseek(r7, 0x2000, 0x0) pread64(r6, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000fff000/0x1000)=nil) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x0, r5, 0xf4ca, 0x7fffffff, 0xfffffffffffffffc, 0x7ff}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x13, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030200000000008500000008000000bf09000000000000b60904000000000065000600090000003d93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m38.746487608s ago: executing program 35 (id=1442): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) lchown(0x0, 0x0, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') lseek(r7, 0x2000, 0x0) pread64(r6, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000fff000/0x1000)=nil) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x0, r5, 0xf4ca, 0x7fffffff, 0xfffffffffffffffc, 0x7ff}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x13, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030200000000008500000008000000bf09000000000000b60904000000000065000600090000003d93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.323547591s ago: executing program 7 (id=2193): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}]}}]}, 0xa0}}, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r6, 0x8800000) socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r7, r6, 0x0, 0x578410eb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 22.10145975s ago: executing program 0 (id=2200): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) recvmmsg(r2, 0x0, 0x0, 0x40012362, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = getpid() sendmsg$netlink(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="100000001e0000000000"], 0x10}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x48001}, 0x24040002) r5 = gettid() write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000000180)={0x14}, 0x14) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x8, 0xc74, 0x2, 0xc9}, 0x10) recvmmsg(r2, &(0x7f0000000200), 0x0, 0x1, &(0x7f0000000500)={0x77359400}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket(0x2, 0x1, 0x100002) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 17.533749965s ago: executing program 1 (id=2203): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17.205020961s ago: executing program 5 (id=2205): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000600)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x38, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffff", 0x36}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 14.591270101s ago: executing program 7 (id=2207): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x110, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81004c000800450000fe000000000006907864010101ac1414aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780003451f69721cfd24937c99d354661e7603aa4851bf6c7994b5edadd94ab4b069ef8bc100a509a8d24e310d786cbece59278218a0677db62d14d9f9cac29fa94fa22cc680e8f254b5542c92105cadc53b760800000000000000f42f1b587cc59b68a7ffba2f38aa4a7dc84de514f3fff817033d53b5f15b3a7040267cb78bc30386526600104a8f3342c0ffceaa0fb7dd359b66f99e7d6b11e1f232cacd34c2cf211f8b2efcfc47a43f10dd9e2a2b4f5e407d29d28c0e3491eb97db9c"], 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) r5 = syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5}) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0xfffffffffffffe88) 14.460807632s ago: executing program 8 (id=2208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42000, 0x81) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000001c0)='wg0\x00', 0x4) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x2802) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) r6 = socket$tipc(0x1e, 0x5, 0x0) dup3(r2, r6, 0x80000) syz_open_pts(0xffffffffffffffff, 0x8182) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000100)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14.394035097s ago: executing program 0 (id=2209): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00'/23], 0x50) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000001480)="aeffa4486aa84c5cd1276d91eecdfccfb963910470b7fbea31521973580a6311fb47d40700e353de4e219eb4802eb77ce0d6016e584d552b5ccea8207888668e4b1c5d8e464389b41a7db270bcf39bd9e94fa051110e00cbf0a42159e717046d42be7bb0af9d94fc977ffa26577997b6c08a1b17ab4dd123fe7aa034d4d36f56ba3f438a0e6c356c0fad29e66a202cd90c08eb053f04f5b1aa50f6a115de7b6b61edd701777a7a6612f0310d2c1b0b9fabc21b67cecd727c6e05f18a639e9277b2813694267b7d134f89bedd55c711587c8ce6489474edd2f7b23243c0e2166aa7249592ea988afaef4fbbeddd1129b1091d885fcd6127ac89d5a0ebe59d47294152e34c23", 0x105, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x8007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000001dc0)={@broadcast, @dev, @void, {@ipv4={0x86dd, @generic={{0x5, 0x4, 0x3, 0x4, 0x14, 0x68, 0x0, 0x7, 0x1d, 0x0, @multicast2, @multicast2}}}}}, 0x0) 13.425212915s ago: executing program 1 (id=2210): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r4, 0x0, r5, 0x0, 0x10000000000016, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) 13.35445381s ago: executing program 8 (id=2211): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 13.10102843s ago: executing program 0 (id=2212): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000074c0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000500)="22029d3f34478dd7c6b4bd558580024dd4f3ed025977593fc8e4fc4340ed1a6612d271302e2b6f5f27b6da7bc441df1c08989d0e13e86549d437c61da3460c0ada77dbc3c34e7b469e25f86a8add71df58a707341eb74dc1f5224bee25a1be1747a7d899881e49f8975a6939695133329eb1ee253f4f1cd61236769fcd34f95086bae5b16ac2ac9540373774e91addd881875513b8c10535fa77b433bd88638abf49dbaa8d3f5f1dd85242968e6ecf19934150d008d609b3c0dab89c04c18eb4c43121", 0xc3}], 0x1, &(0x7f0000000600)=[{0x80, 0x117, 0xc, "3f5e6f3c9d1f8d06d8f766041e136f07c46f6f8bf0b0ef1c36bd429062a2829645abc5bda597269123c2f53019bdbda5beb3020b265982c5567246fc92044a26bb42571ba0457357eea7b69b335cdb849e8fead78ffcafd96eda33b7c548c2212b1dbffa1c825d677712c8667a90"}, {0x40, 0x0, 0x3, "ba9992248ef488b974dc307be4f83e92a17eb435279af8d5de5634ee1cee22a29f155527ebcf978ffe"}, {0x38, 0x10d, 0x5, "77ef7767a3d874ad3b0fbe133ce6b94f0d44b739ad5708d870a2af13321d332ee0e5a297566b"}, {0x18, 0x119, 0x4, "0d24ab"}], 0x110}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[{0x20, 0x10b, 0x40000000, "73800dffba0a629a3f23ab0b2c73e25d"}, {0x10, 0x88, 0x1}, {0x48, 0x10c, 0xf, "81155870312619ceeaa4487650bef548a805576c7c271d7af897e14344adba7db19254639a68b6f0d76dd2ee5a95ae5082ee8d"}, {0xff0, 0x119, 0x0, "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"}, {0x40, 0x104, 0x9d9e, "7d6e08a52f4ec24fabc631a10fb07aa8696575317af579a6d8221f525f68548e781697d15cd33a26eae04c40"}, {0xc8, 0x10e, 0x1, "737ca9a65a972e68397bec44d739fef045529546298edbccd4db585a9fe86ec9624d77b9d1b263631a3c9a687cb2f7a2ce412d0254394c3cad8aa3f268476ccd2e04e7be517485576cf80c57a39c7bc18d07b143de87df39db7861e3bac904e322e85bdf574479e9d2b3e112dee26267c400e133e1a867f1b47e9b6619fcdc10ab496c6b8f942134c4fe8a6a1a321113b1e0c2f344976f2b550a1846f2317554eeb894666ce176c71a0d8b0557133c18fb79d5c3f1"}, {0x28, 0x1, 0x2bd, "c9b104b7fb16422f0b14f282a685d6d2dba80123a39601"}], 0x1198}}, {{&(0x7f0000000880)=@x25, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000002780)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006300)}}], 0x4, 0x8044) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x900, 0x1a4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0xffffff40}, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0xfffffffffffffffd, 0xd5b, 0x3, 0x4, 0x83e, 0x12, 0x101}}], 0x58}, 0x0) 11.778568186s ago: executing program 0 (id=2213): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r4 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESDEC=0x0]) socket$nl_netfilter(0x10, 0x3, 0xc) 11.574572043s ago: executing program 5 (id=2214): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0}) 10.302915525s ago: executing program 8 (id=2215): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000140), 0x800, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x6c}}, 0x0) 7.36667565s ago: executing program 8 (id=2216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r4, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 6.98736953s ago: executing program 5 (id=2217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r3) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) read$FUSE(r3, &(0x7f000000c400)={0x2020}, 0x2020) recvmmsg$unix(r3, &(0x7f0000006a80)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/65, 0x41}, {&(0x7f0000000480)=""/33, 0x21}, {&(0x7f0000000580)=""/118, 0x76}, {&(0x7f0000000640)=""/245, 0xf5}, {&(0x7f0000000780)=""/166, 0xa6}, {&(0x7f00000004c0)=""/54, 0x36}], 0x6, &(0x7f0000001e80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x128}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/23, 0x17}, {&(0x7f0000001980)=""/223, 0xdf}, {&(0x7f0000001a80)=""/16, 0x10}, {&(0x7f0000001ac0)=""/252, 0xfc}, {&(0x7f0000001bc0)=""/4, 0x4}, {&(0x7f0000001c00)=""/201, 0xc9}], 0x7, &(0x7f0000001d40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000000600), 0x0, &(0x7f0000004000)}}, {{&(0x7f0000004080)=@abs, 0x6e, &(0x7f0000004400)=[{&(0x7f0000004100)=""/135, 0x87}, {&(0x7f00000041c0)=""/12, 0xc}, {&(0x7f0000000840)=""/252, 0xfc}, {&(0x7f0000006b40)=""/196, 0xc4}], 0x4, &(0x7f0000003fc0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000057c0)=""/4074, 0xfea}, {&(0x7f00000067c0)=""/240, 0xf0}, {&(0x7f00000068c0)=""/13, 0xd}, {&(0x7f0000006900)=""/145, 0x91}], 0x4, &(0x7f0000006a00)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) splice(r2, 0x0, r6, 0x0, 0x406f413, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a0016000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x0) read(r8, &(0x7f0000000140)=""/87, 0x57) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 6.554760665s ago: executing program 8 (id=2218): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) socket$unix(0x1, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x420001, 0x187) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x406}, 0x28) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioprio_get$pid(0x2, 0xffffffffffffffff) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000040f8030003000040"]) r6 = socket(0x11, 0x2, 0x0) setsockopt(r6, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) write$vhost_msg_v2(r2, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 6.435733654s ago: executing program 1 (id=2219): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0xf}, {0xffe0}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4008014) 5.500062409s ago: executing program 0 (id=2220): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) mkdirat(r1, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) 5.290479036s ago: executing program 5 (id=2221): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd2", 0x4f}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9", 0x3e4}, {&(0x7f0000000740)="f1e12b7aeea6030429c81b20ebe453809ede6aab1492e0b69c26e1d9597f00fd027160b4ab655099b011e65d83dab0bd06081d67db19538f709709e560ce0b66439580a1570e39873c2fe9657bf0", 0x4e}], 0x3, 0x0, 0x0, 0x48800}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvmmsg(r2, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000000, 0x0) syz_emit_ethernet(0x116b, &(0x7f0000002240)=ANY=[@ANYBLOB], 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x1}, 0x50) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0xdc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x38, 0x3a, 0x0, @private1, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0bae2b", 0x0, 0x2f, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x87}]}}}}}}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 5.175452515s ago: executing program 1 (id=2222): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00'/23], 0x50) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000001480)="aeffa4486aa84c5cd1276d91eecdfccfb963910470b7fbea31521973580a6311fb47d40700e353de4e219eb4802eb77ce0d6016e584d552b5ccea8207888668e4b1c5d8e464389b41a7db270bcf39bd9e94fa051110e00cbf0a42159e717046d42be7bb0af9d94fc977ffa26577997b6c08a1b17ab4dd123fe7aa034d4d36f56ba3f438a0e6c356c0fad29e66a202cd90c08eb053f04f5b1aa50f6a115de7b6b61edd701777a7a6612f0310d2c1b0b9fabc21b67cecd727c6e05f18a639e9277b2813694267b7d134f89bedd55c711587c8ce6489474edd2f7b23243c0e2166aa7249592ea988afaef4fbbeddd1129b1091d885fcd6127ac89d5a0ebe59d47294152e34c23", 0x105, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x8007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000001dc0)={@broadcast, @dev, @void, {@ipv4={0x86dd, @generic={{0x5, 0x4, 0x3, 0x4, 0x14, 0x68, 0x0, 0x7, 0x1d, 0x0, @multicast2, @multicast2}}}}}, 0x0) 5.043016506s ago: executing program 7 (id=2223): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0xf}, {0xffe0}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4008014) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 4.423314496s ago: executing program 7 (id=2224): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000074c0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000500)="22029d3f34478dd7c6b4bd558580024dd4f3ed025977593fc8e4fc4340ed1a6612d271302e2b6f5f27b6da7bc441df1c08989d0e13e86549d437c61da3460c0ada77dbc3c34e7b469e25f86a8add71df58a707341eb74dc1f5224bee25a1be1747a7d899881e49f8975a6939695133329eb1ee253f4f1cd61236769fcd34f95086bae5b16ac2ac9540373774e91addd881875513b8c10535fa77b433bd88638abf49dbaa8d3f5f1dd85242968e6ecf19934150d008d609b3c0dab89c04c18eb4c43121", 0xc3}], 0x1, &(0x7f0000000600)=[{0x80, 0x117, 0xc, "3f5e6f3c9d1f8d06d8f766041e136f07c46f6f8bf0b0ef1c36bd429062a2829645abc5bda597269123c2f53019bdbda5beb3020b265982c5567246fc92044a26bb42571ba0457357eea7b69b335cdb849e8fead78ffcafd96eda33b7c548c2212b1dbffa1c825d677712c8667a90"}, {0x50, 0x0, 0x3, "ba9992248ef488b974dc307be4f83e92a17eb435279af8d5de5634ee1cee22a29f155527ebcf978ffe2340c2120bc2b346e29e779a7e8bdd1320606b9373"}, {0x38, 0x10d, 0x5, "77ef7767a3d874ad3b0fbe133ce6b94f0d44b739ad5708d870a2af13321d332ee0e5a297566b"}, {0x18, 0x119, 0x4, "0d24ab"}], 0x120}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[{0x20, 0x10b, 0x40000000, "73800dffba0a629a3f23ab0b2c73e25d"}, {0x10, 0x88, 0x1}, {0x48, 0x10c, 0xf, "81155870312619ceeaa4487650bef548a805576c7c271d7af897e14344adba7db19254639a68b6f0d76dd2ee5a95ae5082ee8d"}, {0xff0, 0x119, 0x0, "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"}, {0x40, 0x104, 0x9d9e, "7d6e08a52f4ec24fabc631a10fb07aa8696575317af579a6d8221f525f68548e781697d15cd33a26eae04c40"}, {0xc8, 0x10e, 0x1, "737ca9a65a972e68397bec44d739fef045529546298edbccd4db585a9fe86ec9624d77b9d1b263631a3c9a687cb2f7a2ce412d0254394c3cad8aa3f268476ccd2e04e7be517485576cf80c57a39c7bc18d07b143de87df39db7861e3bac904e322e85bdf574479e9d2b3e112dee26267c400e133e1a867f1b47e9b6619fcdc10ab496c6b8f942134c4fe8a6a1a321113b1e0c2f344976f2b550a1846f2317554eeb894666ce176c71a0d8b0557133c18fb79d5c3f1"}, {0x28, 0x1, 0x2bd, "c9b104b7fb16422f0b14f282a685d6d2dba80123a39601"}], 0x1198}}, {{&(0x7f0000000880)=@x25, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000002780)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006300)}}], 0x4, 0x8044) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x900, 0x1a4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0xffffff40}, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0xfffffffffffffffd, 0xd5b, 0x3, 0x4, 0x83e, 0x12, 0x101}}], 0x58}, 0x0) 3.330034713s ago: executing program 7 (id=2225): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.286572397s ago: executing program 8 (id=2226): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x110, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81004c000800450000fe000000000006907864010101ac1414aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780003451f69721cfd24937c99d354661e7603aa4851bf6c7994b5edadd94ab4b069ef8bc100a509a8d24e310d786cbece59278218a0677db62d14d9f9cac29fa94fa22cc680e8f254b5542c92105cadc53b760800000000000000f42f1b587cc59b68a7ffba2f38aa4a7dc84de514f3fff817033d53b5f15b3a7040267cb78bc30386526600104a8f3342c0ffceaa0fb7dd359b66f99e7d6b11e1f232cacd34c2cf211f8b2efcfc47a43f10dd9e2a2b4f5e407d29d28c0e3491eb97db9c"], 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) r5 = syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5}) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)=""/254, &(0x7f0000000040)=0xfe) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000140)={'ip_vti0\x00', 0x7fffffff}) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0xfffffffffffffe88) socket$kcm(0x10, 0x3, 0x10) 3.102395942s ago: executing program 5 (id=2227): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.080654573s ago: executing program 1 (id=2228): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0}) 1.379428759s ago: executing program 0 (id=2229): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r4, 0x0, r5, 0x0, 0x10000000000016, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) 212.332923ms ago: executing program 5 (id=2230): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x110, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81004c000800450000fe000000000006907864010101ac1414aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780003451f69721cfd24937c99d354661e7603aa4851bf6c7994b5edadd94ab4b069ef8bc100a509a8d24e310d786cbece59278218a0677db62d14d9f9cac29fa94fa22cc680e8f254b5542c92105cadc53b760800000000000000f42f1b587cc59b68a7ffba2f38aa4a7dc84de514f3fff817033d53b5f15b3a7040267cb78bc30386526600104a8f3342c0ffceaa0fb7dd359b66f99e7d6b11e1f232cacd34c2cf211f8b2efcfc47a43f10dd9e2a2b4f5e407d29d28c0e3491eb97db9c"], 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) r5 = syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x5, 0x4, 0x6, 0xe48d}, {0xbd6, 0x7, 0x0, 0x2}]}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0xfffffffffffffe88) 101.994982ms ago: executing program 7 (id=2231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r3) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) read$FUSE(r3, &(0x7f000000c400)={0x2020}, 0x2020) recvmmsg$unix(r3, &(0x7f0000006a80)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/65, 0x41}, {&(0x7f0000000480)=""/33, 0x21}, {&(0x7f0000000580)=""/118, 0x76}, {&(0x7f0000000640)=""/245, 0xf5}, {&(0x7f0000000780)=""/166, 0xa6}, {&(0x7f00000004c0)=""/54, 0x36}], 0x6, &(0x7f0000001e80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x128}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/23, 0x17}, {&(0x7f0000001980)=""/223, 0xdf}, {&(0x7f0000001a80)=""/16, 0x10}, {&(0x7f0000001ac0)=""/252, 0xfc}, {&(0x7f0000001bc0)=""/4, 0x4}, {&(0x7f0000001c00)=""/201, 0xc9}], 0x7, &(0x7f0000001d40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000000600), 0x0, &(0x7f0000004000)}}, {{&(0x7f0000004080)=@abs, 0x6e, &(0x7f0000004400)=[{&(0x7f0000004100)=""/135, 0x87}, {&(0x7f00000041c0)=""/12, 0xc}, {&(0x7f0000000840)=""/252, 0xfc}, {&(0x7f0000006b40)=""/196, 0xc4}], 0x4, &(0x7f0000003fc0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000057c0)=""/4074, 0xfea}, {&(0x7f00000067c0)=""/240, 0xf0}, {&(0x7f00000068c0)=""/13, 0xd}, {&(0x7f0000006900)=""/145, 0x91}], 0x4, &(0x7f0000006a00)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) splice(r2, 0x0, r6, 0x0, 0x406f413, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a0016000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x0) read(r8, &(0x7f0000000140)=""/87, 0x57) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 0s ago: executing program 1 (id=2232): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) kernel console output (not intermixed with test programs): Registering V4L2 extension [ 986.077467][T11142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.257750][ T4960] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 986.271291][ T4960] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 986.325998][ T4960] em28xx 2-1:0.89: No AC97 audio processor [ 986.443681][ T4960] usb 2-1: Decoder not found [ 986.473375][ T4960] em28xx 2-1:0.89: failed to create media graph [ 986.501899][ T4960] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 986.510901][ T4960] em28xx 2-1:0.89: Registering snapshot button... [ 986.518849][ T4960] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input18 [ 986.544148][ T4960] em28xx 2-1:0.89: Remote control support is not available for this card. [ 986.552984][ T4311] em28xx 9-1:0.89: Registering V4L2 extension [ 986.568187][T11142] device batadv_slave_0 entered promiscuous mode [ 986.674689][T11154] fuse: Bad value for 'rootmode' [ 987.032798][ T4311] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 987.047563][ T4311] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 987.092776][ T4311] em28xx 9-1:0.89: No AC97 audio processor [ 987.150973][ T4311] usb 9-1: Decoder not found [ 987.172847][ T4311] em28xx 9-1:0.89: failed to create media graph [ 987.206618][ T4311] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 987.261600][ T4311] em28xx 9-1:0.89: Registering snapshot button... [ 987.316902][ T4311] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input19 [ 987.342631][T11162] tipc: Started in network mode [ 987.360938][T11162] tipc: Node identity 421956e9e62c, cluster identity 4711 [ 987.395612][T11162] tipc: Enabled bearer , priority 0 [ 987.403096][ T4311] em28xx 9-1:0.89: Remote control support is not available for this card. [ 987.433114][T11164] device syzkaller0 entered promiscuous mode [ 987.444999][ T4379] em28xx 1-1:0.89: Closing input extension [ 987.450937][ T4379] em28xx 1-1:0.89: Deregistering snapshot button [ 987.580839][T11164] tipc: Resetting bearer [ 987.585763][ T4379] em28xx 1-1:0.89: Freeing device [ 987.586881][ T4899] em28xx 2-1:0.89: Closing input extension [ 987.617619][T11161] tipc: Resetting bearer [ 987.629422][ T4899] em28xx 2-1:0.89: Deregistering snapshot button [ 987.902096][T11161] tipc: Disabling bearer [ 987.913821][ T14] em28xx 9-1:0.89: Closing input extension [ 987.919930][ T14] em28xx 9-1:0.89: Deregistering snapshot button [ 987.950394][ T4899] em28xx 2-1:0.89: Freeing device [ 987.980730][ T14] em28xx 9-1:0.89: Freeing device [ 988.070050][T11171] 9pnet_virtio: no channels available for device syz [ 988.893578][ T14] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 989.088854][ T14] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.116875][ T14] usb 9-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 989.153630][ T14] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.212781][ T14] usb 9-1: config 0 descriptor?? [ 989.236712][ T14] usb 9-1: bad CDC descriptors [ 989.463633][ T5396] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 989.594436][ T4311] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 989.673615][ T5396] usb 1-1: Using ep0 maxpacket: 32 [ 989.680872][ T5396] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 989.705862][ T5396] usb 1-1: config 0 has no interface number 0 [ 989.712187][ T5396] usb 1-1: config 0 interface 89 has no altsetting 0 [ 989.742647][ T5396] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 989.789348][ T5396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.803716][ T4311] usb 2-1: Using ep0 maxpacket: 32 [ 989.814001][ T4311] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 989.840463][ T4311] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.863559][ T5396] usb 1-1: Product: syz [ 989.881318][ T5396] usb 1-1: Manufacturer: syz [ 989.886128][ T4311] usb 2-1: config 0 has no interfaces? [ 989.891033][ T5396] usb 1-1: SerialNumber: syz [ 989.898972][ T4311] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 989.935253][ T5396] usb 1-1: config 0 descriptor?? [ 989.948957][ T4311] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 989.968866][ T5396] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 989.984935][ T4311] usb 2-1: Product: syz [ 989.992442][ T4311] usb 2-1: Manufacturer: syz [ 990.001096][ T4311] usb 2-1: SerialNumber: syz [ 990.019816][ T5396] em28xx 1-1:0.89: Video interface 89 found: bulk [ 990.052577][ T4311] usb 2-1: config 0 descriptor?? [ 990.568150][ T5396] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 991.127532][T11209] fuse: Bad value for 'rootmode' [ 991.812428][ T5396] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 991.939105][ T5396] em28xx 1-1:0.89: board has no eeprom [ 992.013588][ T5396] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 992.020889][ T5396] em28xx 1-1:0.89: analog set to bulk mode. [ 992.027492][ T4960] em28xx 1-1:0.89: Registering V4L2 extension [ 992.037195][ T5396] usb 1-1: USB disconnect, device number 23 [ 992.043900][ T5396] em28xx 1-1:0.89: Disconnecting em28xx [ 992.228524][ T4960] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 992.247495][ T4960] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 992.296879][ T4311] usb 2-1: USB disconnect, device number 9 [ 992.355038][ T4960] em28xx 1-1:0.89: No AC97 audio processor [ 992.362871][ T4960] usb 1-1: Decoder not found [ 992.407035][ T4960] em28xx 1-1:0.89: failed to create media graph [ 992.454495][ T4960] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 992.618089][ T4960] em28xx 1-1:0.89: Registering snapshot button... [ 992.639193][ T4960] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input20 [ 992.671179][ T4960] em28xx 1-1:0.89: Remote control support is not available for this card. [ 992.710065][ T5396] em28xx 1-1:0.89: Closing input extension [ 992.716852][ T5396] em28xx 1-1:0.89: Deregistering snapshot button [ 992.800011][ T5396] em28xx 1-1:0.89: Freeing device [ 993.727073][T11233] tipc: Enabled bearer , priority 0 [ 993.803927][T11233] device syzkaller0 entered promiscuous mode [ 993.921031][T11233] tipc: Resetting bearer [ 993.980331][T11231] tipc: Resetting bearer [ 994.151269][T11231] tipc: Disabling bearer [ 994.561002][T11248] lo speed is unknown, defaulting to 1000 [ 994.568053][T11248] lo speed is unknown, defaulting to 1000 [ 994.629277][T11248] atomic_op ffff8880777fe998 conn xmit_atomic 0000000000000000 [ 995.340766][ T4899] usb 9-1: USB disconnect, device number 3 [ 995.577233][T11244] tun0: tun_chr_ioctl cmd 2147767517 [ 995.812214][T11262] fuse: Unknown parameter 'use00000000000000000000' [ 997.382203][T11256] lo speed is unknown, defaulting to 1000 [ 997.433837][ T4341] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 997.452741][T11256] lo speed is unknown, defaulting to 1000 [ 997.616692][ T5394] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 997.634105][ T4341] usb 2-1: Using ep0 maxpacket: 32 [ 997.647319][ T4341] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 997.692772][ T4341] usb 2-1: config 0 has no interface number 0 [ 997.742139][ T4341] usb 2-1: config 0 interface 89 has no altsetting 0 [ 997.801211][ T4341] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 997.810964][ T5394] usb 1-1: Using ep0 maxpacket: 16 [ 997.820287][ T5394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.867945][ T5394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.881617][ T4341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.907770][ T4341] usb 2-1: Product: syz [ 997.922930][ T5394] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 997.958963][ T4341] usb 2-1: Manufacturer: syz [ 997.961207][ T5394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.002857][ T5394] usb 1-1: config 0 descriptor?? [ 998.032339][ T4341] usb 2-1: SerialNumber: syz [ 998.085252][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.091601][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.120964][ T4341] usb 2-1: config 0 descriptor?? [ 998.197996][ T4341] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 998.235502][ T4341] em28xx 2-1:0.89: Video interface 89 found: bulk [ 998.759705][ T4341] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 998.784938][ T5394] usbhid 1-1:0.0: can't add hid device: -32 [ 998.790986][ T5394] usbhid: probe of 1-1:0.0 failed with error -32 [ 998.851771][ T5394] usb 1-1: USB disconnect, device number 24 [ 999.772503][ T4341] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 999.812931][ T4341] em28xx 2-1:0.89: board has no eeprom [ 999.913589][ T4341] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 999.921112][ T4341] em28xx 2-1:0.89: analog set to bulk mode. [ 999.990195][ T4341] usb 2-1: USB disconnect, device number 10 [ 1000.008137][ T4341] em28xx 2-1:0.89: Disconnecting em28xx [ 1000.021549][ T14] em28xx 2-1:0.89: Registering V4L2 extension [ 1000.205971][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1647'. [ 1000.342831][T11291] tun0: tun_chr_ioctl cmd 2147767517 [ 1001.009538][ T14] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1001.016800][ T14] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1001.024291][ T14] em28xx 2-1:0.89: No AC97 audio processor [ 1001.041385][ T14] usb 2-1: Decoder not found [ 1001.050479][ T14] em28xx 2-1:0.89: failed to create media graph [ 1001.067434][ T14] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1001.079257][ T14] em28xx 2-1:0.89: Registering snapshot button... [ 1001.107416][ T14] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input21 [ 1001.142474][ T14] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1001.160704][T11301] lo speed is unknown, defaulting to 1000 [ 1001.254098][T11301] lo speed is unknown, defaulting to 1000 [ 1001.450254][ T4341] em28xx 2-1:0.89: Closing input extension [ 1001.456590][ T4341] em28xx 2-1:0.89: Deregistering snapshot button [ 1001.548703][T11315] lo speed is unknown, defaulting to 1000 [ 1001.682170][T11316] atomic_op ffff888026e71998 conn xmit_atomic 0000000000000000 [ 1002.138743][T11315] lo speed is unknown, defaulting to 1000 [ 1002.323195][ T4341] em28xx 2-1:0.89: Freeing device [ 1002.763183][T11326] fuse: Unknown parameter 'use00000000000000000000' [ 1002.816439][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1651'. [ 1002.898851][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1654'. [ 1003.707763][T11324] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1651'. [ 1004.873926][T11339] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1655'. [ 1007.381563][T11354] 9pnet_virtio: no channels available for device syz [ 1007.480135][T11352] mkiss: ax0: crc mode is auto. [ 1011.024196][T11380] lo speed is unknown, defaulting to 1000 [ 1011.030951][T11380] lo speed is unknown, defaulting to 1000 [ 1011.096136][T11380] atomic_op ffff88807aebb998 conn xmit_atomic 0000000000000000 [ 1011.793852][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1663'. [ 1012.125173][T11391] fuse: Unknown parameter 'use00000000000000000000' [ 1012.466371][T11389] tun0: tun_chr_ioctl cmd 2147767517 [ 1012.482227][T11396] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1012.505359][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1012.561119][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1667'. [ 1013.891729][T11393] lo speed is unknown, defaulting to 1000 [ 1013.899990][T11408] tipc: Enabled bearer , priority 0 [ 1013.943022][T11408] device syzkaller0 entered promiscuous mode [ 1013.992809][T11408] tipc: Resetting bearer [ 1014.048655][T11393] lo speed is unknown, defaulting to 1000 [ 1014.056344][T11406] tipc: Resetting bearer [ 1014.144332][T11406] tipc: Disabling bearer [ 1016.602264][T11434] atomic_op ffff888070f89198 conn xmit_atomic 0000000000000000 [ 1018.116029][T11433] lo speed is unknown, defaulting to 1000 [ 1018.122548][T11433] lo speed is unknown, defaulting to 1000 [ 1018.535061][T11442] fuse: Unknown parameter 'user_i00000000000000000000' [ 1019.187527][T11453] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1019.237455][T11456] 9pnet_virtio: no channels available for device syz [ 1019.413648][T10565] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1019.617964][T10565] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.642142][T10565] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.684744][T10565] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1019.745350][T10565] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1019.815659][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1019.822793][T10565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.893103][T10565] usb 6-1: config 0 descriptor?? [ 1021.232553][T10565] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 1021.350055][T10565] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1021.433789][ T5396] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1021.497903][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1685'. [ 1021.548460][T10565] usb 6-1: USB disconnect, device number 10 [ 1021.693940][T11478] mkiss: ax0: crc mode is auto. [ 1021.913588][ T5396] usb 2-1: Using ep0 maxpacket: 32 [ 1023.391011][ T5396] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1024.057875][ T5396] usb 2-1: config 0 has no interface number 0 [ 1024.073621][ T5396] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1024.099443][ T5396] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1024.148965][ T5396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.193671][ T5396] usb 2-1: Product: syz [ 1024.197910][ T5396] usb 2-1: Manufacturer: syz [ 1024.219956][ T5396] usb 2-1: SerialNumber: syz [ 1024.246284][ T5396] usb 2-1: config 0 descriptor?? [ 1024.275865][T11479] fido_id[11479]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1024.290536][ T5396] usb 2-1: can't set config #0, error -71 [ 1024.448361][ T5396] usb 2-1: USB disconnect, device number 11 [ 1024.656654][T11487] random: crng reseeded on system resumption [ 1025.484535][T11499] fuse: Bad value for 'fd' [ 1025.900298][T11504] lo speed is unknown, defaulting to 1000 [ 1025.911462][T11504] lo speed is unknown, defaulting to 1000 [ 1026.193162][T11504] atomic_op ffff888076791998 conn xmit_atomic 0000000000000000 [ 1028.346800][T11518] input: syz0 as /devices/virtual/input/input23 [ 1028.733812][ T4383] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1028.946023][ T4383] usb 2-1: config 0 has no interfaces? [ 1028.992776][ T4383] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1029.009890][ T4383] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.024986][ T5396] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1029.103676][ T4383] usb 2-1: Product: syz [ 1029.137509][ T4383] usb 2-1: Manufacturer: syz [ 1029.179602][ T4383] usb 2-1: SerialNumber: syz [ 1029.247699][ T5396] usb 6-1: Using ep0 maxpacket: 32 [ 1029.257031][ T4383] usb 2-1: config 0 descriptor?? [ 1029.263412][ T5396] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1029.320437][ T5396] usb 6-1: config 0 has no interface number 0 [ 1029.347382][ T5396] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1029.432830][ T5396] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1029.474924][ T5396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.505618][ T5396] usb 6-1: Product: syz [ 1029.525362][ T5396] usb 6-1: Manufacturer: syz [ 1029.553609][ T5396] usb 6-1: SerialNumber: syz [ 1029.586970][ T5396] usb 6-1: config 0 descriptor?? [ 1029.666155][ T5396] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1029.694663][ T5396] em28xx 6-1:0.89: Video interface 89 found: bulk [ 1030.268489][ T5396] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1031.108832][T11561] 9pnet_virtio: no channels available for device syz [ 1031.297619][ T5396] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1031.321095][ T5396] em28xx 6-1:0.89: board has no eeprom [ 1031.413622][ T5396] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1031.425122][ T5396] em28xx 6-1:0.89: analog set to bulk mode. [ 1031.462230][ T4899] em28xx 6-1:0.89: Registering V4L2 extension [ 1031.484972][ T5396] usb 6-1: USB disconnect, device number 11 [ 1031.533171][ T5396] em28xx 6-1:0.89: Disconnecting em28xx [ 1031.819799][ T4899] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1031.843957][ T4899] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1031.896697][ T4899] em28xx 6-1:0.89: No AC97 audio processor [ 1031.973789][ T4899] usb 6-1: Decoder not found [ 1032.008834][ T4899] em28xx 6-1:0.89: failed to create media graph [ 1032.039812][ T4899] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1032.124704][ T4899] em28xx 6-1:0.89: Registering snapshot button... [ 1032.184374][ T4899] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input24 [ 1032.244641][ T4899] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1032.283792][ T5396] em28xx 6-1:0.89: Closing input extension [ 1032.299151][ T5396] em28xx 6-1:0.89: Deregistering snapshot button [ 1032.321742][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1702'. [ 1032.433004][T11574] mkiss: ax0: crc mode is auto. [ 1032.508412][ T5396] em28xx 6-1:0.89: Freeing device [ 1032.889126][ T4311] usb 2-1: USB disconnect, device number 12 [ 1033.047843][T11582] fuse: Unknown parameter 'user_i00000000000000000000' [ 1033.557246][T11596] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1706'. [ 1033.610598][T11596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1706'. [ 1033.909592][T11602] lo speed is unknown, defaulting to 1000 [ 1033.917889][T11602] lo speed is unknown, defaulting to 1000 [ 1033.984440][T11602] atomic_op ffff8880780f3998 conn xmit_atomic 0000000000000000 [ 1035.293752][ T4311] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1035.433681][ T5396] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1035.513713][ T4311] usb 2-1: Using ep0 maxpacket: 32 [ 1035.520367][ T4311] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1035.555237][ T4311] usb 2-1: config 0 has no interface number 0 [ 1035.579610][ T4311] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1035.643571][ T5396] usb 8-1: Using ep0 maxpacket: 32 [ 1035.657172][ T4311] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1035.675071][ T4311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.675842][ T5396] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1035.741600][ T5396] usb 8-1: config 0 has no interface number 0 [ 1035.761688][ T5396] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1035.803255][ T4311] usb 2-1: Product: syz [ 1035.810842][ T5396] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1035.843627][ T4311] usb 2-1: Manufacturer: syz [ 1035.862974][ T5396] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.881517][ T4311] usb 2-1: SerialNumber: syz [ 1035.887556][ T5396] usb 8-1: Product: syz [ 1035.903585][ T5396] usb 8-1: Manufacturer: syz [ 1035.908222][ T5396] usb 8-1: SerialNumber: syz [ 1035.947535][ T5396] usb 8-1: config 0 descriptor?? [ 1036.001956][ T4311] usb 2-1: config 0 descriptor?? [ 1036.010001][ T5396] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1036.034138][ T5396] em28xx 8-1:0.89: Video interface 89 found: bulk [ 1036.609771][ T4311] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1036.620643][ T5396] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 1036.650550][ T4311] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1037.243747][ T4311] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1037.688258][ T5396] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1037.719718][ T5396] em28xx 8-1:0.89: board has no eeprom [ 1037.803561][ T5396] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 1037.815449][ T5396] em28xx 8-1:0.89: analog set to bulk mode. [ 1037.867150][ T5396] usb 8-1: USB disconnect, device number 7 [ 1037.910765][ T5396] em28xx 8-1:0.89: Disconnecting em28xx [ 1037.957533][ T5394] em28xx 8-1:0.89: Registering V4L2 extension [ 1038.065999][ T4311] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1038.088311][ T4311] em28xx 2-1:0.89: board has no eeprom [ 1038.173737][ T4311] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1038.191610][ T4311] em28xx 2-1:0.89: analog set to bulk mode. [ 1038.264698][ T4311] usb 2-1: USB disconnect, device number 13 [ 1038.292003][ T4311] em28xx 2-1:0.89: Disconnecting em28xx [ 1038.443122][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1716'. [ 1038.459235][ T5394] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 1038.467735][ T5394] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 1038.537297][ T5394] em28xx 8-1:0.89: No AC97 audio processor [ 1038.613191][ T5394] usb 8-1: Decoder not found [ 1038.658043][ T5394] em28xx 8-1:0.89: failed to create media graph [ 1038.805320][ T5394] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 1038.869893][ T5394] em28xx 8-1:0.89: Registering snapshot button... [ 1038.919708][ T5394] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input25 [ 1039.068629][ T5394] em28xx 8-1:0.89: Remote control support is not available for this card. [ 1039.135180][ T5396] em28xx 8-1:0.89: Closing input extension [ 1039.141082][ T5396] em28xx 8-1:0.89: Deregistering snapshot button [ 1039.312046][ T4341] em28xx 2-1:0.89: Registering V4L2 extension [ 1039.335674][ T5396] em28xx 8-1:0.89: Freeing device [ 1039.600006][ T4341] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1039.607261][ T4341] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1039.633705][ T4341] em28xx 2-1:0.89: No AC97 audio processor [ 1039.673097][ T4341] usb 2-1: Decoder not found [ 1039.719623][ T4341] em28xx 2-1:0.89: failed to create media graph [ 1039.750277][ T4341] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1039.794894][ T4341] em28xx 2-1:0.89: Registering snapshot button... [ 1039.826005][ T4341] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input26 [ 1039.864808][ T4341] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1039.873386][ T4311] em28xx 2-1:0.89: Closing input extension [ 1039.879498][ T4311] em28xx 2-1:0.89: Deregistering snapshot button [ 1039.996838][ T4311] em28xx 2-1:0.89: Freeing device [ 1040.470195][T11674] atomic_op ffff8880252e1998 conn xmit_atomic 0000000000000000 [ 1041.219381][T11676] 9pnet_virtio: no channels available for device syz [ 1042.378343][T11673] lo speed is unknown, defaulting to 1000 [ 1042.384908][T11673] lo speed is unknown, defaulting to 1000 [ 1042.668032][T11685] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1722'. [ 1042.859880][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1722'. [ 1043.345821][T11699] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1043.367419][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1043.863699][ T4899] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1043.898933][T11712] fuse: Unknown parameter 'user_id00000000000000000000' [ 1043.906242][ T5394] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1044.116904][ T4899] usb 8-1: config 0 has no interfaces? [ 1044.123917][ T5394] usb 1-1: Using ep0 maxpacket: 32 [ 1044.131980][ T5394] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1044.164934][ T4899] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1044.176885][ T5394] usb 1-1: config 0 has no interface number 0 [ 1044.182981][ T5394] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1044.200124][ T4899] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.341407][ T4899] usb 8-1: Product: syz [ 1044.349347][ T4899] usb 8-1: Manufacturer: syz [ 1044.355380][ T4899] usb 8-1: SerialNumber: syz [ 1044.361134][ T5394] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1044.373228][ T4899] usb 8-1: config 0 descriptor?? [ 1044.378367][ T5394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.388498][ T5394] usb 1-1: Product: syz [ 1044.392708][ T5394] usb 1-1: Manufacturer: syz [ 1044.413056][ T5394] usb 1-1: SerialNumber: syz [ 1044.430552][ T5394] usb 1-1: config 0 descriptor?? [ 1044.475474][ T5394] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1044.509532][ T5394] em28xx 1-1:0.89: Video interface 89 found: bulk [ 1045.578776][ T5394] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1046.977866][T11742] lo speed is unknown, defaulting to 1000 [ 1046.984637][T11742] lo speed is unknown, defaulting to 1000 [ 1047.046257][T11742] atomic_op ffff888055964198 conn xmit_atomic 0000000000000000 [ 1047.535698][ T5394] em28xx 1-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1047.625327][ T5394] em28xx 1-1:0.89: board has no eeprom [ 1047.754244][ T5394] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1047.771826][ T5394] em28xx 1-1:0.89: analog set to bulk mode. [ 1047.813293][ T5396] em28xx 1-1:0.89: Registering V4L2 extension [ 1047.832845][ T5394] usb 1-1: USB disconnect, device number 25 [ 1047.919120][ T5394] em28xx 1-1:0.89: Disconnecting em28xx [ 1047.969693][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1736'. [ 1047.987210][ T4341] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1048.193711][ T4341] usb 6-1: Using ep0 maxpacket: 32 [ 1048.201826][ T4341] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1048.226619][ T5396] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1048.258569][ T4341] usb 6-1: config 0 has no interface number 0 [ 1048.281236][ T4341] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1048.301589][ T5396] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1048.325444][ T4341] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1048.353533][ T5396] em28xx 1-1:0.89: No AC97 audio processor [ 1048.369839][ T5396] usb 1-1: Decoder not found [ 1048.389610][ T4341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.408389][ T5396] em28xx 1-1:0.89: failed to create media graph [ 1048.419708][ T4341] usb 6-1: Product: syz [ 1048.436365][ T4341] usb 6-1: Manufacturer: syz [ 1048.451192][ T4341] usb 6-1: SerialNumber: syz [ 1048.472567][ T4341] usb 6-1: config 0 descriptor?? [ 1048.502332][ T5396] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1048.524456][ T4341] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1048.572893][ T5396] em28xx 1-1:0.89: Registering snapshot button... [ 1048.594088][ T4341] em28xx 6-1:0.89: Video interface 89 found: bulk [ 1048.622351][ T5396] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input27 [ 1048.734404][ T5396] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1048.788748][ T5394] em28xx 1-1:0.89: Closing input extension [ 1048.795236][ T5394] em28xx 1-1:0.89: Deregistering snapshot button [ 1048.855785][ T5394] em28xx 1-1:0.89: Freeing device [ 1048.924750][T11771] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1739'. [ 1048.962961][T11771] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1739'. [ 1049.125045][ T4341] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1049.137590][T10565] usb 8-1: USB disconnect, device number 8 [ 1049.637004][T11776] lo speed is unknown, defaulting to 1000 [ 1049.644108][T11776] lo speed is unknown, defaulting to 1000 [ 1050.433739][T11778] fuse: Unknown parameter 'user_id00000000000000000000' [ 1050.663230][ T4341] em28xx 6-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1050.690677][ T4341] em28xx 6-1:0.89: board has no eeprom [ 1050.803735][ T4341] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1050.818706][ T4341] em28xx 6-1:0.89: analog set to bulk mode. [ 1050.848877][T11785] 9pnet_virtio: no channels available for device syz [ 1050.874916][ T4311] em28xx 6-1:0.89: Registering V4L2 extension [ 1050.914407][ T4341] usb 6-1: USB disconnect, device number 12 [ 1050.953013][ T4341] em28xx 6-1:0.89: Disconnecting em28xx [ 1051.356254][ T4311] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1051.368726][ T4311] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1051.392257][ T4311] em28xx 6-1:0.89: No AC97 audio processor [ 1051.440142][ T4311] usb 6-1: Decoder not found [ 1051.469817][ T4311] em28xx 6-1:0.89: failed to create media graph [ 1051.552064][ T4311] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1051.617351][ T4311] em28xx 6-1:0.89: Registering snapshot button... [ 1051.652530][ T4311] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input28 [ 1051.965486][T11806] atomic_op ffff888072962198 conn xmit_atomic 0000000000000000 [ 1052.580792][ T4311] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1052.589781][ T4341] em28xx 6-1:0.89: Closing input extension [ 1052.598497][ T4341] em28xx 6-1:0.89: Deregistering snapshot button [ 1052.871496][ T4341] em28xx 6-1:0.89: Freeing device [ 1052.885548][T11805] lo speed is unknown, defaulting to 1000 [ 1052.892018][T11805] lo speed is unknown, defaulting to 1000 [ 1054.026897][T11819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1750'. [ 1054.213888][ T4341] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1054.344666][ T4311] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1054.405920][ T4341] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1054.563750][ T4341] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1054.640467][T11828] lo speed is unknown, defaulting to 1000 [ 1054.647427][T11828] lo speed is unknown, defaulting to 1000 [ 1054.705923][ T4311] usb 2-1: Using ep0 maxpacket: 32 [ 1055.373603][ T4341] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.382668][ T4311] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1055.393616][ T4311] usb 2-1: config 0 has no interface number 0 [ 1055.399758][ T4311] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1055.406611][ T4341] usb 9-1: Product: syz [ 1055.436416][ T4341] usb 9-1: Manufacturer: syz [ 1055.457881][ T4341] usb 9-1: SerialNumber: syz [ 1055.472470][ T4311] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1055.658409][ T4311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.718487][ T4311] usb 2-1: Product: syz [ 1055.758825][ T4311] usb 2-1: Manufacturer: syz [ 1055.783566][ T4311] usb 2-1: SerialNumber: syz [ 1055.885232][ T4311] usb 2-1: config 0 descriptor?? [ 1055.964701][ T4311] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1056.031535][ T4311] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1056.230888][ T4341] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1056.545196][ T4311] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1056.910180][T11844] mkiss: ax0: crc mode is auto. [ 1057.911538][ T4311] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1059.516953][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.523343][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.836956][ T4311] em28xx 2-1:0.89: board has no eeprom [ 1059.923555][ T4311] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1059.930845][ T4311] em28xx 2-1:0.89: analog set to bulk mode. [ 1059.946244][ T4311] usb 2-1: USB disconnect, device number 14 [ 1059.952845][ T4311] em28xx 2-1:0.89: Disconnecting em28xx [ 1059.973558][ T7] em28xx 2-1:0.89: Registering V4L2 extension [ 1060.344734][ T7] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1060.359531][ T7] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1060.386578][ T7] em28xx 2-1:0.89: No AC97 audio processor [ 1060.419467][ T7] usb 2-1: Decoder not found [ 1060.437081][ T7] em28xx 2-1:0.89: failed to create media graph [ 1060.462837][ T7] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1060.498930][ T7] em28xx 2-1:0.89: Registering snapshot button... [ 1060.526856][ T7] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input29 [ 1060.576905][ T7] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1060.616536][ T4311] em28xx 2-1:0.89: Closing input extension [ 1060.622726][ T4311] em28xx 2-1:0.89: Deregistering snapshot button [ 1060.744791][ T4311] em28xx 2-1:0.89: Freeing device [ 1061.603744][T10565] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1061.819130][T10565] usb 1-1: config 0 has no interfaces? [ 1061.900265][T10565] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1061.936696][T10565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.966418][T10565] usb 1-1: Product: syz [ 1061.995694][T10565] usb 1-1: Manufacturer: syz [ 1062.000441][T10565] usb 1-1: SerialNumber: syz [ 1062.040968][T10565] usb 1-1: config 0 descriptor?? [ 1062.218962][T11880] input: syz0 as /devices/virtual/input/input30 [ 1063.702911][ T5396] usb 9-1: USB disconnect, device number 4 [ 1063.762400][ T5396] usblp0: removed [ 1064.182880][T11910] 9pnet_virtio: no channels available for device syz [ 1065.559912][T11921] lo speed is unknown, defaulting to 1000 [ 1065.566779][T11921] lo speed is unknown, defaulting to 1000 [ 1065.669685][T11921] atomic_op ffff888056396998 conn xmit_atomic 0000000000000000 [ 1065.949845][T11922] tipc: Started in network mode [ 1066.294639][T11922] tipc: Node identity 3648747def52, cluster identity 4711 [ 1066.301937][T11922] tipc: Enabled bearer , priority 0 [ 1066.366564][T11919] tipc: Resetting bearer [ 1066.390507][T10565] usb 1-1: USB disconnect, device number 26 [ 1066.455383][T11918] tipc: Disabling bearer [ 1068.768235][T11934] mkiss: ax0: crc mode is auto. [ 1069.777089][T11939] tun0: tun_chr_ioctl cmd 2147767517 [ 1070.612221][T11939] lo speed is unknown, defaulting to 1000 [ 1070.629854][T11939] lo speed is unknown, defaulting to 1000 [ 1071.162513][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1776'. [ 1071.627751][T11975] atomic_op ffff88805664c998 conn xmit_atomic 0000000000000000 [ 1071.835602][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 1072.289301][T11974] lo speed is unknown, defaulting to 1000 [ 1072.295970][T11974] lo speed is unknown, defaulting to 1000 [ 1072.541353][T11982] tipc: Enabled bearer , priority 0 [ 1072.562873][T11982] device syzkaller0 entered promiscuous mode [ 1072.904932][T11982] tipc: Resetting bearer [ 1073.060197][T11979] tipc: Resetting bearer [ 1073.141992][T11979] tipc: Disabling bearer [ 1073.799267][T11999] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1781'. [ 1073.872281][T11999] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1781'. [ 1075.226023][T12013] 9pnet_virtio: no channels available for device syz [ 1075.336027][T12014] lo speed is unknown, defaulting to 1000 [ 1075.342766][T12014] lo speed is unknown, defaulting to 1000 [ 1076.294549][T12018] mkiss: ax0: crc mode is auto. [ 1081.252758][ T5396] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1081.683631][ T5396] usb 8-1: Using ep0 maxpacket: 32 [ 1081.693431][ T5396] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1081.725403][ T5396] usb 8-1: config 0 has no interface number 0 [ 1081.743736][ T5396] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1081.779192][ T5396] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1081.804070][ T5396] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.833827][ T5396] usb 8-1: Product: syz [ 1081.838194][ T5396] usb 8-1: Manufacturer: syz [ 1081.848332][ T5396] usb 8-1: SerialNumber: syz [ 1081.877941][ T5396] usb 8-1: config 0 descriptor?? [ 1081.925352][ T5396] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1081.997149][ T5396] em28xx 8-1:0.89: Video interface 89 found: bulk [ 1082.411573][T12062] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1794'. [ 1082.520005][T12062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1794'. [ 1082.522333][ T5396] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 1083.421489][ T5396] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1083.456586][ T5396] em28xx 8-1:0.89: board has no eeprom [ 1083.563797][ T5396] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 1083.581311][ T5396] em28xx 8-1:0.89: analog set to bulk mode. [ 1083.601382][ T4383] em28xx 8-1:0.89: Registering V4L2 extension [ 1083.652450][ T5396] usb 8-1: USB disconnect, device number 9 [ 1083.671718][ T5396] em28xx 8-1:0.89: Disconnecting em28xx [ 1083.910327][ T4383] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 1083.978862][ T4383] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 1084.008703][ T4383] em28xx 8-1:0.89: No AC97 audio processor [ 1084.078090][ T4383] usb 8-1: Decoder not found [ 1084.141971][ T4383] em28xx 8-1:0.89: failed to create media graph [ 1084.467311][ T4383] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 1084.536857][ T4383] em28xx 8-1:0.89: Registering snapshot button... [ 1084.571949][T12100] lo speed is unknown, defaulting to 1000 [ 1084.578395][T12100] lo speed is unknown, defaulting to 1000 [ 1084.638667][ T4383] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input31 [ 1084.762640][ T4383] em28xx 8-1:0.89: Remote control support is not available for this card. [ 1084.835749][ T5396] em28xx 8-1:0.89: Closing input extension [ 1084.841751][ T5396] em28xx 8-1:0.89: Deregistering snapshot button [ 1085.186887][ T5396] em28xx 8-1:0.89: Freeing device [ 1085.573649][ T5396] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1085.766265][ T5396] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1085.791873][ T5396] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1085.817459][ T5396] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.833903][ T5396] usb 8-1: Product: syz [ 1085.846151][ T5396] usb 8-1: Manufacturer: syz [ 1085.863221][ T5396] usb 8-1: SerialNumber: syz [ 1086.233909][T12116] mkiss: ax0: crc mode is auto. [ 1088.644877][ T5396] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1089.122525][ T5396] usb 8-1: USB disconnect, device number 10 [ 1089.137256][ T5396] usblp0: removed [ 1090.941493][T12126] tun0: tun_chr_ioctl cmd 2147767517 [ 1093.262748][T12151] 9pnet_virtio: no channels available for device syz [ 1093.903595][ T5558] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1093.952089][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1094.103617][ T5558] usb 6-1: device descriptor read/64, error -32 [ 1094.223712][ T4341] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1094.255966][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 1094.393664][ T5558] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1094.403983][ T4341] usb 1-1: device descriptor read/64, error -32 [ 1094.627627][ T5558] usb 6-1: config 0 has no interfaces? [ 1094.647919][ T5558] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1094.683793][ T4341] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1094.703168][ T5558] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.723556][ T5558] usb 6-1: Product: syz [ 1094.727788][ T5558] usb 6-1: Manufacturer: syz [ 1094.783644][ T5558] usb 6-1: SerialNumber: syz [ 1094.829857][ T5558] usb 6-1: config 0 descriptor?? [ 1094.893720][ T4341] usb 1-1: Using ep0 maxpacket: 32 [ 1094.901063][ T4341] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1094.963508][ T4341] usb 1-1: config 0 has no interface number 0 [ 1094.993601][ T4341] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1095.015404][ T4341] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1095.049072][ T4341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.109048][ T4341] usb 1-1: Product: syz [ 1095.113293][ T4341] usb 1-1: Manufacturer: syz [ 1095.138933][ T4341] usb 1-1: SerialNumber: syz [ 1095.164276][ T4341] usb 1-1: config 0 descriptor?? [ 1095.191861][ T4341] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1095.230244][ T4341] em28xx 1-1:0.89: Video interface 89 found: bulk [ 1095.776869][ T4341] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1095.875550][ T5558] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1096.125050][ T5558] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.151187][ T5558] usb 8-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1096.189191][ T5558] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.406256][ T5558] usb 8-1: config 0 descriptor?? [ 1096.444176][ T5558] rndis_host 8-1:0.0: skipping garbage [ 1096.503423][T12182] lo speed is unknown, defaulting to 1000 [ 1096.510236][T12182] lo speed is unknown, defaulting to 1000 [ 1096.664199][T12183] atomic_op ffff88807b743998 conn xmit_atomic 0000000000000000 [ 1097.241884][ T5558] usb 8-1: bad CDC descriptors [ 1097.248375][ T4341] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1097.258933][ T4341] em28xx 1-1:0.89: board has no eeprom [ 1097.279288][ T5558] usb 8-1: USB disconnect, device number 11 [ 1097.353733][ T4341] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1097.361018][ T4341] em28xx 1-1:0.89: analog set to bulk mode. [ 1097.408255][ T4341] usb 1-1: USB disconnect, device number 28 [ 1097.436564][ T4341] em28xx 1-1:0.89: Disconnecting em28xx [ 1097.478003][ T4311] em28xx 1-1:0.89: Registering V4L2 extension [ 1097.882736][ T4311] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1097.894499][ T4311] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1097.939903][ T4311] em28xx 1-1:0.89: No AC97 audio processor [ 1097.984771][ T4311] usb 1-1: Decoder not found [ 1098.004460][ T8750] usb 6-1: USB disconnect, device number 14 [ 1098.032102][ T4311] em28xx 1-1:0.89: failed to create media graph [ 1098.090233][ T4311] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1098.985003][ T4311] em28xx 1-1:0.89: Registering snapshot button... [ 1099.066524][ T4311] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input32 [ 1099.164459][ T4311] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1099.242493][ T4341] em28xx 1-1:0.89: Closing input extension [ 1099.248855][ T4341] em28xx 1-1:0.89: Deregistering snapshot button [ 1099.310328][ T4341] em28xx 1-1:0.89: Freeing device [ 1100.427297][T12226] random: crng reseeded on system resumption [ 1103.032409][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 1104.724672][T12267] fuse: Unknown parameter '0x0000000000000004' [ 1105.013694][ T4341] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1105.203690][ T4341] usb 6-1: Using ep0 maxpacket: 32 [ 1105.213222][ T4341] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1105.251370][ T4341] usb 6-1: config 0 has no interface number 0 [ 1106.201417][ T4341] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1106.249299][ T4341] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1106.335836][ T4341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.404997][ T4341] usb 6-1: Product: syz [ 1106.433335][ T4341] usb 6-1: Manufacturer: syz [ 1106.462391][ T4341] usb 6-1: SerialNumber: syz [ 1106.498449][ T4341] usb 6-1: config 0 descriptor?? [ 1106.675821][ T4341] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1107.649586][ T4341] em28xx 6-1:0.89: Video interface 89 found: bulk [ 1107.844521][ T4341] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1108.219759][ T8750] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1108.424089][ T8750] usb 1-1: config 0 has no interfaces? [ 1108.472614][ T8750] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1108.501041][ T8750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.541190][ T8750] usb 1-1: Product: syz [ 1108.560707][ T8750] usb 1-1: Manufacturer: syz [ 1108.575597][ T8750] usb 1-1: SerialNumber: syz [ 1108.661869][ T8750] usb 1-1: config 0 descriptor?? [ 1108.678533][ T4341] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1108.731847][ T4341] em28xx 6-1:0.89: board has no eeprom [ 1108.769286][T12312] random: crng reseeded on system resumption [ 1108.833538][ T4341] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1108.895836][ T4341] em28xx 6-1:0.89: analog set to bulk mode. [ 1109.076226][ T4341] usb 6-1: USB disconnect, device number 15 [ 1109.130419][ T4341] em28xx 6-1:0.89: Disconnecting em28xx [ 1109.162310][ T7] em28xx 6-1:0.89: Registering V4L2 extension [ 1109.491550][ T7] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1109.503964][ T7] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1109.535211][ T7] em28xx 6-1:0.89: No AC97 audio processor [ 1109.723169][ T7] usb 6-1: Decoder not found [ 1109.783003][ T7] em28xx 6-1:0.89: failed to create media graph [ 1109.842960][ T7] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1109.897259][ T7] em28xx 6-1:0.89: Registering snapshot button... [ 1109.925969][ T7] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input33 [ 1109.956481][ T7] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1109.990894][ T4341] em28xx 6-1:0.89: Closing input extension [ 1110.021209][ T4341] em28xx 6-1:0.89: Deregistering snapshot button [ 1110.123571][ T4341] em28xx 6-1:0.89: Freeing device [ 1110.532762][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1838'. [ 1112.179788][T12350] lo speed is unknown, defaulting to 1000 [ 1112.186671][T12350] lo speed is unknown, defaulting to 1000 [ 1112.337151][T12351] atomic_op ffff888026205998 conn xmit_atomic 0000000000000000 [ 1113.427191][T12357] fuse: Unknown parameter 'fd0x0000000000000004' [ 1114.651148][ T952] usb 1-1: USB disconnect, device number 29 [ 1117.114169][T12402] input: syz0 as /devices/virtual/input/input34 [ 1117.243595][ T4341] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1117.422539][T12413] lo speed is unknown, defaulting to 1000 [ 1117.429482][T12413] lo speed is unknown, defaulting to 1000 [ 1117.581553][T12414] atomic_op ffff88802a2b7198 conn xmit_atomic 0000000000000000 [ 1118.283683][ T4341] usb 1-1: Using ep0 maxpacket: 32 [ 1118.299462][ T4341] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1118.322115][ T4341] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1118.389674][ T4341] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1118.438008][ T4341] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1118.489447][ T4341] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1118.562304][ T4341] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1118.645604][ T4341] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1118.683572][ T4341] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1118.722423][ T4341] usb 1-1: Product: syz [ 1118.732658][ T4341] usb 1-1: Manufacturer: syz [ 1118.753214][ T4341] usb 1-1: SerialNumber: syz [ 1118.774202][T12424] fuse: Unknown parameter 'fd0x0000000000000004' [ 1118.798161][ T4341] usb 1-1: config 0 descriptor?? [ 1118.834759][ T4341] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1118.918472][ T4341] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1119.596098][T12444] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1120.647485][T10565] usb 1-1: USB disconnect, device number 30 [ 1120.673385][T10565] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1120.958858][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.965287][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.063544][ T4899] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1122.283530][ T4899] usb 2-1: Using ep0 maxpacket: 32 [ 1122.290350][ T4899] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1122.333780][ T4899] usb 2-1: config 0 has no interface number 0 [ 1122.363135][ T4899] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1122.413400][ T4899] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1122.447026][ T4899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.535543][ T4899] usb 2-1: Product: syz [ 1122.600406][ T4899] usb 2-1: Manufacturer: syz [ 1122.614027][ T4899] usb 2-1: SerialNumber: syz [ 1122.638250][ T4899] usb 2-1: config 0 descriptor?? [ 1122.681446][ T4899] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1122.691074][ T4899] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1123.293387][ T4899] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1123.342236][T12495] fuse: Unknown parameter 'fd0x0000000000000004' [ 1123.483559][T12482] tun0: tun_chr_ioctl cmd 2147767517 [ 1123.559633][T12497] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1867'. [ 1123.924499][ T4899] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1123.954560][ T4899] em28xx 2-1:0.89: board has no eeprom [ 1124.025922][T12483] lo speed is unknown, defaulting to 1000 [ 1124.033628][ T4899] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1124.043613][ T4899] em28xx 2-1:0.89: analog set to bulk mode. [ 1124.109675][ T4899] usb 2-1: USB disconnect, device number 15 [ 1124.118657][T12483] lo speed is unknown, defaulting to 1000 [ 1124.145609][ T4899] em28xx 2-1:0.89: Disconnecting em28xx [ 1124.169170][ T8750] em28xx 2-1:0.89: Registering V4L2 extension [ 1124.332390][ T8750] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1124.342935][ T8750] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1124.370601][ T8750] em28xx 2-1:0.89: No AC97 audio processor [ 1124.401709][ T8750] usb 2-1: Decoder not found [ 1124.419373][ T8750] em28xx 2-1:0.89: failed to create media graph [ 1124.453818][ T8750] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1124.485464][ T8750] em28xx 2-1:0.89: Registering snapshot button... [ 1124.528940][ T8750] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input35 [ 1124.589286][ T8750] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1124.633690][ T4899] em28xx 2-1:0.89: Closing input extension [ 1124.639671][ T4899] em28xx 2-1:0.89: Deregistering snapshot button [ 1124.727995][ T4899] em28xx 2-1:0.89: Freeing device [ 1127.862469][T12563] mkiss: ax0: crc mode is auto. [ 1131.178820][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1878'. [ 1131.330634][T12576] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1879'. [ 1131.642374][T12584] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1881'. [ 1131.667249][T12584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1881'. [ 1132.313721][T12592] lo speed is unknown, defaulting to 1000 [ 1132.320475][T12592] lo speed is unknown, defaulting to 1000 [ 1137.463633][T12644] mkiss: ax0: crc mode is auto. [ 1140.882926][T12650] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1893'. [ 1141.542519][T12658] lo speed is unknown, defaulting to 1000 [ 1141.548958][T12658] lo speed is unknown, defaulting to 1000 [ 1143.934695][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1896'. [ 1145.602978][T12687] atomic_op ffff88814536c198 conn xmit_atomic 0000000000000000 [ 1146.190421][T12686] lo speed is unknown, defaulting to 1000 [ 1146.196948][T12686] lo speed is unknown, defaulting to 1000 [ 1146.455241][T12679] input: syz0 as /devices/virtual/input/input36 [ 1146.633860][ T5394] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1146.845213][ T5394] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.869864][ T5394] usb 8-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1146.893554][ T9735] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1146.916759][ T5394] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.971240][ T5394] usb 8-1: config 0 descriptor?? [ 1147.030415][ T5394] usb 8-1: bad CDC descriptors [ 1147.157769][ T9735] usb 2-1: config 0 has no interfaces? [ 1147.212438][ T5394] usb 8-1: USB disconnect, device number 12 [ 1147.222266][ T9735] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1147.265817][ T9735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.284707][ T9735] usb 2-1: Product: syz [ 1147.289079][ T9735] usb 2-1: Manufacturer: syz [ 1147.294324][ T9735] usb 2-1: SerialNumber: syz [ 1147.370697][ T9735] usb 2-1: config 0 descriptor?? [ 1147.994289][ T4311] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1148.214342][ T4311] usb 9-1: Using ep0 maxpacket: 32 [ 1148.229895][ T4311] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 1148.274726][ T4311] usb 9-1: config 0 has no interface number 0 [ 1148.300497][ T4311] usb 9-1: config 0 interface 89 has no altsetting 0 [ 1148.360945][ T4311] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1148.372676][ T4311] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.398125][ T4311] usb 9-1: Product: syz [ 1148.417677][ T4311] usb 9-1: Manufacturer: syz [ 1148.432049][ T4311] usb 9-1: SerialNumber: syz [ 1148.462034][ T4311] usb 9-1: config 0 descriptor?? [ 1148.511049][ T4311] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1148.541438][ T4311] em28xx 9-1:0.89: Video interface 89 found: bulk [ 1149.111174][ T4311] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 1149.207788][T12715] lo speed is unknown, defaulting to 1000 [ 1149.214894][T12715] lo speed is unknown, defaulting to 1000 [ 1150.916459][ T4311] em28xx 9-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 1150.967822][ T4311] em28xx 9-1:0.89: board has no eeprom [ 1151.094660][T12725] loop4: detected capacity change from 0 to 7 [ 1151.158761][T10505] Dev loop4: unable to read RDB block 7 [ 1151.164457][T10505] loop4: unable to read partition table [ 1151.183558][ T4311] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 1151.203111][ T4311] em28xx 9-1:0.89: analog set to bulk mode. [ 1151.203288][T10505] loop4: partition table beyond EOD, truncated [ 1151.242958][ T7] em28xx 9-1:0.89: Registering V4L2 extension [ 1151.291049][ T4311] usb 9-1: USB disconnect, device number 5 [ 1151.359680][ T4311] em28xx 9-1:0.89: Disconnecting em28xx [ 1151.386613][T12725] Dev loop4: unable to read RDB block 7 [ 1151.508311][ T7] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 1151.525781][T12725] loop4: unable to read partition table [ 1151.532942][ T7] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 1151.577374][ T7] em28xx 9-1:0.89: No AC97 audio processor [ 1151.588049][T12725] loop4: partition table beyond EOD, truncated [ 1151.653716][ T7] usb 9-1: Decoder not found [ 1151.692592][ T7] em28xx 9-1:0.89: failed to create media graph [ 1151.701583][T12725] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1151.789433][ T7] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 1151.834390][ T7] em28xx 9-1:0.89: Registering snapshot button... [ 1151.892168][ T7] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input37 [ 1151.965407][ T7] em28xx 9-1:0.89: Remote control support is not available for this card. [ 1153.738065][ T4311] em28xx 9-1:0.89: Closing input extension [ 1153.760383][ T4311] em28xx 9-1:0.89: Deregistering snapshot button [ 1154.107416][ T4311] em28xx 9-1:0.89: Freeing device [ 1154.595165][ T9735] usb 2-1: USB disconnect, device number 16 [ 1155.878484][T12751] lo speed is unknown, defaulting to 1000 [ 1155.885307][T12751] lo speed is unknown, defaulting to 1000 [ 1155.950051][T12751] atomic_op ffff88805743d998 conn xmit_atomic 0000000000000000 [ 1156.877855][T12761] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1916'. [ 1156.914178][T12761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1916'. [ 1158.218892][T12779] random: crng reseeded on system resumption [ 1160.773583][ T7] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1161.007871][ T7] usb 9-1: config 0 has no interfaces? [ 1161.070844][ T7] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1161.102451][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.131212][ T7] usb 9-1: Product: syz [ 1161.167376][ T7] usb 9-1: Manufacturer: syz [ 1161.199211][ T7] usb 9-1: SerialNumber: syz [ 1161.249584][ T7] usb 9-1: config 0 descriptor?? [ 1164.197998][T12809] input: syz0 as /devices/virtual/input/input38 [ 1165.839346][T12827] lo speed is unknown, defaulting to 1000 [ 1165.846776][T12827] lo speed is unknown, defaulting to 1000 [ 1166.007300][T12828] atomic_op ffff888078486198 conn xmit_atomic 0000000000000000 [ 1166.963731][ T4311] usb 9-1: USB disconnect, device number 6 [ 1167.362980][T12836] tun0: tun_chr_ioctl cmd 2147767517 [ 1167.685466][ T5394] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1167.905433][ T5394] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1167.921570][ T5394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.992301][ T5394] usb 6-1: config 0 descriptor?? [ 1168.028201][ T5394] cp210x 6-1:0.0: cp210x converter detected [ 1168.227860][ T5394] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1168.247157][ T5394] cp210x 6-1:0.0: querying part number failed [ 1168.270921][ T5394] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1168.474726][T12836] lo speed is unknown, defaulting to 1000 [ 1168.487707][T12847] device syzkaller0 entered promiscuous mode [ 1168.534578][T12836] lo speed is unknown, defaulting to 1000 [ 1168.849320][T12849] random: crng reseeded on system resumption [ 1171.797954][ T8750] usb 6-1: USB disconnect, device number 16 [ 1171.840321][ T8750] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1171.924242][ T8750] cp210x 6-1:0.0: device disconnected [ 1173.097776][ T9735] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1173.231382][T12882] lo speed is unknown, defaulting to 1000 [ 1173.238326][T12882] lo speed is unknown, defaulting to 1000 [ 1173.344309][T12882] atomic_op ffff888076f90998 conn xmit_atomic 0000000000000000 [ 1173.463630][ T9735] usb 2-1: Using ep0 maxpacket: 32 [ 1173.487769][ T9735] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1173.594521][ T9735] usb 2-1: config 0 has no interface number 0 [ 1173.601534][ T9735] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1173.756286][ T9735] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1173.888438][ T9735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.041231][ T9735] usb 2-1: Product: syz [ 1174.067363][ T9735] usb 2-1: Manufacturer: syz [ 1174.082245][ T9735] usb 2-1: SerialNumber: syz [ 1174.099031][ T9735] usb 2-1: config 0 descriptor?? [ 1174.171348][ T9735] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1174.231737][ T9735] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1174.899180][ T9735] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1175.133594][T12663] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1175.512837][ T9735] em28xx 2-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 1175.539285][ T9735] em28xx 2-1:0.89: board has no eeprom [ 1175.734778][T12663] usb 1-1: config 0 has no interfaces? [ 1175.783639][ T9735] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1175.810577][ T9735] em28xx 2-1:0.89: analog set to bulk mode. [ 1175.821117][T12663] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1175.840675][T12663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.864992][ T9735] usb 2-1: USB disconnect, device number 17 [ 1175.884501][T12663] usb 1-1: Product: syz [ 1175.888728][T12663] usb 1-1: Manufacturer: syz [ 1175.904258][ T9735] em28xx 2-1:0.89: Disconnecting em28xx [ 1175.933645][T12663] usb 1-1: SerialNumber: syz [ 1175.946071][T12663] usb 1-1: config 0 descriptor?? [ 1175.961725][ T41] em28xx 2-1:0.89: Registering V4L2 extension [ 1176.091136][ T41] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1176.098626][ T41] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1176.118293][ T41] em28xx 2-1:0.89: No AC97 audio processor [ 1176.140523][ T41] usb 2-1: Decoder not found [ 1176.153974][ T41] em28xx 2-1:0.89: failed to create media graph [ 1176.164839][ T41] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1176.238881][ T41] em28xx 2-1:0.89: Registering snapshot button... [ 1176.269176][ T41] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input39 [ 1176.354169][ T41] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1176.371507][ T9735] em28xx 2-1:0.89: Closing input extension [ 1176.378083][ T9735] em28xx 2-1:0.89: Deregistering snapshot button [ 1176.410991][ T9735] em28xx 2-1:0.89: Freeing device [ 1179.590246][ T7] usb 1-1: USB disconnect, device number 31 [ 1180.183549][ T7] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1180.969291][T12911] lo speed is unknown, defaulting to 1000 [ 1180.976904][T12911] lo speed is unknown, defaulting to 1000 [ 1181.033632][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 1181.040556][ T7] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1181.088224][T12933] random: crng reseeded on system resumption [ 1181.143288][ T7] usb 6-1: config 0 has no interface number 0 [ 1181.336773][ T7] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1181.426476][ T7] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1181.506689][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.658662][ T7] usb 6-1: Product: syz [ 1181.662890][ T7] usb 6-1: Manufacturer: syz [ 1181.689787][T12937] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1953'. [ 1181.709224][ T7] usb 6-1: SerialNumber: syz [ 1181.732755][ T7] usb 6-1: config 0 descriptor?? [ 1181.765712][ T7] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1181.791013][T12937] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1953'. [ 1181.813496][ T7] em28xx 6-1:0.89: Video interface 89 found: bulk [ 1182.367360][ T7] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1182.397541][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.403938][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.931923][T12944] lo speed is unknown, defaulting to 1000 [ 1182.938651][T12944] lo speed is unknown, defaulting to 1000 [ 1182.991915][T12944] atomic_op ffff888055adb198 conn xmit_atomic 0000000000000000 [ 1183.441862][ T7] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1183.492231][ T7] em28xx 6-1:0.89: board has no eeprom [ 1183.573630][ T7] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1183.588205][ T7] em28xx 6-1:0.89: analog set to bulk mode. [ 1183.640121][ T7] usb 6-1: USB disconnect, device number 17 [ 1183.656228][ T7] em28xx 6-1:0.89: Disconnecting em28xx [ 1183.672132][ T4311] em28xx 6-1:0.89: Registering V4L2 extension [ 1184.149994][ T4311] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1184.157337][ T5558] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1184.168770][ T4311] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1184.233221][ T4311] em28xx 6-1:0.89: No AC97 audio processor [ 1184.280796][ T4311] usb 6-1: Decoder not found [ 1184.374752][ T4311] em28xx 6-1:0.89: failed to create media graph [ 1184.390494][ T5558] usb 2-1: config 0 has no interfaces? [ 1184.421695][ T5558] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1184.434880][ T4311] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1184.477449][ T5558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.495185][ T4311] em28xx 6-1:0.89: Registering snapshot button... [ 1184.502207][ T5558] usb 2-1: Product: syz [ 1184.519248][ T4311] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input40 [ 1184.532182][ T5558] usb 2-1: Manufacturer: syz [ 1184.542579][ T5558] usb 2-1: SerialNumber: syz [ 1184.556397][ T4311] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1184.575378][ T5558] usb 2-1: config 0 descriptor?? [ 1184.623758][ T7] em28xx 6-1:0.89: Closing input extension [ 1184.629786][ T7] em28xx 6-1:0.89: Deregistering snapshot button [ 1184.702621][ T7] em28xx 6-1:0.89: Freeing device [ 1185.473728][T12981] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1964'. [ 1185.529271][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1964'. [ 1185.693487][ T5558] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1185.713827][ T4311] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1185.921844][ T4311] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.940999][ T5558] usb 9-1: config 0 has no interfaces? [ 1185.963562][ T5558] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1185.973820][ T4311] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1186.009592][ T5558] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.049612][ T4311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.092299][ T5558] usb 9-1: Product: syz [ 1186.141475][ T5558] usb 9-1: Manufacturer: syz [ 1186.150292][ T4311] usb 6-1: config 0 descriptor?? [ 1186.166065][ T5558] usb 9-1: SerialNumber: syz [ 1186.185052][ T4311] usb 6-1: bad CDC descriptors [ 1186.201087][ T5558] usb 9-1: config 0 descriptor?? [ 1186.714130][ T9735] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1186.983551][ T9735] usb 1-1: Using ep0 maxpacket: 32 [ 1187.029977][ T9735] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1187.054785][ T9735] usb 1-1: config 0 has no interface number 0 [ 1187.067183][ T9735] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1187.097907][ T9735] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1187.169370][ T9735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.229699][ T9735] usb 1-1: Product: syz [ 1187.248080][ T9735] usb 1-1: Manufacturer: syz [ 1187.252901][ T9735] usb 1-1: SerialNumber: syz [ 1187.271788][ T9735] usb 1-1: config 0 descriptor?? [ 1187.298860][ T9735] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1187.328857][ T9735] em28xx 1-1:0.89: Video interface 89 found: bulk [ 1187.462806][ T5558] usb 2-1: USB disconnect, device number 18 [ 1187.958407][ T9735] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1188.149636][T12999] random: crng reseeded on system resumption [ 1188.987511][ T9735] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1189.028542][ T9735] em28xx 1-1:0.89: board has no eeprom [ 1189.183508][ T9735] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1189.200682][ T9735] em28xx 1-1:0.89: analog set to bulk mode. [ 1189.255268][ T8750] em28xx 1-1:0.89: Registering V4L2 extension [ 1189.312283][ T9735] usb 1-1: USB disconnect, device number 32 [ 1189.324414][ T9735] em28xx 1-1:0.89: Disconnecting em28xx [ 1189.472902][ T8750] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1189.484858][ T8750] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1189.552038][ T8750] em28xx 1-1:0.89: No AC97 audio processor [ 1189.629028][ T8750] usb 1-1: Decoder not found [ 1189.653985][ T8750] em28xx 1-1:0.89: failed to create media graph [ 1189.669869][ T8750] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1189.676180][ T4311] usb 6-1: USB disconnect, device number 18 [ 1189.718065][ T8750] em28xx 1-1:0.89: Registering snapshot button... [ 1189.783801][ T8750] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input41 [ 1189.802426][T13012] device syzkaller0 entered promiscuous mode [ 1189.884174][ T8750] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1189.949527][ T9735] em28xx 1-1:0.89: Closing input extension [ 1189.956337][ T9735] em28xx 1-1:0.89: Deregistering snapshot button [ 1190.043696][ T9735] em28xx 1-1:0.89: Freeing device [ 1190.501438][T13020] lo speed is unknown, defaulting to 1000 [ 1190.508259][T13020] lo speed is unknown, defaulting to 1000 [ 1190.657686][T13021] atomic_op ffff888076f96198 conn xmit_atomic 0000000000000000 [ 1191.627924][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1976'. [ 1191.793525][ T4383] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1191.983748][ T4383] usb 6-1: Using ep0 maxpacket: 32 [ 1192.014960][ T4383] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1192.023327][T13035] tun0: tun_chr_ioctl cmd 2147767517 [ 1192.050658][ T4383] usb 6-1: config 0 has no interface number 0 [ 1192.070950][ T4383] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1192.110693][ T4383] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1192.127337][ T4383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.139979][ T4383] usb 6-1: Product: syz [ 1192.144623][ T4383] usb 6-1: Manufacturer: syz [ 1192.149687][ T4383] usb 6-1: SerialNumber: syz [ 1192.163739][ T4383] usb 6-1: config 0 descriptor?? [ 1192.175626][T12663] usb 9-1: USB disconnect, device number 7 [ 1192.201629][ T4383] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1192.295182][ T4383] em28xx 6-1:0.89: Video interface 89 found: bulk [ 1192.323705][ T5558] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1192.361094][T13032] lo speed is unknown, defaulting to 1000 [ 1192.416889][T13032] lo speed is unknown, defaulting to 1000 [ 1192.513564][ T5558] usb 2-1: Using ep0 maxpacket: 32 [ 1192.531117][ T5558] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1192.589725][ T5558] usb 2-1: config 0 has no interface number 0 [ 1192.660832][ T5558] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1192.804787][ T5558] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1192.814902][ T4383] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1192.823714][ T5558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.832345][ T5558] usb 2-1: Product: syz [ 1192.836731][ T5558] usb 2-1: Manufacturer: syz [ 1192.841412][ T5558] usb 2-1: SerialNumber: syz [ 1192.848338][ T5558] usb 2-1: config 0 descriptor?? [ 1193.801373][ T5558] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1193.811325][ T5558] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1194.448178][ T5558] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1194.492114][ T4383] em28xx 6-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1194.572851][ T4383] em28xx 6-1:0.89: board has no eeprom [ 1194.643494][ T4383] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1194.678203][ T4383] em28xx 6-1:0.89: analog set to bulk mode. [ 1194.772326][ T4383] usb 6-1: USB disconnect, device number 19 [ 1194.779038][ T4383] em28xx 6-1:0.89: Disconnecting em28xx [ 1194.857194][ T41] em28xx 6-1:0.89: Registering V4L2 extension [ 1194.875528][ T5558] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1194.906969][ T5558] em28xx 2-1:0.89: board has no eeprom [ 1195.073927][T13059] random: crng reseeded on system resumption [ 1195.220373][ T5558] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1195.253711][ T5558] em28xx 2-1:0.89: analog set to bulk mode. [ 1195.322738][ T41] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1195.342878][ T41] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1195.362051][ T41] em28xx 6-1:0.89: No AC97 audio processor [ 1195.375374][ T5558] usb 2-1: USB disconnect, device number 19 [ 1195.414696][ T5558] em28xx 2-1:0.89: Disconnecting em28xx [ 1195.431295][ T41] usb 6-1: Decoder not found [ 1195.588698][ T41] em28xx 6-1:0.89: failed to create media graph [ 1195.613753][ T41] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1195.695255][T13069] lo speed is unknown, defaulting to 1000 [ 1195.702048][T13069] lo speed is unknown, defaulting to 1000 [ 1195.760705][T13069] atomic_op ffff888072520998 conn xmit_atomic 0000000000000000 [ 1196.418147][ T41] em28xx 6-1:0.89: Registering snapshot button... [ 1196.479608][ T41] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input42 [ 1196.530667][ T41] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1196.603286][ T14] em28xx 2-1:0.89: Registering V4L2 extension [ 1196.883728][ T14] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1196.902574][ T14] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1196.979538][ T14] em28xx 2-1:0.89: No AC97 audio processor [ 1197.034216][ T14] usb 2-1: Decoder not found [ 1197.038909][ T14] em28xx 2-1:0.89: failed to create media graph [ 1197.045721][ T14] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1197.055025][ T14] em28xx 2-1:0.89: Registering snapshot button... [ 1197.072757][ T14] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input43 [ 1197.106135][ T14] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1197.118917][ T4383] em28xx 6-1:0.89: Closing input extension [ 1197.132828][ T4383] em28xx 6-1:0.89: Deregistering snapshot button [ 1197.171736][ T5558] em28xx 2-1:0.89: Closing input extension [ 1197.180558][ T5558] em28xx 2-1:0.89: Deregistering snapshot button [ 1197.187892][ T4383] em28xx 6-1:0.89: Freeing device [ 1197.282814][ T5558] em28xx 2-1:0.89: Freeing device [ 1198.113623][ T5558] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1198.529187][ T5558] usb 2-1: config 0 has no interfaces? [ 1198.538975][ T5558] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1198.548763][ T5558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.549809][ T5558] usb 2-1: Product: syz [ 1199.572697][ T5558] usb 2-1: Manufacturer: syz [ 1199.596085][ T5558] usb 2-1: SerialNumber: syz [ 1199.635973][ T5558] usb 2-1: config 0 descriptor?? [ 1199.764530][T13104] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1994'. [ 1201.613587][T13104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1994'. [ 1203.162954][ T5558] usb 2-1: can't set config #0, error -71 [ 1203.183893][ T5558] usb 2-1: USB disconnect, device number 20 [ 1203.213674][ T7] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1203.413504][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 1203.522027][ T7] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1203.560936][ T7] usb 6-1: config 0 has no interface number 0 [ 1203.568742][ T7] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1203.620415][T13130] lo speed is unknown, defaulting to 1000 [ 1203.627228][T13130] lo speed is unknown, defaulting to 1000 [ 1203.725615][T13130] atomic_op ffff88802486f198 conn xmit_atomic 0000000000000000 [ 1204.381150][ T7] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1204.396699][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.405968][ T7] usb 6-1: Product: syz [ 1204.413662][ T7] usb 6-1: Manufacturer: syz [ 1204.418431][ T7] usb 6-1: SerialNumber: syz [ 1204.465127][ T7] usb 6-1: config 0 descriptor?? [ 1207.281379][ T4899] usb 6-1: USB disconnect, device number 20 [ 1207.427126][T13157] random: crng reseeded on system resumption [ 1207.539286][T13164] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2009'. [ 1208.014562][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2009'. [ 1208.721661][T13179] lo speed is unknown, defaulting to 1000 [ 1208.728356][T13179] lo speed is unknown, defaulting to 1000 [ 1208.975606][T13175] lo speed is unknown, defaulting to 1000 [ 1209.073602][T13175] lo speed is unknown, defaulting to 1000 [ 1213.473524][ T7] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1213.673707][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 1213.684512][ T7] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1213.697146][T13218] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2023'. [ 1213.741748][ T7] usb 2-1: config 0 has no interface number 0 [ 1213.769003][T13218] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2023'. [ 1213.786308][ T7] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1213.799449][ T7] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1213.809024][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.817346][ T7] usb 2-1: Product: syz [ 1213.828095][ T7] usb 2-1: Manufacturer: syz [ 1213.836210][ T7] usb 2-1: SerialNumber: syz [ 1213.859542][ T7] usb 2-1: config 0 descriptor?? [ 1215.026461][T13237] random: crng reseeded on system resumption [ 1216.138796][ T14] usb 2-1: USB disconnect, device number 21 [ 1221.526745][ T41] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1221.723719][T13289] input: syz0 as /devices/virtual/input/input44 [ 1221.826145][ T41] usb 8-1: config 0 has no interfaces? [ 1221.835588][ T41] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1221.889095][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.902096][ T41] usb 8-1: Product: syz [ 1221.913287][ T41] usb 8-1: Manufacturer: syz [ 1221.954872][ T41] usb 8-1: SerialNumber: syz [ 1221.996528][ T41] usb 8-1: config 0 descriptor?? [ 1225.270657][T13317] mkiss: ax0: crc mode is auto. [ 1225.886385][ T9735] usb 8-1: USB disconnect, device number 13 [ 1226.494836][T13330] random: crng reseeded on system resumption [ 1228.281336][T13347] lo speed is unknown, defaulting to 1000 [ 1228.288196][T13347] lo speed is unknown, defaulting to 1000 [ 1228.389506][T13347] atomic_op ffff88801bab8198 conn xmit_atomic 0000000000000000 [ 1229.637238][T13349] lo speed is unknown, defaulting to 1000 [ 1229.673357][T13349] lo speed is unknown, defaulting to 1000 [ 1230.628470][T13367] 9pnet_virtio: no channels available for device syz [ 1231.749084][T13374] loop4: detected capacity change from 0 to 7 [ 1231.761243][T10657] Dev loop4: unable to read RDB block 7 [ 1231.769768][T10657] loop4: unable to read partition table [ 1231.792565][T10657] loop4: partition table beyond EOD, truncated [ 1231.811870][T13374] Dev loop4: unable to read RDB block 7 [ 1231.859444][T13374] loop4: unable to read partition table [ 1231.870345][T13374] loop4: partition table beyond EOD, truncated [ 1231.888387][T13374] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1232.384828][ T8750] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1232.468879][T13384] lo speed is unknown, defaulting to 1000 [ 1232.475555][T13384] lo speed is unknown, defaulting to 1000 [ 1232.648534][ T8750] usb 9-1: config 0 has no interfaces? [ 1232.957089][ T8750] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1233.019486][ T8750] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.105069][ T8750] usb 9-1: Product: syz [ 1233.109301][ T8750] usb 9-1: Manufacturer: syz [ 1233.114046][ T8750] usb 9-1: SerialNumber: syz [ 1233.145240][ T8750] usb 9-1: config 0 descriptor?? [ 1235.518118][T13397] random: crng reseeded on system resumption [ 1236.256232][T13403] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2059'. [ 1236.328379][T13403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2059'. [ 1237.531951][ T14] usb 9-1: USB disconnect, device number 8 [ 1237.683514][ T8750] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1237.884877][ T8750] usb 6-1: config 0 has no interfaces? [ 1237.901067][ T8750] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1237.941041][ T8750] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.995799][ T8750] usb 6-1: Product: syz [ 1238.010366][ T8750] usb 6-1: Manufacturer: syz [ 1238.023780][ T8750] usb 6-1: SerialNumber: syz [ 1238.064731][ T8750] usb 6-1: config 0 descriptor?? [ 1240.450551][ T5394] usb 6-1: USB disconnect, device number 21 [ 1240.830312][T13438] lo speed is unknown, defaulting to 1000 [ 1240.836835][T13438] lo speed is unknown, defaulting to 1000 [ 1240.889004][T13435] input: syz0 as /devices/virtual/input/input46 [ 1241.403497][ T4379] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1241.897546][ T4379] usb 2-1: config 0 has no interfaces? [ 1241.921568][ T4379] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1241.951533][ T4379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.056587][T13451] 9pnet_virtio: no channels available for device syz [ 1242.065494][T13452] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2071'. [ 1242.166752][ T4379] usb 2-1: Product: syz [ 1242.170959][ T4379] usb 2-1: Manufacturer: syz [ 1242.344620][ T4379] usb 2-1: SerialNumber: syz [ 1242.384288][T13452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2071'. [ 1242.441137][ T4379] usb 2-1: config 0 descriptor?? [ 1243.853103][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.859619][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.060262][T13465] random: crng reseeded on system resumption [ 1246.010343][ T5394] usb 2-1: USB disconnect, device number 22 [ 1246.163515][ T4379] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1246.363557][ T4379] usb 8-1: Using ep0 maxpacket: 32 [ 1247.156806][ T4379] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1247.288339][ T4379] usb 8-1: config 0 has no interface number 0 [ 1247.295715][ T4379] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1247.324732][ T4379] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1247.343673][ T4379] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.375039][T13491] mkiss: ax0: crc mode is auto. [ 1247.390857][ T4379] usb 8-1: Product: syz [ 1247.410537][ T4379] usb 8-1: Manufacturer: syz [ 1247.415570][ T4379] usb 8-1: SerialNumber: syz [ 1247.428928][ T5394] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1247.437523][ T4379] usb 8-1: config 0 descriptor?? [ 1247.459110][ T4379] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1247.500408][ T4379] em28xx 8-1:0.89: Video interface 89 found: bulk [ 1247.757857][T13499] lo speed is unknown, defaulting to 1000 [ 1247.764629][T13499] lo speed is unknown, defaulting to 1000 [ 1247.913545][ T5394] usb 9-1: Using ep0 maxpacket: 32 [ 1247.926513][ T5394] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 1248.559441][ T5394] usb 9-1: config 0 has no interface number 0 [ 1248.571333][ T5394] usb 9-1: config 0 interface 89 has no altsetting 0 [ 1248.611143][ T4379] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 1248.612665][ T5394] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1248.637801][ T5394] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.788456][ T5394] usb 9-1: Product: syz [ 1248.793584][ T5394] usb 9-1: Manufacturer: syz [ 1248.798232][ T5394] usb 9-1: SerialNumber: syz [ 1248.810422][ T5394] usb 9-1: config 0 descriptor?? [ 1248.926753][T13505] lo speed is unknown, defaulting to 1000 [ 1248.934018][T13505] lo speed is unknown, defaulting to 1000 [ 1249.084113][T13505] atomic_op ffff888054931998 conn xmit_atomic 0000000000000000 [ 1250.335924][ T4379] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1250.627592][ T4379] em28xx 8-1:0.89: board has no eeprom [ 1250.762271][ T14] usb 9-1: USB disconnect, device number 9 [ 1250.943573][ T7] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1250.983781][ T4379] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 1251.001996][ T4379] em28xx 8-1:0.89: analog set to bulk mode. [ 1251.030000][ T4341] em28xx 8-1:0.89: Registering V4L2 extension [ 1251.063241][ T4379] usb 8-1: USB disconnect, device number 14 [ 1251.101767][ T4379] em28xx 8-1:0.89: Disconnecting em28xx [ 1251.117406][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2088'. [ 1251.163691][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 1251.172792][ T7] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1251.212090][ T7] usb 2-1: config 0 has no interface number 0 [ 1251.260115][ T7] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1251.304475][ T7] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1251.365718][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.252432][ T7] usb 2-1: Product: syz [ 1252.323770][ T7] usb 2-1: Manufacturer: syz [ 1252.328436][ T7] usb 2-1: SerialNumber: syz [ 1252.347628][ T4341] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 1252.363119][ T4341] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 1252.427092][ T7] usb 2-1: config 0 descriptor?? [ 1252.442923][ T4341] em28xx 8-1:0.89: No AC97 audio processor [ 1252.465913][ T7] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1252.484120][ T4341] usb 8-1: Decoder not found [ 1252.489278][ T4341] em28xx 8-1:0.89: failed to create media graph [ 1252.508837][ T7] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1252.525716][ T4341] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 1252.581068][ T4341] em28xx 8-1:0.89: Registering snapshot button... [ 1252.619105][ T4341] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input47 [ 1252.691166][ T4341] em28xx 8-1:0.89: Remote control support is not available for this card. [ 1252.703573][ T5394] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1252.748003][ T4379] em28xx 8-1:0.89: Closing input extension [ 1252.754861][ T4379] em28xx 8-1:0.89: Deregistering snapshot button [ 1252.788620][ T4379] em28xx 8-1:0.89: Freeing device [ 1252.859005][T13546] loop4: detected capacity change from 0 to 7 [ 1252.907534][T10659] Dev loop4: unable to read RDB block 7 [ 1252.913599][ T5394] usb 1-1: Using ep0 maxpacket: 16 [ 1252.920421][ T5394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.940233][T10659] loop4: unable to read partition table [ 1252.976342][ T5394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.997922][T10659] loop4: partition table beyond EOD, truncated [ 1253.009227][T13541] lo speed is unknown, defaulting to 1000 [ 1253.042103][T13541] lo speed is unknown, defaulting to 1000 [ 1253.071134][ T5394] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1253.078254][ T7] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1253.119615][ T5394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.193750][ T5394] usb 1-1: config 0 descriptor?? [ 1253.213895][T13546] Dev loop4: unable to read RDB block 7 [ 1253.240745][T13546] loop4: unable to read partition table [ 1253.273869][T13546] loop4: partition table beyond EOD, truncated [ 1253.321548][T13546] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1253.933527][ T5394] usb 1-1: language id specifier not provided by device, defaulting to English [ 1254.128808][T13558] atomic_op ffff88805315c998 conn xmit_atomic 0000000000000000 [ 1254.674665][ T5394] letsketch 0003:6161:4D15.0005: Device info: ఁ [ 1254.704402][T13557] lo speed is unknown, defaulting to 1000 [ 1254.710902][T13557] lo speed is unknown, defaulting to 1000 [ 1254.840624][ T7] em28xx 2-1:0.89: AC97 command still being executed: not handled properly! [ 1254.884741][ T7] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1254.892894][ T7] em28xx 2-1:0.89: board has no eeprom [ 1254.909953][ T5394] usb 1-1: Max retries (5) exceeded reading string descriptor 201 [ 1254.937238][ T5394] letsketch: probe of 0003:6161:4D15.0005 failed with error -71 [ 1254.976956][ T5394] usb 1-1: USB disconnect, device number 33 [ 1255.023598][ T7] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1255.043521][ T7] em28xx 2-1:0.89: analog set to bulk mode. [ 1255.050090][ T4341] em28xx 2-1:0.89: Registering V4L2 extension [ 1255.128380][ T7] usb 2-1: USB disconnect, device number 23 [ 1255.173985][ T7] em28xx 2-1:0.89: Disconnecting em28xx [ 1255.481531][ T4341] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1255.489165][ T14] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1255.541906][ T4341] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1255.590546][ T4341] em28xx 2-1:0.89: No AC97 audio processor [ 1255.607633][ T4341] usb 2-1: Decoder not found [ 1255.623549][ T9735] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1255.633699][ T4341] em28xx 2-1:0.89: failed to create media graph [ 1256.461557][ T4341] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1256.473353][ T4341] em28xx 2-1:0.89: Registering snapshot button... [ 1256.481504][ T14] usb 8-1: config 0 has no interfaces? [ 1256.487385][ T4341] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input48 [ 1256.499557][ T4341] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1256.504418][ T9735] usb 6-1: Using ep0 maxpacket: 32 [ 1256.518546][ T7] em28xx 2-1:0.89: Closing input extension [ 1256.525229][ T7] em28xx 2-1:0.89: Deregistering snapshot button [ 1256.574431][ T14] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1256.583848][ T9735] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1256.602211][ T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.610453][ T14] usb 8-1: Product: syz [ 1256.614721][ T14] usb 8-1: Manufacturer: syz [ 1256.619352][ T14] usb 8-1: SerialNumber: syz [ 1256.626603][ T14] usb 8-1: config 0 descriptor?? [ 1256.712843][ T9735] usb 6-1: config 0 has no interface number 0 [ 1256.729435][ T9735] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1256.767143][ T7] em28xx 2-1:0.89: Freeing device [ 1256.776269][ T9735] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1256.870816][ T9735] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.924892][ T9735] usb 6-1: Product: syz [ 1256.948284][ T9735] usb 6-1: Manufacturer: syz [ 1256.981876][ T9735] usb 6-1: SerialNumber: syz [ 1257.020907][ T9735] usb 6-1: config 0 descriptor?? [ 1258.003508][ T14] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1258.223475][ T14] usb 9-1: Using ep0 maxpacket: 32 [ 1258.231638][ T14] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 1258.271767][ T14] usb 9-1: config 0 has no interface number 0 [ 1258.332602][ T14] usb 9-1: config 0 interface 89 has no altsetting 0 [ 1258.450813][ T14] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1258.531705][ T14] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.562478][ T14] usb 9-1: Product: syz [ 1258.572252][ T14] usb 9-1: Manufacturer: syz [ 1258.600757][ T14] usb 9-1: SerialNumber: syz [ 1258.621224][ T7] usb 6-1: USB disconnect, device number 22 [ 1258.633029][ T14] usb 9-1: config 0 descriptor?? [ 1259.484442][ T14] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1259.494164][ T14] em28xx 9-1:0.89: Video interface 89 found: bulk [ 1260.093810][ T14] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 1260.505331][ T14] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1260.565105][ T14] em28xx 9-1:0.89: board has no eeprom [ 1260.812346][ T7] usb 8-1: USB disconnect, device number 15 [ 1260.843505][ T14] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 1260.876481][ T14] em28xx 9-1:0.89: analog set to bulk mode. [ 1260.942626][T10565] em28xx 9-1:0.89: Registering V4L2 extension [ 1262.652819][ T14] usb 9-1: USB disconnect, device number 10 [ 1263.407502][ T14] em28xx 9-1:0.89: Disconnecting em28xx [ 1263.763214][T10565] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 1263.791198][T10565] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 1263.809246][T10565] em28xx 9-1:0.89: No AC97 audio processor [ 1263.876459][T13617] lo speed is unknown, defaulting to 1000 [ 1263.883230][T13617] lo speed is unknown, defaulting to 1000 [ 1263.998945][T13618] atomic_op ffff88802eb34198 conn xmit_atomic 0000000000000000 [ 1264.627398][T10565] usb 9-1: Decoder not found [ 1264.632430][T10565] em28xx 9-1:0.89: failed to create media graph [ 1264.644980][T10565] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 1264.667818][T10565] em28xx 9-1:0.89: Registering snapshot button... [ 1264.686027][T10565] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input49 [ 1264.774086][T10565] em28xx 9-1:0.89: Remote control support is not available for this card. [ 1264.792984][ T14] em28xx 9-1:0.89: Closing input extension [ 1264.825311][ T14] em28xx 9-1:0.89: Deregistering snapshot button [ 1264.966328][ T14] em28xx 9-1:0.89: Freeing device [ 1266.415087][T13632] lo speed is unknown, defaulting to 1000 [ 1266.421499][T13632] lo speed is unknown, defaulting to 1000 [ 1268.673486][ T14] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1268.898601][ T14] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1268.923055][ T14] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1268.993343][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.003554][ T14] usb 2-1: Product: syz [ 1269.007758][ T14] usb 2-1: Manufacturer: syz [ 1269.012349][ T14] usb 2-1: SerialNumber: syz [ 1269.122131][T13653] 9pnet_virtio: no channels available for device syz [ 1269.690383][ T14] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1269.883641][ T4383] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1270.102474][ T4383] usb 1-1: config 0 has no interfaces? [ 1270.232100][ T4383] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1270.252279][ T4383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.318044][ T4383] usb 1-1: Product: syz [ 1270.348631][ T4383] usb 1-1: Manufacturer: syz [ 1270.391998][ T4383] usb 1-1: SerialNumber: syz [ 1270.430702][ T4383] usb 1-1: config 0 descriptor?? [ 1273.064300][ T4899] usb 2-1: USB disconnect, device number 24 [ 1273.144786][ T4899] usblp0: removed [ 1274.680671][T13679] lo speed is unknown, defaulting to 1000 [ 1274.687601][T13679] lo speed is unknown, defaulting to 1000 [ 1275.457223][ T14] usb 1-1: USB disconnect, device number 34 [ 1275.792682][T13682] mkiss: ax0: crc mode is auto. [ 1277.033489][ T14] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1277.275999][ T14] usb 8-1: config 0 has no interfaces? [ 1277.460557][ T14] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1277.510094][ T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.733535][ T14] usb 8-1: Product: syz [ 1277.765409][ T14] usb 8-1: Manufacturer: syz [ 1280.126854][T13721] 9pnet_virtio: no channels available for device syz [ 1280.243623][ T14] usb 8-1: SerialNumber: syz [ 1280.255740][ T14] usb 8-1: config 0 descriptor?? [ 1283.709813][ T4899] usb 8-1: USB disconnect, device number 16 [ 1283.764586][T13739] lo speed is unknown, defaulting to 1000 [ 1283.771122][T13739] lo speed is unknown, defaulting to 1000 [ 1283.920850][T13730] lo speed is unknown, defaulting to 1000 [ 1283.959138][T13730] lo speed is unknown, defaulting to 1000 [ 1286.832814][T13751] tipc: Enabling of bearer rejected, failed to enable media [ 1287.023451][T12663] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1287.215041][T13761] mkiss: ax0: crc mode is auto. [ 1287.220081][T12663] usb 1-1: Using ep0 maxpacket: 32 [ 1287.242330][T12663] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1287.276496][T12663] usb 1-1: config 0 has no interface number 0 [ 1287.309516][T12663] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1287.365873][T12663] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1287.410504][T12663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.431327][T12663] usb 1-1: Product: syz [ 1287.455346][T12663] usb 1-1: Manufacturer: syz [ 1287.470059][T12663] usb 1-1: SerialNumber: syz [ 1287.493886][T12663] usb 1-1: config 0 descriptor?? [ 1287.529305][T12663] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1287.583698][T12663] em28xx 1-1:0.89: Video interface 89 found: bulk [ 1288.100222][T13775] input: syz0 as /devices/virtual/input/input50 [ 1288.129867][T12663] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1288.549327][T12663] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1288.576901][T12663] em28xx 1-1:0.89: board has no eeprom [ 1288.943437][T12663] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1288.951132][T12663] em28xx 1-1:0.89: analog set to bulk mode. [ 1288.960546][T12663] usb 1-1: USB disconnect, device number 35 [ 1288.967373][T12663] em28xx 1-1:0.89: Disconnecting em28xx [ 1288.973055][ T9735] em28xx 1-1:0.89: Registering V4L2 extension [ 1289.077152][T13787] lo speed is unknown, defaulting to 1000 [ 1289.083990][T13787] lo speed is unknown, defaulting to 1000 [ 1290.534912][T13795] random: crng reseeded on system resumption [ 1290.652870][ T9735] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1290.697418][ T9735] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1290.745041][ T9735] em28xx 1-1:0.89: No AC97 audio processor [ 1290.830530][ T9735] usb 1-1: Decoder not found [ 1290.835721][ T9735] em28xx 1-1:0.89: failed to create media graph [ 1290.858864][ T9735] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1290.919624][ T9735] em28xx 1-1:0.89: Registering snapshot button... [ 1290.968472][ T9735] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input51 [ 1291.051908][ T9735] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1291.084635][T12663] em28xx 1-1:0.89: Closing input extension [ 1291.090500][T12663] em28xx 1-1:0.89: Deregistering snapshot button [ 1291.451570][T12663] em28xx 1-1:0.89: Freeing device [ 1291.544653][T13799] 9pnet_virtio: no channels available for device syz [ 1294.898221][T13810] tipc: Enabling of bearer rejected, failed to enable media [ 1295.513521][ T14] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1295.733643][ T14] usb 9-1: Using ep0 maxpacket: 32 [ 1296.465273][ T14] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 1296.684161][ T14] usb 9-1: config 0 has no interface number 0 [ 1296.778237][T13839] lo speed is unknown, defaulting to 1000 [ 1296.785069][T13839] lo speed is unknown, defaulting to 1000 [ 1297.252742][ T14] usb 9-1: config 0 interface 89 has no altsetting 0 [ 1297.277037][ T14] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1297.315182][ T14] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.443514][T10565] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1298.897769][ T14] usb 9-1: Product: syz [ 1298.902007][ T14] usb 9-1: Manufacturer: syz [ 1299.489126][ T14] usb 9-1: SerialNumber: syz [ 1299.508376][ T14] usb 9-1: config 0 descriptor?? [ 1299.582610][ T14] usb 9-1: can't set config #0, error -71 [ 1299.604586][ T14] usb 9-1: USB disconnect, device number 11 [ 1299.823558][ T9735] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1300.155200][T13859] lo speed is unknown, defaulting to 1000 [ 1300.162293][T13859] lo speed is unknown, defaulting to 1000 [ 1300.276824][T13859] atomic_op ffff888056418198 conn xmit_atomic 0000000000000000 [ 1300.305632][ T9735] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1300.894133][ T9735] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.960045][ T9735] usb 6-1: config 0 descriptor?? [ 1301.168205][ T9735] cp210x 6-1:0.0: cp210x converter detected [ 1301.407997][T13865] random: crng reseeded on system resumption [ 1301.415572][ T9735] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1301.435703][ T9735] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 1301.451716][ T9735] cp210x 6-1:0.0: GPIO initialisation failed: -32 [ 1301.538617][ T9735] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1301.606684][ T9735] usb 6-1: USB disconnect, device number 23 [ 1301.653032][ T9735] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1301.723578][ T9735] cp210x 6-1:0.0: device disconnected [ 1303.356757][T13885] 9pnet_virtio: no channels available for device syz [ 1303.513653][ T4899] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1303.653226][T13888] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2171'. [ 1303.663562][T10565] usb 1-1: device descriptor read/64, error -71 [ 1303.723485][ T4899] usb 6-1: Using ep0 maxpacket: 16 [ 1303.732561][ T4899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.764710][ T4899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.775674][ T4899] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1303.781662][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2171'. [ 1303.786056][ T4899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.817767][ T4899] usb 6-1: config 0 descriptor?? [ 1303.953516][T10565] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1304.216017][T10565] usb 1-1: config 0 has no interfaces? [ 1304.237615][ T4899] usbhid 6-1:0.0: can't add hid device: -71 [ 1304.244992][ T4899] usbhid: probe of 6-1:0.0 failed with error -71 [ 1304.287966][ T4899] usb 6-1: USB disconnect, device number 24 [ 1304.299341][T10565] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1304.368359][T10565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.610361][T10565] usb 1-1: Product: syz [ 1304.629179][T10565] usb 1-1: Manufacturer: syz [ 1304.639364][T10565] usb 1-1: SerialNumber: syz [ 1304.655833][T10565] usb 1-1: config 0 descriptor?? [ 1305.624320][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.630652][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.773696][ T41] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1306.048054][ T41] usb 2-1: config 0 has no interfaces? [ 1306.076066][ T41] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1306.093515][ T4899] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1306.122501][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.423483][ T4899] usb 6-1: Using ep0 maxpacket: 32 [ 1307.747176][ T4899] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1307.766319][ T41] usb 2-1: Product: syz [ 1307.799485][ T41] usb 2-1: Manufacturer: syz [ 1307.826224][ T4899] usb 6-1: config 0 has no interface number 0 [ 1307.871742][ T41] usb 2-1: SerialNumber: syz [ 1307.965046][ T4899] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1308.104145][ T41] usb 2-1: config 0 descriptor?? [ 1308.168931][ T4899] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1308.301686][ T4899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.373510][ T4899] usb 6-1: Product: syz [ 1308.377736][ T4899] usb 6-1: Manufacturer: syz [ 1308.382357][ T4899] usb 6-1: SerialNumber: syz [ 1308.488922][ T4899] usb 6-1: config 0 descriptor?? [ 1308.574899][ T4899] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1308.633474][ T4899] em28xx 6-1:0.89: Video interface 89 found: bulk [ 1309.158504][ T4899] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1309.241271][T12663] usb 1-1: USB disconnect, device number 37 [ 1309.471962][ T41] usb 2-1: can't set config #0, error -71 [ 1309.513871][ T41] usb 2-1: USB disconnect, device number 25 [ 1309.532459][T13908] input: syz0 as /devices/virtual/input/input52 [ 1309.644716][ T4899] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1309.782532][ T4899] em28xx 6-1:0.89: board has no eeprom [ 1311.713556][ T4899] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1311.733452][ T4899] em28xx 6-1:0.89: analog set to bulk mode. [ 1311.754006][T12663] em28xx 6-1:0.89: Registering V4L2 extension [ 1311.816785][ T4899] usb 6-1: USB disconnect, device number 25 [ 1311.861280][ T4899] em28xx 6-1:0.89: Disconnecting em28xx [ 1312.131176][T12663] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1312.142094][T12663] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1312.170742][T12663] em28xx 6-1:0.89: No AC97 audio processor [ 1312.216968][T12663] usb 6-1: Decoder not found [ 1312.246281][T12663] em28xx 6-1:0.89: failed to create media graph [ 1312.333243][T12663] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1312.400222][T13940] mkiss: ax0: crc mode is auto. [ 1312.461565][T12663] em28xx 6-1:0.89: Registering snapshot button... [ 1312.509540][T12663] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input53 [ 1312.605350][T12663] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1312.648462][ T4899] em28xx 6-1:0.89: Closing input extension [ 1312.657027][ T4899] em28xx 6-1:0.89: Deregistering snapshot button [ 1312.659737][T13945] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2183'. [ 1312.698709][ T4899] em28xx 6-1:0.89: Freeing device [ 1312.760491][T13935] lo speed is unknown, defaulting to 1000 [ 1312.769017][T13944] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2183'. [ 1312.962427][T13935] lo speed is unknown, defaulting to 1000 [ 1313.053567][ T4899] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1313.675070][ T4899] usb 6-1: config 0 has no interfaces? [ 1313.746786][ T4899] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1313.907326][ T4899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.922034][T13958] 9pnet_virtio: no channels available for device syz [ 1313.928942][ T4899] usb 6-1: Product: syz [ 1313.933269][ T4899] usb 6-1: Manufacturer: syz [ 1313.938722][ T4899] usb 6-1: SerialNumber: syz [ 1313.956225][ T4899] usb 6-1: config 0 descriptor?? [ 1314.157481][T13951] lo speed is unknown, defaulting to 1000 [ 1314.164703][T13951] lo speed is unknown, defaulting to 1000 [ 1317.297631][ T4341] usb 6-1: USB disconnect, device number 26 [ 1318.283456][ T4341] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1319.623432][ T4341] usb 6-1: Using ep0 maxpacket: 32 [ 1319.630500][ T4341] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1319.659475][ T4341] usb 6-1: config 0 has no interface number 0 [ 1319.673648][ T4341] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1319.710646][ T4341] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1319.734836][ T4341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.752127][ T4341] usb 6-1: Product: syz [ 1319.760159][ T4341] usb 6-1: Manufacturer: syz [ 1319.767007][ T4341] usb 6-1: SerialNumber: syz [ 1319.774967][ T4341] usb 6-1: config 0 descriptor?? [ 1319.801615][ T4341] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1319.811467][ T4341] em28xx 6-1:0.89: Video interface 89 found: bulk [ 1320.409159][ T4341] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1321.996012][ T4341] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1322.023427][ T4341] em28xx 6-1:0.89: board has no eeprom [ 1322.103474][ T4341] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1322.121967][ T4341] em28xx 6-1:0.89: analog set to bulk mode. [ 1322.196729][ T4341] usb 6-1: USB disconnect, device number 27 [ 1322.223765][ T4341] em28xx 6-1:0.89: Disconnecting em28xx [ 1322.229832][ T7] em28xx 6-1:0.89: Registering V4L2 extension [ 1322.409458][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2194'. [ 1322.568423][ T7] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1322.583515][ T7] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1322.591963][ T7] em28xx 6-1:0.89: No AC97 audio processor [ 1322.601088][ T7] usb 6-1: Decoder not found [ 1322.606228][ T7] em28xx 6-1:0.89: failed to create media graph [ 1322.612979][ T7] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1322.625706][ T7] em28xx 6-1:0.89: Registering snapshot button... [ 1322.650931][ T7] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input54 [ 1322.693237][ T7] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1322.739539][ T4341] em28xx 6-1:0.89: Closing input extension [ 1322.745876][ T4341] em28xx 6-1:0.89: Deregistering snapshot button [ 1322.789653][ T4341] em28xx 6-1:0.89: Freeing device [ 1323.231951][T14005] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2194'. [ 1323.300569][T14009] mkiss: ax0: crc mode is auto. [ 1323.763575][ T7] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1323.974250][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 1323.986108][ T7] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1324.008061][ T7] usb 2-1: config 0 has no interface number 0 [ 1324.022461][ T7] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1324.070109][ T7] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1324.116957][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.167678][ T7] usb 2-1: Product: syz [ 1324.193297][ T7] usb 2-1: Manufacturer: syz [ 1324.207822][ T7] usb 2-1: SerialNumber: syz [ 1324.234394][ T7] usb 2-1: config 0 descriptor?? [ 1324.269719][ T7] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1324.291758][ T7] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1324.867231][ T7] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1325.290067][ T7] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1325.324322][ T7] em28xx 2-1:0.89: board has no eeprom [ 1325.703442][ T7] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1325.758544][T14034] lo speed is unknown, defaulting to 1000 [ 1325.765353][T14034] lo speed is unknown, defaulting to 1000 [ 1325.917698][T14035] atomic_op ffff888027a69998 conn xmit_atomic 0000000000000000 [ 1326.489078][ T7] em28xx 2-1:0.89: analog set to bulk mode. [ 1326.496969][ T14] em28xx 2-1:0.89: Registering V4L2 extension [ 1326.738829][ T7] usb 2-1: USB disconnect, device number 26 [ 1328.644881][ T7] em28xx 2-1:0.89: Disconnecting em28xx [ 1328.808536][ T14] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1328.823605][ T14] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1328.830792][ T14] em28xx 2-1:0.89: No AC97 audio processor [ 1328.910396][ T14] usb 2-1: Decoder not found [ 1328.946813][ T14] em28xx 2-1:0.89: failed to create media graph [ 1328.988632][ T14] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1328.998173][T14044] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2204'. [ 1329.022999][ T14] em28xx 2-1:0.89: Registering snapshot button... [ 1329.095390][ T14] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input55 [ 1329.145498][ T14] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1329.213533][ T7] em28xx 2-1:0.89: Closing input extension [ 1329.219532][ T7] em28xx 2-1:0.89: Deregistering snapshot button [ 1329.278818][ T7] em28xx 2-1:0.89: Freeing device [ 1331.573455][ T7] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1331.765251][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.812515][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1331.875094][ T7] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1332.101044][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.223517][ T7] usb 2-1: Product: syz [ 1332.227780][ T7] usb 2-1: Manufacturer: syz [ 1332.232400][ T7] usb 2-1: SerialNumber: syz [ 1332.239857][ T7] usb 2-1: config 0 descriptor?? [ 1332.359169][ T7] usb 2-1: can't set config #0, error -71 [ 1332.374219][ T7] usb 2-1: USB disconnect, device number 27 [ 1333.133505][ T4334] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1333.335627][ T4334] usb 8-1: config 0 has no interfaces? [ 1333.392562][ T4334] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1333.420506][ T4334] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.600890][ T4334] usb 8-1: Product: syz [ 1333.636763][ T4334] usb 8-1: Manufacturer: syz [ 1333.709073][T14074] lo speed is unknown, defaulting to 1000 [ 1333.715847][T14074] lo speed is unknown, defaulting to 1000 [ 1333.784064][T14074] atomic_op ffff888048cb9998 conn xmit_atomic 0000000000000000 [ 1334.462218][ T4334] usb 8-1: SerialNumber: syz [ 1334.477696][ T4334] usb 8-1: config 0 descriptor?? [ 1335.071853][T14085] 9pnet_virtio: no channels available for device syz [ 1335.173643][ T4334] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1335.383583][ T4334] usb 6-1: Using ep0 maxpacket: 32 [ 1335.396443][ T4334] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1335.445151][ T4334] usb 6-1: config 0 has no interface number 0 [ 1335.461620][ T4334] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1335.485485][ T4334] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1335.505877][ T4334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.536614][ T4334] usb 6-1: Product: syz [ 1335.551861][ T4334] usb 6-1: Manufacturer: syz [ 1335.574211][ T4334] usb 6-1: SerialNumber: syz [ 1335.602383][ T4334] usb 6-1: config 0 descriptor?? [ 1335.627805][ T4334] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1335.649643][ T4334] em28xx 6-1:0.89: Video interface 89 found: bulk [ 1336.231987][ T4334] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1338.172548][ T4334] em28xx 6-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1338.623441][ T4334] em28xx 6-1:0.89: board has no eeprom [ 1338.703422][ T4334] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1338.711644][ T4334] em28xx 6-1:0.89: analog set to bulk mode. [ 1338.730763][ T4341] em28xx 6-1:0.89: Registering V4L2 extension [ 1338.739547][ T4334] usb 6-1: USB disconnect, device number 28 [ 1338.747352][ T4334] em28xx 6-1:0.89: Disconnecting em28xx [ 1338.814332][ T4341] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1338.821385][ T4341] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1338.864037][ T4341] em28xx 6-1:0.89: No AC97 audio processor [ 1338.907247][ T4341] usb 6-1: Decoder not found [ 1338.931643][ T4341] em28xx 6-1:0.89: failed to create media graph [ 1338.968781][ T4341] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1338.995946][ T4341] em28xx 6-1:0.89: Registering snapshot button... [ 1339.074885][ T4341] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input56 [ 1339.099327][T14095] loop4: detected capacity change from 0 to 7 [ 1339.115201][ T4341] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1339.138614][T10505] Dev loop4: unable to read RDB block 7 [ 1339.147611][ T4334] em28xx 6-1:0.89: Closing input extension [ 1339.155422][ T4334] em28xx 6-1:0.89: Deregistering snapshot button [ 1339.161874][T10505] loop4: unable to read partition table [ 1339.182616][ T4334] em28xx 6-1:0.89: Freeing device [ 1339.200302][T10505] loop4: partition table beyond EOD, truncated [ 1339.282750][T14095] Dev loop4: unable to read RDB block 7 [ 1339.322295][T14095] loop4: unable to read partition table [ 1339.352773][T14095] loop4: partition table beyond EOD, truncated [ 1339.372944][T14095] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1339.589324][T14099] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2217'. [ 1339.679421][T14099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2217'. [ 1340.966416][T14109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2219'. [ 1341.140332][ T4960] usb 8-1: USB disconnect, device number 17 [ 1341.721561][T14120] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2223'. [ 1342.172275][T14125] lo speed is unknown, defaulting to 1000 [ 1342.179601][T14125] lo speed is unknown, defaulting to 1000 [ 1342.275855][T14125] atomic_op ffff88807b742198 conn xmit_atomic 0000000000000000 [ 1343.383969][ T4334] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1343.454037][ T4960] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1343.543740][ T41] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1343.584306][ T4334] usb 8-1: config index 0 descriptor too short (expected 65183, got 72) [ 1343.609022][ T4334] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1343.619760][T12663] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1343.644932][ T4334] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.653483][ T4960] usb 6-1: Using ep0 maxpacket: 32 [ 1343.666003][ T4960] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1343.679330][ T4334] usb 8-1: Product: syz [ 1343.694936][ T4334] usb 8-1: Manufacturer: syz [ 1343.699809][ T4960] usb 6-1: config 0 has no interface number 0 [ 1343.706145][ T4334] usb 8-1: SerialNumber: syz [ 1343.706307][ T4960] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1343.743455][ T41] usb 2-1: Using ep0 maxpacket: 32 [ 1343.749496][ T4334] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1343.751377][ T41] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1343.776208][ T4960] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1343.794224][ T4960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.802496][ T41] usb 2-1: config 0 has no interface number 0 [ 1343.808796][ T41] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1343.815992][ T4960] usb 6-1: Product: syz [ 1343.821018][ T4960] usb 6-1: Manufacturer: syz [ 1343.826800][ T4960] usb 6-1: SerialNumber: syz [ 1343.833006][ T41] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1343.844947][ T4960] usb 6-1: config 0 descriptor?? [ 1343.850089][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.858965][ T41] usb 2-1: Product: syz [ 1343.866903][ T4960] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1343.885532][T12663] usb 9-1: config 0 has no interfaces? [ 1343.891233][ T41] usb 2-1: Manufacturer: syz [ 1343.909478][T12663] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1343.959636][ T41] usb 2-1: SerialNumber: syz [ 1343.965082][ T4960] em28xx 6-1:0.89: Video interface 89 found: bulk [ 1343.973638][T12663] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.983840][ T41] usb 2-1: config 0 descriptor?? [ 1343.992993][T12663] usb 9-1: Product: syz [ 1343.999885][ T41] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1344.010403][T12663] usb 9-1: Manufacturer: syz [ 1344.015804][T12663] usb 9-1: SerialNumber: syz [ 1344.021038][ T41] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1344.031439][ T4334] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1344.042879][T12663] usb 9-1: config 0 descriptor?? [ 1344.342552][T14129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.367316][T14129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.430228][T14129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.456374][T14129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.484713][T14129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.486551][ T4960] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1344.511990][T14129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.556921][ T4341] usb 8-1: USB disconnect, device number 18 [ 1344.597837][ T41] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1345.193488][ T4334] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1345.213617][ T4334] ath9k_htc: Failed to initialize the device [ 1345.258139][ T4341] usb 8-1: ath9k_htc: USB layer deinitialized [ 1345.397564][ T4960] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1345.406222][ T4960] em28xx 6-1:0.89: board has no eeprom [ 1345.422329][T14143] 9pnet_virtio: no channels available for device syz [ 1345.494601][ T4960] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1345.506018][ T4960] em28xx 6-1:0.89: analog set to bulk mode. [ 1345.523043][ T4960] usb 6-1: USB disconnect, device number 29 [ 1345.530210][ T4960] em28xx 6-1:0.89: Disconnecting em28xx [ 1345.536893][ T5394] em28xx 6-1:0.89: Registering V4L2 extension [ 1345.621473][ T41] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1345.643651][ T4341] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1345.684695][ T5394] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1345.691683][ T5394] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1345.717984][ T41] em28xx 2-1:0.89: board has no eeprom [ 1345.732995][ T5394] em28xx 6-1:0.89: No AC97 audio processor [ 1345.750171][ T5394] usb 6-1: Decoder not found [ 1345.760764][ T5394] em28xx 6-1:0.89: failed to create media graph [ 1345.779166][ T5394] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1345.794910][ T5394] em28xx 6-1:0.89: Registering snapshot button... [ 1345.803462][ T41] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1345.812129][ T41] em28xx 2-1:0.89: analog set to bulk mode. [ 1345.826232][ T5394] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input57 [ 1345.837059][ T4341] usb 8-1: Using ep0 maxpacket: 32 [ 1345.848256][ T4341] usb 8-1: config index 0 descriptor too short (expected 241, got 72) [ 1345.860940][ T41] usb 2-1: USB disconnect, device number 28 [ 1345.869964][ T41] em28xx 2-1:0.89: Disconnecting em28xx [ 1345.881926][ T4341] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 1345.892435][ T5394] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1345.910410][ T4341] usb 8-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 1345.939276][ T4341] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.958744][ T4960] em28xx 6-1:0.89: Closing input extension [ 1345.964800][ T4960] em28xx 6-1:0.89: Deregistering snapshot button [ 1345.977903][ T4341] usb 8-1: config 0 descriptor?? [ 1346.039947][ T5394] em28xx 2-1:0.89: Registering V4L2 extension [ 1346.082181][ T4960] em28xx 6-1:0.89: Freeing device [ 1346.123823][ T4341] usb 8-1: can't set config #0, error -71 [ 1346.150193][ T4341] usb 8-1: USB disconnect, device number 19 [ 1346.393152][ T5394] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1346.416764][T14153] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2231'. [ 1346.423839][ T5394] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1346.463765][ T5394] em28xx 2-1:0.89: No AC97 audio processor [ 1346.506514][T14153] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2231'. [ 1346.521650][ T5394] usb 2-1: Decoder not found [ 1346.540661][ T5394] em28xx 2-1:0.89: failed to create media graph [ 1346.560914][ T5394] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1346.597471][ T5394] em28xx 2-1:0.89: Registering snapshot button... [ 1346.620863][ T5394] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input58 [ 1346.650876][T14147] ================================================================== [ 1346.658969][T14147] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 1346.665988][T14147] Read of size 8 at addr ffff888077c84738 by task v4l_id/14147 [ 1346.673559][T14147] [ 1346.675899][T14147] CPU: 0 PID: 14147 Comm: v4l_id Not tainted syzkaller #0 [ 1346.683027][T14147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1346.693118][T14147] Call Trace: [ 1346.696415][T14147] [ 1346.699377][T14147] dump_stack_lvl+0x168/0x22e [ 1346.704072][T14147] ? __lock_acquire+0x7c50/0x7c50 [ 1346.709135][T14147] ? show_regs_print_info+0x12/0x12 [ 1346.714418][T14147] ? load_image+0x3b0/0x3b0 [ 1346.718954][T14147] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1346.724340][T14147] ? __virt_addr_valid+0x188/0x540 [ 1346.729478][T14147] ? __virt_addr_valid+0x465/0x540 [ 1346.734620][T14147] ? v4l2_fh_open+0xc6/0x430 [ 1346.739217][T14147] print_report+0xa8/0x210 [ 1346.743647][T14147] kasan_report+0x10b/0x140 [ 1346.748163][T14147] ? v4l2_fh_open+0xc6/0x430 [ 1346.752777][T14147] v4l2_fh_open+0xc6/0x430 [ 1346.757200][T14147] em28xx_v4l2_open+0x152/0x990 [ 1346.762058][T14147] ? __lock_acquire+0x7c50/0x7c50 [ 1346.767195][T14147] v4l2_open+0x20b/0x360 [ 1346.771508][T14147] chrdev_open+0x597/0x670 [ 1346.775949][T14147] ? cd_forget+0x160/0x160 [ 1346.780396][T14147] ? tomoyo_file_open+0xe9/0x170 [ 1346.785364][T14147] ? fsnotify_perm+0x39b/0x550 [ 1346.790166][T14147] ? cd_forget+0x160/0x160 [ 1346.794609][T14147] do_dentry_open+0x7e9/0x10d0 [ 1346.799447][T14147] path_openat+0x25c6/0x2e70 [ 1346.804101][T14147] ? do_sys_openat2+0xcf/0x490 [ 1346.808887][T14147] ? __x64_sys_openat+0x135/0x160 [ 1346.813926][T14147] ? do_syscall_64+0x4c/0xa0 [ 1346.818532][T14147] ? do_filp_open+0x3c0/0x3c0 [ 1346.823236][T14147] do_filp_open+0x1c1/0x3c0 [ 1346.827764][T14147] ? vfs_tmpfile+0x480/0x480 [ 1346.832385][T14147] ? _raw_spin_unlock+0x24/0x40 [ 1346.837265][T14147] ? alloc_fd+0x58f/0x630 [ 1346.841615][T14147] do_sys_openat2+0x142/0x490 [ 1346.846310][T14147] ? up_read+0x20/0x20 [ 1346.850421][T14147] ? do_faccessat+0x681/0xa40 [ 1346.855113][T14147] ? kmem_cache_free+0xf7/0x290 [ 1346.860064][T14147] ? do_sys_open+0xe0/0xe0 [ 1346.864496][T14147] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1346.870493][T14147] ? lock_chain_count+0x20/0x20 [ 1346.875373][T14147] __x64_sys_openat+0x135/0x160 [ 1346.880255][T14147] do_syscall_64+0x4c/0xa0 [ 1346.884693][T14147] ? clear_bhb_loop+0x60/0xb0 [ 1346.889384][T14147] ? clear_bhb_loop+0x60/0xb0 [ 1346.894075][T14147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1346.899993][T14147] RIP: 0033:0x7fd93a0a7407 [ 1346.904428][T14147] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1346.924059][T14147] RSP: 002b:00007ffd9551b390 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1346.932497][T14147] RAX: ffffffffffffffda RBX: 00007fd93a75a880 RCX: 00007fd93a0a7407 [ 1346.940491][T14147] RDX: 0000000000000000 RSI: 00007ffd9551bf1b RDI: ffffffffffffff9c [ 1346.948476][T14147] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1346.956474][T14147] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1346.964458][T14147] R13: 00007ffd9551b5e0 R14: 00007fd93a857000 R15: 000055cf0b2524d8 [ 1346.972456][T14147] [ 1346.975487][T14147] [ 1346.977841][T14147] Allocated by task 5394: [ 1346.982216][T14147] kasan_set_track+0x4b/0x70 [ 1346.986858][T14147] __kasan_kmalloc+0x8e/0xa0 [ 1346.991466][T14147] em28xx_v4l2_init+0x107/0x2e70 [ 1346.996445][T14147] em28xx_init_extension+0x118/0x1b0 [ 1347.001738][T14147] process_one_work+0x898/0x1160 [ 1347.006688][T14147] worker_thread+0xd1c/0x1250 [ 1347.011371][T14147] kthread+0x29d/0x330 [ 1347.015454][T14147] ret_from_fork+0x1f/0x30 [ 1347.019879][T14147] [ 1347.022242][T14147] Freed by task 5394: [ 1347.026219][T14147] kasan_set_track+0x4b/0x70 [ 1347.030815][T14147] kasan_save_free_info+0x2d/0x50 [ 1347.035874][T14147] ____kasan_slab_free+0x126/0x1e0 [ 1347.040997][T14147] slab_free_freelist_hook+0x131/0x1a0 [ 1347.046457][T14147] __kmem_cache_free+0xb6/0x1f0 [ 1347.051306][T14147] em28xx_v4l2_init+0x166c/0x2e70 [ 1347.056336][T14147] em28xx_init_extension+0x118/0x1b0 [ 1347.061641][T14147] process_one_work+0x898/0x1160 [ 1347.066592][T14147] worker_thread+0xd1c/0x1250 [ 1347.071272][T14147] kthread+0x29d/0x330 [ 1347.075350][T14147] ret_from_fork+0x1f/0x30 [ 1347.079772][T14147] [ 1347.082091][T14147] The buggy address belongs to the object at ffff888077c84000 [ 1347.082091][T14147] which belongs to the cache kmalloc-8k of size 8192 [ 1347.096156][T14147] The buggy address is located 1848 bytes inside of [ 1347.096156][T14147] 8192-byte region [ffff888077c84000, ffff888077c86000) [ 1347.109606][T14147] [ 1347.111929][T14147] The buggy address belongs to the physical page: [ 1347.118334][T14147] page:ffffea0001df2000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77c80 [ 1347.128570][T14147] head:ffffea0001df2000 order:3 compound_mapcount:0 compound_pincount:0 [ 1347.136888][T14147] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1347.144884][T14147] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017442280 [ 1347.153492][T14147] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 1347.162102][T14147] page dumped because: kasan: bad access detected [ 1347.168541][T14147] page_owner tracks the page as allocated [ 1347.174272][T14147] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 12751, tgid 12744 (syz.1.1914), ts 1155872536541, free_ts 1155843971004 [ 1347.197371][T14147] post_alloc_hook+0x173/0x1a0 [ 1347.202152][T14147] get_page_from_freelist+0x1a26/0x1ac0 [ 1347.207709][T14147] __alloc_pages+0x1df/0x4e0 [ 1347.212306][T14147] alloc_slab_page+0x5d/0x160 [ 1347.216984][T14147] new_slab+0x87/0x2c0 [ 1347.221055][T14147] ___slab_alloc+0xbc6/0x1220 [ 1347.225733][T14147] __kmem_cache_alloc_node+0x1a0/0x260 [ 1347.231190][T14147] __kmalloc+0xa0/0x240 [ 1347.235386][T14147] cache_create_net+0x8e/0x250 [ 1347.240198][T14147] gss_svc_init_net+0x54/0x410 [ 1347.245003][T14147] ops_init+0x355/0x5f0 [ 1347.249183][T14147] setup_net+0x4e1/0xbb0 [ 1347.253449][T14147] copy_net_ns+0x348/0x5b0 [ 1347.257891][T14147] create_new_namespaces+0x3d3/0x6f0 [ 1347.263197][T14147] unshare_nsproxy_namespaces+0x116/0x160 [ 1347.268934][T14147] ksys_unshare+0x4bc/0x890 [ 1347.273447][T14147] page last free stack trace: [ 1347.278121][T14147] free_unref_page_prepare+0x8b4/0x9a0 [ 1347.283608][T14147] free_unref_page+0x2e/0x3f0 [ 1347.288309][T14147] __unfreeze_partials+0x1a5/0x200 [ 1347.293440][T14147] put_cpu_partial+0x17c/0x250 [ 1347.298221][T14147] qlist_free_all+0x76/0xe0 [ 1347.302742][T14147] kasan_quarantine_reduce+0x144/0x160 [ 1347.308231][T14147] __kasan_slab_alloc+0x1e/0x80 [ 1347.313097][T14147] slab_post_alloc_hook+0x4b/0x480 [ 1347.318218][T14147] kmem_cache_alloc+0x123/0x2f0 [ 1347.323720][T14147] getname_flags+0xb7/0x500 [ 1347.328244][T14147] user_path_at_empty+0x28/0x60 [ 1347.333120][T14147] do_readlinkat+0xd4/0x480 [ 1347.337634][T14147] __x64_sys_readlink+0x7b/0x90 [ 1347.342491][T14147] do_syscall_64+0x4c/0xa0 [ 1347.346916][T14147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1347.352828][T14147] [ 1347.355153][T14147] Memory state around the buggy address: [ 1347.360782][T14147] ffff888077c84600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1347.368842][T14147] ffff888077c84680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1347.376908][T14147] >ffff888077c84700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1347.384971][T14147] ^ [ 1347.390861][T14147] ffff888077c84780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1347.398922][T14147] ffff888077c84800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1347.406980][T14147] ================================================================== [ 1347.438787][ T5394] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1347.451810][ T41] em28xx 2-1:0.89: Closing input extension [ 1347.458068][ T41] em28xx 2-1:0.89: Deregistering snapshot button [ 1347.793507][ T4341] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1348.024645][ T4341] usb 6-1: config 0 has no interfaces? [ 1348.083041][ T14] usb 9-1: USB disconnect, device number 12 [ 1348.404163][ T4341] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1348.453511][ T4341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.487680][T14147] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1348.494933][T14147] CPU: 1 PID: 14147 Comm: v4l_id Not tainted syzkaller #0 [ 1348.502090][T14147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1348.512170][T14147] Call Trace: [ 1348.515468][T14147] [ 1348.518420][T14147] dump_stack_lvl+0x168/0x22e [ 1348.523154][T14147] ? memcpy+0x3c/0x60 [ 1348.527174][T14147] ? show_regs_print_info+0x12/0x12 [ 1348.532401][T14147] ? load_image+0x3b0/0x3b0 [ 1348.537041][T14147] panic+0x2c9/0x710 [ 1348.540971][T14147] ? bpf_jit_dump+0xd0/0xd0 [ 1348.545507][T14147] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1348.551176][T14147] ? check_panic_on_warn+0x6c/0xa0 [ 1348.556322][T14147] check_panic_on_warn+0x80/0xa0 [ 1348.561288][T14147] ? v4l2_fh_open+0xc6/0x430 [ 1348.565897][T14147] end_report+0x66/0x110 [ 1348.570169][T14147] kasan_report+0x118/0x140 [ 1348.574698][T14147] ? v4l2_fh_open+0xc6/0x430 [ 1348.579311][T14147] v4l2_fh_open+0xc6/0x430 [ 1348.583787][T14147] em28xx_v4l2_open+0x152/0x990 [ 1348.588674][T14147] ? __lock_acquire+0x7c50/0x7c50 [ 1348.593732][T14147] v4l2_open+0x20b/0x360 [ 1348.598006][T14147] chrdev_open+0x597/0x670 [ 1348.602446][T14147] ? cd_forget+0x160/0x160 [ 1348.606889][T14147] ? tomoyo_file_open+0xe9/0x170 [ 1348.611856][T14147] ? fsnotify_perm+0x39b/0x550 [ 1348.616644][T14147] ? cd_forget+0x160/0x160 [ 1348.621090][T14147] do_dentry_open+0x7e9/0x10d0 [ 1348.625892][T14147] path_openat+0x25c6/0x2e70 [ 1348.630524][T14147] ? do_sys_openat2+0xcf/0x490 [ 1348.635316][T14147] ? __x64_sys_openat+0x135/0x160 [ 1348.640373][T14147] ? do_syscall_64+0x4c/0xa0 [ 1348.644991][T14147] ? do_filp_open+0x3c0/0x3c0 [ 1348.649709][T14147] do_filp_open+0x1c1/0x3c0 [ 1348.654246][T14147] ? vfs_tmpfile+0x480/0x480 [ 1348.658880][T14147] ? _raw_spin_unlock+0x24/0x40 [ 1348.663760][T14147] ? alloc_fd+0x58f/0x630 [ 1348.668119][T14147] do_sys_openat2+0x142/0x490 [ 1348.672822][T14147] ? up_read+0x20/0x20 [ 1348.676919][T14147] ? do_faccessat+0x681/0xa40 [ 1348.681623][T14147] ? kmem_cache_free+0xf7/0x290 [ 1348.686496][T14147] ? do_sys_open+0xe0/0xe0 [ 1348.690943][T14147] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1348.696959][T14147] ? lock_chain_count+0x20/0x20 [ 1348.701845][T14147] __x64_sys_openat+0x135/0x160 [ 1348.706725][T14147] do_syscall_64+0x4c/0xa0 [ 1348.711167][T14147] ? clear_bhb_loop+0x60/0xb0 [ 1348.715868][T14147] ? clear_bhb_loop+0x60/0xb0 [ 1348.720571][T14147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1348.726501][T14147] RIP: 0033:0x7fd93a0a7407 [ 1348.730942][T14147] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1348.750578][T14147] RSP: 002b:00007ffd9551b390 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1348.759033][T14147] RAX: ffffffffffffffda RBX: 00007fd93a75a880 RCX: 00007fd93a0a7407 [ 1348.767037][T14147] RDX: 0000000000000000 RSI: 00007ffd9551bf1b RDI: ffffffffffffff9c [ 1348.775034][T14147] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1348.783033][T14147] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1348.791032][T14147] R13: 00007ffd9551b5e0 R14: 00007fd93a857000 R15: 000055cf0b2524d8 [ 1348.799043][T14147] [ 1348.802260][T14147] Kernel Offset: disabled [ 1348.806598][T14147] Rebooting in 86400 seconds..