last executing test programs: 27.568157712s ago: executing program 1 (id=363): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8943, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000240)=0x8) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6d, 0x3, 0x9}, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Cap'], 0x86) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r5, 0x29, 0x46, 0x0, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7], 0x40}, 0x1, 0x0, 0x0, 0x10000}, 0x81) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x1b}, {&(0x7f0000000d00)="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", 0xb60}], 0x59) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf249", 0xd, 0xfffffffffffffffb) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r9, 0x3, {0x0, 0xff, 0x3}, 0x2}, 0x18) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 18.862796651s ago: executing program 3 (id=378): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) socket(0x2d, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b23, &(0x7f0000000040)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'erspan0\x00', 0x1}, 0x18) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) 18.775893687s ago: executing program 2 (id=379): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b", 0x7}], 0x1}, 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000440)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 18.636466845s ago: executing program 1 (id=381): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000700)=@req3={0x7, 0x567000, 0xe, 0x4, 0x2, 0x4, 0x1}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, 0x0, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) r4 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r4}) syz_usbip_server_init(0x4) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x4008af14, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x4e3, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000400)=@generic={0x6, "38697edea887e79e6b4f02ff208156c1bc9c3ab112bfb9253a88269bbb658eb0c28aaa636b62ff6ff8865d53bf6e4ed58cb381336e0cb12a635787b72335af392c03d608e8cd2b97b21920fec37e98323b9492ce5078372fc1b3819f6d7287c29b4284c74922cbc53adde7efb3b85e8bb6e35ddb00"}, 0x0, 0x0, 0x1}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/185) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400067b0e0001020005000000000000090000e3e7cb6e936600"], 0x14}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x4, 0x1000, 0x40048}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x120, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0xfffffffffffffe3d}, {0xe4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xcc, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x68, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x35, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74ae60f057b238fb15e2207986c5639bfbc3d91ee00b5a433e95b6b3527"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x81}, 0x20000480) socket(0xfd0ea84938e73d0a, 0x800, 0x0) 16.796044213s ago: executing program 4 (id=383): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d00000000000100000000000000"], 0x38}}, 0x38fadfa40794be32) 16.258494243s ago: executing program 4 (id=384): r0 = socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x7c61d607c6d94c11, 0x0) socket(0x2, 0x80805, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x9}]}, 0x10) syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x1f, 0xcd, 0x1b, 0x8, 0x10cf, 0x5503, 0x75af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x9, 0x10, 0x3, [{{0x9, 0x4, 0x18, 0x2, 0x1, 0xb4, 0x1d, 0x3f, 0x1, [], [{{0x9, 0x5, 0x85, 0x3, 0x20, 0xff, 0xa, 0x40}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 15.897612471s ago: executing program 2 (id=385): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) r6 = syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000006c0)=0x0, &(0x7f0000002180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc885}, 0x0) 14.217665328s ago: executing program 1 (id=386): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYBLOB="06001500030000000c00"], 0x38}}, 0x10) sendmsg$key(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40010) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f636b206e6f6e916500"], 0xa) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) setns(0xffffffffffffffff, 0x24020000) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000400)='.\x00', 0xa4000021) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f29"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) 10.916850465s ago: executing program 4 (id=387): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000080)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x1ff, '\x00', @value64=0xfffffffffffffffe}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r4 = socket$packet(0x11, 0x3, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x10, 0xa, 0xa5b1, &(0x7f0000000180)) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) 10.868542296s ago: executing program 3 (id=388): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdad, 0x0, 0x0, 0x0, 0xfffeffff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x16, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000100002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000004f80)=[{{&(0x7f0000000300)=@ax25={{0x3, @null}, [@netrom, @netrom, @rose, @bcast, @netrom, @netrom, @null, @netrom]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f00000006c0)=""/24, 0x18}, {&(0x7f0000000500)=""/208, 0xd0}, {0x0}, {&(0x7f0000000640)=""/76, 0x4c}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/232, 0xe8}, {&(0x7f00000008c0)=""/124, 0x7c}], 0x9, &(0x7f0000000a80)=""/78, 0x4e}, 0xe}, {{&(0x7f0000000b00)=@nfc_llcp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000b80)=""/231, 0xe7}, {&(0x7f0000000c80)=""/217, 0xd9}], 0x2, &(0x7f0000000d80)=""/95, 0x5f}, 0x1000}, {{&(0x7f0000000e00)=@generic, 0x80, &(0x7f0000001080)=[{&(0x7f0000000e80)=""/196, 0xc4}, {&(0x7f0000000f80)=""/152, 0x98}, {&(0x7f0000001040)=""/45, 0x2d}], 0x3}, 0x3}, {{&(0x7f0000004a00)=@phonet, 0x80, &(0x7f0000003440)=[{&(0x7f0000001140)=""/181, 0xb5}, {&(0x7f0000001200)=""/202, 0xca}, {&(0x7f0000001300)=""/10, 0xa}, {&(0x7f0000001340)=""/209, 0xd1}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/4096, 0x1000}], 0x6, &(0x7f0000003480)=""/165, 0xa5}, 0x5}, {{&(0x7f00000010c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000045c0)=[{&(0x7f00000035c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004600)=""/199, 0xc7}}, {{&(0x7f0000004700)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000004940)=[{&(0x7f0000004780)=""/144, 0x90}, {&(0x7f0000004840)=""/254, 0xfe}], 0x2}, 0xfffffffc}, {{&(0x7f0000005080)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004a80)=""/120, 0x78}, {&(0x7f0000004b00)=""/169, 0xa9}, {&(0x7f0000004bc0)=""/177, 0xb1}, {&(0x7f0000004c80)=""/145, 0x91}, {&(0x7f0000004d40)=""/208, 0xd0}, {&(0x7f0000004e40)=""/63, 0x3f}], 0x6, &(0x7f0000004ec0)=""/185, 0xb9}, 0x5}], 0x7, 0x2, 0x0) syz_usbip_server_init(0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0xfffffffffffffffe) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) 10.374079069s ago: executing program 2 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) connect$unix(r1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00009b1ffc)=0x0) timer_getoverrun(r4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x4, 0x0, 0xfff8, 0x8, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18002500000000000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) epoll_create1(0x0) 9.730171205s ago: executing program 2 (id=390): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x38}, 0x0, "cba3b5d37b22d90252e1547eb1ce271a5974f758d04197bb09b8079543977b01", 0x5, 0x4, 0x8004, 0x8b83}, 0x3c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(&(0x7f0000445000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) r1 = socket(0x29, 0x3, 0x37) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2000000000000, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r4}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000180)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r5, 0x7ac, &(0x7f00000002c0)={0x0, 0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f00000000c0)={{@host, 0x8}, 0xc, 0x6, 0x8000, 0x2d199348}) 9.325091326s ago: executing program 0 (id=391): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000940)="08848e036c11d3dc4507e05841f5d363902b1f86b8e455ff0a2509dad6cc4227e536608aa6ade634929245d6866b3f837d24e6fd9548f791fa7153e1cb1b186d5b3a01bc21be6d0907a34a863e80c0c17e5e0455411ed20bf7b9aec5bde3c850446e8d618ee0f957bbdb89cf5029dcd2d2d5a6ba4ce260f4dce5f4180806c62e199036", 0x83}, {&(0x7f0000000300)="e56d4c4bf5301c23d1aab1a66b94ed272a49283a0adba98d02c9848b2b55575115a0f6701469e180c1c59e35a5bd", 0x2e}, {0x0}, {&(0x7f00000082c0)="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", 0x4dd}, {&(0x7f0000000200)="94acde3039c04e0845f8a780f6b228457067bf33e97755ab96828018c9efdf487699ae3dd30baa3c20f261da29fce3091d7a01902245467f87", 0x39}], 0x5, 0x0, 0x0, 0x8000}], 0x1, 0x8010) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) 9.042207052s ago: executing program 0 (id=392): socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) 8.660044973s ago: executing program 1 (id=393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x4, 0x2}, 0x48) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) openat$pidfd(0xffffff9c, &(0x7f0000000100), 0x80, 0x0) timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x1}, &(0x7f0000000700)=0x0) timer_gettime(r4, &(0x7f0000000100)) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000002c0)=r6, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r7}, 0x38) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000001080)={r1, 0x58, &(0x7f00000010c0)}, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xb8, r8, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000004}, 0x2004c004) mkdir(&(0x7f0000000000)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYBLOB='3']) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) 7.481824907s ago: executing program 0 (id=394): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), 0x0}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe80000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 7.040122825s ago: executing program 3 (id=395): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b", 0x7}], 0x1}, 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000440)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 7.031421069s ago: executing program 0 (id=396): socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000c40)=ANY=[], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 6.149906868s ago: executing program 1 (id=397): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x30, r3, 0x239, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000640)={0x2, 0x7, {0x8000000000000000, @struct={0x6, 0x6}, 0x0, 0x401, 0x8, 0x8, 0x1, 0xfff, 0xa, @struct={0x6, 0x8}, 0x5, 0xb, [0x2, 0x8000000000000000, 0x42, 0x6, 0x5, 0x1]}, {0xfffffffffffffffc, @struct={0xebbe333, 0x8}, 0x0, 0x8001, 0x0, 0x4, 0x5, 0xffffffffffffffff, 0x484, @usage=0x4, 0xffff9dcd, 0x10001, [0x2, 0x7, 0x7, 0x2, 0x7, 0xfffffffffffffff7]}, {0xffffffffffffa89b, @usage=0x7, 0x0, 0x9, 0x2, 0x2, 0x526, 0x5, 0xe1, @usage=0x1000000000000, 0x9, 0x10000, [0x8, 0x7, 0x7fff, 0x4, 0xe0000000]}, {0x4eb1f56e, 0x2c4d, 0x4}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000a40)={r4, 0x800, 0xfffffffffffffffb, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gretap0\x00'}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x80000001, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x2000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r6 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = accept$packet(r8, &(0x7f0000000100), &(0x7f0000000140)=0x14) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000180)={0x9, 0x4}, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r10}}, 0x20) 5.82458655s ago: executing program 0 (id=398): syz_open_dev$video(0x0, 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8943, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000240)=0x8) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6d, 0x3, 0x9}, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Cap'], 0x86) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r5, 0x29, 0x46, 0x0, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7], 0x40}, 0x1, 0x0, 0x0, 0x10000}, 0x81) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x1b}, {&(0x7f0000000d00)="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", 0xb60}], 0x59) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf249", 0xd, 0xfffffffffffffffb) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r9, 0x3, {0x0, 0xff, 0x3}, 0x2}, 0x18) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 5.734971919s ago: executing program 4 (id=399): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.459983597s ago: executing program 4 (id=400): clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_settime(0x1, &(0x7f0000000140)={r0, r1+60000000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000310001072abd70000000000003"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) r3 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f00000005c0)=""/132, 0x84}, {&(0x7f0000000200)=""/26, 0x1a}, {&(0x7f0000000680)=""/141, 0x8d}], 0x5}, 0xfffffff8}, {{&(0x7f0000000740)=@un=@abs, 0x80, &(0x7f00000018c0)=[{&(0x7f00000007c0)=""/47, 0x2f}, {&(0x7f0000000800)=""/45, 0x2d}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/123, 0x7b}], 0x4}, 0x7f}, {{&(0x7f0000001900)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/85, 0x55}, {&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000001b00)=""/37, 0x25}, {&(0x7f0000001b40)=""/75, 0x4b}, {&(0x7f0000001bc0)=""/185, 0xb9}], 0x6, &(0x7f0000001cc0)=""/16, 0x10}, 0x9}, {{&(0x7f0000001d00)=@tipc=@id, 0x80, &(0x7f0000004000)=[{&(0x7f0000001d80)=""/246, 0xf6}, {&(0x7f0000001e80)=""/166, 0xa6}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/135, 0x87}], 0x5, &(0x7f0000004040)=""/46, 0x2e}, 0x1}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bind$inet(r3, &(0x7f0000004100)={0x2, 0x4e21, @private=0xa010100}, 0x10) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000f08000/0x4000)=nil, 0x4000, 0x6, 0x200000005c831, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x6, 0xfffffcfe, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 5.176653897s ago: executing program 3 (id=401): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r3, 0x1) listen(r3, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd25, 0x25cfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000880) r5 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005200010005bd7000040000000200000008000100", @ANYRES32], 0x1c}}, 0x800) openat$pidfd(0xffffffffffffff9c, 0x0, 0x220080, 0x0) 5.04139102s ago: executing program 2 (id=402): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x2, @pix={0x0, 0x7, 0x31424752, 0x4, 0x1, 0x8, 0x7, 0x7, 0x0, 0x7, 0x2, 0x6}}) shmctl$IPC_RMID(0x0, 0x0) 3.795214277s ago: executing program 4 (id=403): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r4, 0x0, 0x1}, 0x18) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x9, 0x8, 0xc0000000, 0x10001, 0x0, 0x7aff, 0x4}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.822088256s ago: executing program 0 (id=404): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00']) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) ptrace(0x4206, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x5) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, 0x0) ptrace$getregset(0x4205, r4, 0x200, 0x0) 2.19880537s ago: executing program 1 (id=405): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdad, 0x0, 0x0, 0x0, 0xfffeffff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x16, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000100002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000004f80)=[{{&(0x7f0000000300)=@ax25={{0x3, @null}, [@netrom, @netrom, @rose, @bcast, @netrom, @netrom, @null, @netrom]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f00000006c0)=""/24, 0x18}, {&(0x7f0000000500)=""/208, 0xd0}, {0x0}, {&(0x7f0000000640)=""/76, 0x4c}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/232, 0xe8}, {&(0x7f00000008c0)=""/124, 0x7c}], 0x9, &(0x7f0000000a80)=""/78, 0x4e}, 0xe}, {{&(0x7f0000000b00)=@nfc_llcp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000b80)=""/231, 0xe7}, {&(0x7f0000000c80)=""/217, 0xd9}], 0x2, &(0x7f0000000d80)=""/95, 0x5f}, 0x1000}, {{&(0x7f0000000e00)=@generic, 0x80, &(0x7f0000001080)=[{&(0x7f0000000e80)=""/196, 0xc4}, {&(0x7f0000000f80)=""/152, 0x98}, {&(0x7f0000001040)=""/45, 0x2d}], 0x3}, 0x3}, {{&(0x7f0000004a00)=@phonet, 0x80, &(0x7f0000003440)=[{&(0x7f0000001140)=""/181, 0xb5}, {&(0x7f0000001200)=""/202, 0xca}, {&(0x7f0000001300)=""/10, 0xa}, {&(0x7f0000001340)=""/209, 0xd1}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/4096, 0x1000}], 0x6, &(0x7f0000003480)=""/165, 0xa5}, 0x5}, {{&(0x7f00000010c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000045c0)=[{&(0x7f00000035c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004600)=""/199, 0xc7}}, {{&(0x7f0000004700)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000004940)=[{&(0x7f0000004780)=""/144, 0x90}, {&(0x7f0000004840)=""/254, 0xfe}], 0x2}, 0xfffffffc}, {{&(0x7f0000005080)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004a80)=""/120, 0x78}, {&(0x7f0000004b00)=""/169, 0xa9}, {&(0x7f0000004bc0)=""/177, 0xb1}, {&(0x7f0000004c80)=""/145, 0x91}, {&(0x7f0000004d40)=""/208, 0xd0}, {&(0x7f0000004e40)=""/63, 0x3f}], 0x6, &(0x7f0000004ec0)=""/185, 0xb9}, 0x5}], 0x7, 0x2, 0x0) syz_usbip_server_init(0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0xfffffffffffffffe) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) 1.43144141s ago: executing program 3 (id=406): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000440)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) socket$l2tp6(0xa, 0x2, 0x73) sendmmsg(r1, &(0x7f00000003c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @loopback}, 0x2, 0x0, 0x1, 0x3}}, 0x80, 0x0}, 0x5b4}, {{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, 0x0}}], 0x2, 0x850) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000100)='binder\x00', 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x18}, 0x20) 1.218007092s ago: executing program 2 (id=407): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xa2, 0x6576, 0xd}) r1 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0xc0041) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x0, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44c40) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x34, 0x22, 0x3e, 0x10, 0x5ac, 0x274, 0xf9c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x45, 0x0, 0x1, 0x3, 0x63, 0x2, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}]}}]}}]}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) fsopen(0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f00000000c0)) 0s ago: executing program 3 (id=408): socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000c40)=ANY=[], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) kernel console output (not intermixed with test programs): sim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.416646][ T3125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.449834][ T3125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.464815][ T5967] binder: 5965:5967 ioctl c0306201 2000000001c0 returned -14 [ 97.521951][ T5966] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 97.669618][ T5970] Zero length message leads to an empty skb [ 97.682272][ T1477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.682291][ T1477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.870600][ T3213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.870619][ T3213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.134599][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.134619][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.361230][ T1477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.361251][ T1477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.771010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.771199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.872362][ T3664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.872387][ T3664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.564079][ T5998] netlink: 'syz.3.9': attribute type 4 has an invalid length. [ 102.025808][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 102.821965][ T6007] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.097072][ T37] audit: type=1326 audit(1758529860.813:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238b92ec29 code=0x7ffc0000 [ 104.097105][ T37] audit: type=1326 audit(1758529860.813:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238b92ec29 code=0x7ffc0000 [ 104.097127][ T37] audit: type=1326 audit(1758529860.813:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f238b92ec29 code=0x7ffc0000 [ 104.097148][ T37] audit: type=1326 audit(1758529860.813:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238b92ec29 code=0x7ffc0000 [ 104.097168][ T37] audit: type=1326 audit(1758529860.813:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f238b92ec29 code=0x7ffc0000 [ 104.097189][ T37] audit: type=1326 audit(1758529860.813:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238b92ec29 code=0x7ffc0000 [ 104.097209][ T37] audit: type=1326 audit(1758529860.813:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f238b92ec29 code=0x7ffc0000 [ 104.097230][ T37] audit: type=1326 audit(1758529860.813:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238b92ec29 code=0x7ffc0000 [ 104.097251][ T37] audit: type=1326 audit(1758529860.813:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f238b92ec29 code=0x7ffc0000 [ 104.097271][ T37] audit: type=1326 audit(1758529860.813:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238b92ec29 code=0x7ffc0000 [ 106.942393][ T6023] netlink: 'syz.0.15': attribute type 1 has an invalid length. [ 106.950935][ T6023] overlayfs: failed to resolve './bus': -2 [ 107.062410][ T6025] binder: 6022:6025 ioctl c0306201 2000000001c0 returned -14 [ 107.141383][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.243088][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 107.290847][ T6026] team0: No ports can be present during mode change [ 107.294768][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 107.306136][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 107.327134][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.327154][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.327176][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 107.327188][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.440832][ T9] usb 3-1: config 0 descriptor?? [ 108.193924][ T9] ft260 0003:0403:6030.0001: unknown main item tag 0x7 [ 109.241104][ T9] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 109.247099][ T9] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 109.448837][ T9] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup [ 109.576972][ T6033] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.631296][ T5851] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 110.257204][ T6041] block nbd4: shutting down sockets [ 110.334421][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 110.427249][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 110.502335][ T9] usb 3-1: USB disconnect, device number 2 [ 111.042175][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.369878][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.395224][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.931921][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.470227][ T6063] pim6reg: entered allmulticast mode [ 112.821248][ T44] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.021103][ T6058] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.071191][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 113.090088][ T44] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 113.090111][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.171096][ T6058] usb 5-1: Using ep0 maxpacket: 16 [ 113.176862][ T6058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.180464][ T6058] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 113.180492][ T6058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.180510][ T6058] usb 5-1: Product: syz [ 113.180523][ T6058] usb 5-1: Manufacturer: syz [ 113.180536][ T6058] usb 5-1: SerialNumber: syz [ 113.447333][ T6058] usb 5-1: config 0 descriptor?? [ 113.476321][ T6058] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 113.476342][ T6058] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 113.961587][ T44] pvrusb2: Hardware description: Terratec Grabster AV400 [ 113.961610][ T44] pvrusb2: ********** [ 113.961616][ T44] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 113.961626][ T44] pvrusb2: Important functionality might not be entirely working. [ 113.961633][ T44] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 113.961643][ T44] pvrusb2: ********** [ 114.175265][ T6058] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 114.345818][ T6058] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 114.345858][ T6058] em28xx 5-1:0.0: board has no eeprom [ 114.451184][ T6058] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 114.451225][ T6058] em28xx 5-1:0.0: dvb set to bulk mode. [ 114.452056][ T5926] em28xx 5-1:0.0: Binding DVB extension [ 114.497883][ T6058] usb 5-1: USB disconnect, device number 2 [ 114.514686][ T6058] em28xx 5-1:0.0: Disconnecting em28xx [ 114.662584][ T5926] em28xx 5-1:0.0: Registering input extension [ 114.667471][ T6058] em28xx 5-1:0.0: Closing input extension [ 114.748040][ T6058] em28xx 5-1:0.0: Freeing device [ 115.793073][ T6073] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 115.793099][ T6073] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 115.802037][ T6073] vhci_hcd vhci_hcd.0: Device attached [ 116.034637][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 116.034649][ T37] audit: type=1800 audit(1758529872.763:23): pid=6073 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.27" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 116.163362][ T6058] usb 36-1: SetAddress Request (2) to port 0 [ 116.163443][ T6058] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 116.583351][ T6075] vhci_hcd: connection reset by peer [ 116.605348][ T3057] vhci_hcd: stop threads [ 116.612117][ T3057] vhci_hcd: release socket [ 116.620412][ T3057] vhci_hcd: disconnect device [ 118.382203][ T2368] pvrusb2: Invalid write control endpoint [ 118.493868][ T44] usb 3-1: USB disconnect, device number 3 [ 118.496703][ T6087] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 118.496725][ T6087] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 118.496780][ T6087] vhci_hcd vhci_hcd.0: Device attached [ 118.680127][ T6087] autofs: Unknown parameter '0x0000000000000000' [ 118.783183][ T5936] usb 42-1: SetAddress Request (2) to port 0 [ 118.783233][ T5936] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 119.121211][ T5926] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 119.231672][ T6087] block nbd4: shutting down sockets [ 119.256817][ T6092] vhci_hcd: connection reset by peer [ 119.258800][ T3006] vhci_hcd: stop threads [ 119.258817][ T3006] vhci_hcd: release socket [ 119.258870][ T3006] vhci_hcd: disconnect device [ 119.259545][ T2368] pvrusb2: Invalid write control endpoint [ 119.259552][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 119.259557][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 119.259561][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 119.259565][ T2368] pvrusb2: Device being rendered inoperable [ 119.261224][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 119.261293][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 119.311576][ T2368] pvrusb2: Attached sub-driver cx25840 [ 119.311610][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 119.311619][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 119.393906][ T5926] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.393923][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 119.393955][ T5926] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 119.393967][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.486991][ T5926] usb 4-1: config 0 descriptor?? [ 119.554415][ T5926] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 119.554799][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 119.584736][ T6107] block nbd0: shutting down sockets [ 119.605298][ T6114] tipc: Enabling of bearer rejected, failed to enable media [ 119.632886][ T5926] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 119.654627][ T5926] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 119.654712][ T5926] usb 4-1: media controller created [ 119.712660][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.832699][ T6088] netlink: 'syz.3.30': attribute type 6 has an invalid length. [ 119.945552][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 119.945677][ T5926] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 120.023954][ T5926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 120.288925][ T5926] dvb-usb: schedule remote query interval to 150 msecs. [ 120.289030][ T5926] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 120.623537][ T5851] dvb-usb: bulk message failed: -22 (1/0) [ 120.623571][ T5851] dvb-usb: error while querying for an remote control event. [ 120.788179][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 120.788213][ T5926] dvb-usb: error while querying for an remote control event. [ 120.951254][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 120.951288][ T10] dvb-usb: error while querying for an remote control event. [ 121.111182][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 121.111207][ T10] dvb-usb: error while querying for an remote control event. [ 121.243828][ T6058] usb 36-1: device descriptor read/8, error -110 [ 121.281178][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 121.281209][ T10] dvb-usb: error while querying for an remote control event. [ 121.441143][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 121.441163][ T10] dvb-usb: error while querying for an remote control event. [ 121.601150][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 121.601184][ T10] dvb-usb: error while querying for an remote control event. [ 121.714275][ T6058] usb usb36-port1: attempt power cycle [ 122.892068][ T6140] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 122.904635][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 122.904655][ T10] dvb-usb: error while querying for an remote control event. [ 122.910672][ T5896] usb 4-1: USB disconnect, device number 2 [ 123.465867][ T6058] usb usb36-port1: unable to enumerate USB device [ 123.905242][ T5936] usb 42-1: device descriptor read/8, error -110 [ 124.218892][ T5896] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 124.486746][ T5936] usb usb42-port1: attempt power cycle [ 125.792452][ T5936] usb usb42-port1: unable to enumerate USB device [ 127.983020][ T6178] tipc: Enabling of bearer rejected, failed to enable media [ 128.891144][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.016837][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.155594][ T6187] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.705036][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.550866][ T6194] syz.4.50 (6194): drop_caches: 2 [ 131.673892][ T6214] block nbd0: shutting down sockets [ 132.546547][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.880467][ T6225] netlink: 'syz.0.57': attribute type 4 has an invalid length. [ 133.145659][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.206438][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.208495][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.273066][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.364001][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.472231][ T6224] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 133.472248][ T6224] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 133.472304][ T6224] vhci_hcd vhci_hcd.0: Device attached [ 133.520897][ T37] audit: type=1800 audit(1758529890.263:24): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.55" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 133.840487][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.030702][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.075009][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.294106][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.968663][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.281188][ T5896] usb 36-1: SetAddress Request (6) to port 0 [ 135.281273][ T5896] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd [ 136.276294][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.572923][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.758683][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.354332][ T6247] tipc: Started in network mode [ 137.354362][ T6247] tipc: Node identity 4669cb8bd0a5, cluster identity 4711 [ 137.354924][ T6247] tipc: Enabled bearer , priority 0 [ 137.447471][ T6248] tipc: Resetting bearer [ 137.832073][ T6246] tipc: Disabling bearer [ 138.351335][ T6253] netlink: 'syz.2.64': attribute type 4 has an invalid length. [ 138.685342][ T9] tipc: Node number set to 2530003851 [ 139.072008][ T6226] vhci_hcd: connection reset by peer [ 139.094404][ T3057] vhci_hcd: stop threads [ 139.094422][ T3057] vhci_hcd: release socket [ 139.094496][ T3057] vhci_hcd: disconnect device [ 139.266659][ T6256] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 139.266685][ T6256] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 139.269012][ T6256] vhci_hcd vhci_hcd.0: Device attached [ 139.366261][ T6261] block nbd4: shutting down sockets [ 139.451338][ T44] vhci_hcd: vhci_device speed not set [ 139.522727][ T44] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 139.731172][ T6058] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.338590][ T5896] usb 36-1: device descriptor read/8, error -110 [ 141.078561][ T6058] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 141.078605][ T6058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.180041][ T6058] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 141.180058][ T6058] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 141.180068][ T6058] usb 3-1: Manufacturer: syz [ 141.277892][ T6058] usb 3-1: config 0 descriptor?? [ 141.696875][ T6285] random: crng reseeded on system resumption [ 142.580054][ T5896] usb usb36-port1: attempt power cycle [ 142.712716][ T6262] vhci_hcd: connection reset by peer [ 142.725769][ T1489] vhci_hcd: stop threads [ 142.725787][ T1489] vhci_hcd: release socket [ 142.725852][ T1489] vhci_hcd: disconnect device [ 143.031175][ T5842] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.270097][ T5896] usb usb36-port1: unable to enumerate USB device [ 143.281094][ T6058] rc_core: IR keymap rc-hauppauge not found [ 143.281124][ T6058] Registered IR keymap rc-empty [ 143.283777][ T6058] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 143.291575][ T6058] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 143.333689][ T6058] usb 3-1: USB disconnect, device number 4 [ 143.761720][ T5896] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 143.951012][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 143.959387][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.959418][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.959456][ T5896] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 143.959477][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.148940][ T5896] usb 2-1: config 0 descriptor?? [ 144.441367][ T6282] syz.0.71 (6282): drop_caches: 2 [ 144.570271][ T5896] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 144.654841][ T44] vhci_hcd: vhci_device speed not set [ 144.703993][ T6301] tipc: Started in network mode [ 144.704024][ T6301] tipc: Node identity 3e66660c5467, cluster identity 4711 [ 144.712987][ T6301] tipc: Enabled bearer , priority 0 [ 144.760059][ T5896] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 144.856033][ T6300] tipc: Resetting bearer [ 144.901996][ T6299] tipc: Disabling bearer [ 144.961028][ T5896] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 145.245108][ T5896] ft260 0003:0403:6030.0002: failed to retrieve status: -32, no wakeup [ 146.000329][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.203280][ T5896] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 147.091793][ T6322] block nbd1: shutting down sockets [ 147.108056][ T5936] usb 2-1: USB disconnect, device number 2 [ 147.770056][ T6326] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 147.770082][ T6326] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 147.770176][ T6326] vhci_hcd vhci_hcd.0: Device attached [ 147.827017][ T37] audit: type=1800 audit(1758529904.573:25): pid=6326 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.79" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 148.101176][ T10] usb 40-1: SetAddress Request (2) to port 0 [ 148.101252][ T10] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 148.190681][ T6337] pim6reg: entered allmulticast mode [ 148.441150][ T6058] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 148.621209][ T6329] vhci_hcd: connection reset by peer [ 148.652253][ T6058] usb 2-1: Using ep0 maxpacket: 8 [ 148.659195][ T1489] vhci_hcd: stop threads [ 148.659209][ T1489] vhci_hcd: release socket [ 148.659256][ T1489] vhci_hcd: disconnect device [ 148.709714][ T6058] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 148.709744][ T6058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.877809][ T6058] pvrusb2: Hardware description: Terratec Grabster AV400 [ 148.877822][ T6058] pvrusb2: ********** [ 148.877825][ T6058] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 148.877831][ T6058] pvrusb2: Important functionality might not be entirely working. [ 148.877836][ T6058] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 148.877841][ T6058] pvrusb2: ********** [ 149.021663][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 149.121218][ T2368] pvrusb2: Invalid write control endpoint [ 149.241161][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 149.251196][ T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 149.251225][ T9] usb 5-1: config 0 has no interface number 0 [ 149.251272][ T9] usb 5-1: config 0 interface 12 has no altsetting 0 [ 149.257177][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 149.257204][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.257223][ T9] usb 5-1: Product: syz [ 149.257236][ T9] usb 5-1: Manufacturer: syz [ 149.257250][ T9] usb 5-1: SerialNumber: syz [ 149.284932][ T6337] pvrusb2: Invalid write control endpoint [ 149.291859][ T9] usb 5-1: config 0 descriptor?? [ 149.455156][ T2368] pvrusb2: Invalid write control endpoint [ 149.455166][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 149.455171][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 149.455175][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 149.455180][ T2368] pvrusb2: Device being rendered inoperable [ 149.456557][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 149.456617][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 149.458597][ T2368] pvrusb2: Attached sub-driver cx25840 [ 149.458609][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 149.458617][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 149.885322][ T6339] netlink: 452 bytes leftover after parsing attributes in process `syz.4.83'. [ 149.898226][ T9] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 149.898268][ T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 149.898277][ T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 149.898334][ T9] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 149.905732][ T9] usb 5-1: USB disconnect, device number 4 [ 151.601867][ T6355] netlink: 'syz.2.86': attribute type 4 has an invalid length. [ 152.000505][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.071134][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.244687][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.264946][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 152.286973][ T9] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 152.287005][ T9] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 152.287029][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 152.290156][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 152.290184][ T9] usb 5-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 152.290204][ T9] usb 5-1: Product: syz [ 152.290217][ T9] usb 5-1: Manufacturer: 폏蹃晡ᘌ疈澢ᢹλ樵ݡᙚ꽂髏韙䛒﷭⃃ᶏ覯뿄ų쎯褈⤗䜚툖萳殯Ȝꃈ㹡䒔肃僂ͣ๾憱롢嬭땶玍艱㒷唞鋫ॉ㸐峻哹ཧꛋᢌ낎ͳ섪뵞謟孌쨳뒮଄ꅵ迲龈汗令뢄䒎앐襎ネ㬡쟰糇拓ᡫ懤ㄕ⌔䫋ꤣጺዴ菌殺 [ 152.290245][ T9] usb 5-1: SerialNumber: syz [ 152.298498][ T6346] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 152.298707][ T6346] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 153.602898][ T10] usb 40-1: device descriptor read/8, error -110 [ 153.605079][ T6361] block device autoloading is deprecated and will be removed. [ 153.618617][ T6346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.635246][ T6346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.783640][ T6363] netlink: 'syz.2.88': attribute type 1 has an invalid length. [ 153.786418][ T6363] overlayfs: failed to resolve './bus': -2 [ 153.866006][ T9] usblp0: Disabling reads from problematic bidirectional printer [ 153.894875][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 8 proto 3 vid 0x03F0 pid 0x0004 [ 153.944926][ T9] usb 5-1: USB disconnect, device number 5 [ 153.993238][ T10] usb usb40-port1: attempt power cycle [ 153.995829][ T9] usblp0: removed [ 154.631202][ T10] usb usb40-port1: unable to enumerate USB device [ 154.826649][ T10] usb 2-1: USB disconnect, device number 3 [ 155.291881][ T5896] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 155.409521][ T6378] block nbd4: shutting down sockets [ 155.424182][ T6386] random: crng reseeded on system resumption [ 155.471161][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 155.486163][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.486194][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.486215][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.486255][ T5896] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 155.486276][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.688637][ T6390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.95'. [ 155.944490][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 156.114377][ T5896] usb 1-1: config 0 descriptor?? [ 157.582395][ T6403] netlink: 'syz.1.98': attribute type 1 has an invalid length. [ 159.630814][ T6381] syz.2.93 (6381): drop_caches: 2 [ 161.218918][ T6058] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 161.590995][ T6421] netlink: 'syz.3.100': attribute type 4 has an invalid length. [ 161.688837][ T5896] usbhid 1-1:0.0: can't add hid device: -32 [ 162.093386][ T5896] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 162.231139][ T6058] usb 5-1: Using ep0 maxpacket: 8 [ 162.233765][ T6058] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 162.233783][ T6058] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 162.233795][ T6058] usb 5-1: config 1 interface 0 has no altsetting 0 [ 162.235747][ T6058] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 162.235763][ T6058] usb 5-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 162.235774][ T6058] usb 5-1: Product: syz [ 162.235781][ T6058] usb 5-1: Manufacturer: 폏蹃晡ᘌ疈澢ᢹλ樵ݡᙚ꽂髏韙䛒﷭⃃ᶏ覯뿄ų쎯褈⤗䜚툖萳殯Ȝꃈ㹡䒔肃僂ͣ๾憱롢嬭땶玍艱㒷唞鋫ॉ㸐峻哹ཧꛋᢌ낎ͳ섪뵞謟孌쨳뒮଄ꅵ迲龈汗令뢄䒎앐襎ネ㬡쟰糇拓ᡫ懤ㄕ⌔䫋ꤣጺዴ菌殺 [ 162.235795][ T6058] usb 5-1: SerialNumber: syz [ 162.282679][ T6416] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 162.282971][ T6416] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 162.444781][ T10] usb 1-1: USB disconnect, device number 2 [ 162.518856][ T6412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.538884][ T6412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.043232][ T6425] block nbd0: Attempted send on invalid socket [ 163.043380][ T6425] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 163.101709][ T6058] usblp0: Disabling reads from problematic bidirectional printer [ 163.150891][ T6058] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 8 proto 3 vid 0x03F0 pid 0x0004 [ 163.192109][ T6058] usb 5-1: USB disconnect, device number 6 [ 163.244324][ T6058] usblp0: removed [ 165.153031][ T6442] random: crng reseeded on system resumption [ 169.081098][ T6058] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 169.231334][ T6058] usb 5-1: Using ep0 maxpacket: 32 [ 169.233921][ T6058] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 169.233947][ T6058] usb 5-1: config 0 has no interface number 0 [ 169.233998][ T6058] usb 5-1: config 0 interface 12 has no altsetting 0 [ 169.237107][ T6058] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 169.237134][ T6058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.237151][ T6058] usb 5-1: Product: syz [ 169.237164][ T6058] usb 5-1: Manufacturer: syz [ 169.237176][ T6058] usb 5-1: SerialNumber: syz [ 169.240558][ T6058] usb 5-1: config 0 descriptor?? [ 170.035367][ T6472] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 170.769133][ T6468] netlink: 452 bytes leftover after parsing attributes in process `syz.4.113'. [ 170.848391][ T6058] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 170.848445][ T6058] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 170.848461][ T6058] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 170.848555][ T6058] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 170.896647][ T6058] usb 5-1: USB disconnect, device number 7 [ 171.009628][ T6474] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 172.297052][ T6475] sctp: failed to load transform for md5: -2 [ 175.296087][ T6497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.119'. [ 175.404734][ T6496] syz.3.119 (6496) used greatest stack depth: 17800 bytes left [ 176.111226][ T5896] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 176.193457][ T5926] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 176.271921][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 176.285161][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 176.288665][ T5896] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 176.288692][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.288711][ T5896] usb 5-1: Product: syz [ 176.288723][ T5896] usb 5-1: Manufacturer: syz [ 176.288736][ T5896] usb 5-1: SerialNumber: syz [ 176.356950][ T5896] usb 5-1: config 0 descriptor?? [ 176.368281][ T5896] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 176.368300][ T5896] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 176.968598][ T5896] em28xx 5-1:0.0: chip ID is em2765 [ 177.773651][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 177.951618][ T5896] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 177.953215][ T5896] em28xx 5-1:0.0: board has no eeprom [ 178.796537][ T5896] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 178.796566][ T5896] em28xx 5-1:0.0: dvb set to bulk mode. [ 178.980528][ T6312] em28xx 5-1:0.0: Binding DVB extension [ 179.097334][ T5896] usb 5-1: USB disconnect, device number 8 [ 180.123780][ T5896] em28xx 5-1:0.0: Disconnecting em28xx [ 181.227119][ T6514] netlink: 56 bytes leftover after parsing attributes in process `syz.0.123'. [ 181.386944][ T6312] em28xx 5-1:0.0: Registering input extension [ 181.489578][ T5896] em28xx 5-1:0.0: Closing input extension [ 182.747030][ T6510] block device autoloading is deprecated and will be removed. [ 182.814978][ T5926] usb 3-1: device descriptor read/all, error -110 [ 182.951277][ T5926] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 183.081249][ T5926] usb 3-1: device descriptor read/64, error -32 [ 183.169857][ T5896] em28xx 5-1:0.0: Freeing device [ 183.214360][ T5926] usb usb3-port1: attempt power cycle [ 183.572069][ T5926] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 183.618333][ T5926] usb 3-1: device descriptor read/8, error -32 [ 183.891160][ T5926] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 183.915948][ T5926] usb 3-1: device descriptor read/8, error -32 [ 184.051075][ T5926] usb usb3-port1: unable to enumerate USB device [ 184.117796][ T6539] process 'syz.1.127' launched '/dev/fd/7' with NULL argv: empty string added [ 184.497145][ T6493] raw-gadget.0 gadget.2: failed to queue disconnect event [ 185.749761][ T6519] syz.4.124 (6519): drop_caches: 2 [ 185.846697][ T6546] sctp: failed to load transform for md5: -2 [ 187.861124][ T44] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 188.126050][ T44] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 188.126077][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.126095][ T44] usb 5-1: config 0 has no interface number 0 [ 188.128891][ T44] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 188.128918][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.128936][ T44] usb 5-1: Product: syz [ 188.128949][ T44] usb 5-1: Manufacturer: syz [ 188.128963][ T44] usb 5-1: SerialNumber: syz [ 188.832896][ T44] usb 5-1: config 0 descriptor?? [ 188.838442][ T44] ims_pcu 5-1:0.41: Missing CDC union descriptor [ 188.838477][ T44] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 189.171223][ T6560] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 189.171241][ T6560] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 189.172748][ T6560] vhci_hcd vhci_hcd.0: Device attached [ 189.211932][ T37] audit: type=1800 audit(1758529945.923:26): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.131" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 189.441209][ T44] usb 38-1: SetAddress Request (2) to port 0 [ 189.441287][ T44] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 189.462272][ T6565] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 189.512375][ T6564] vhci_hcd: connection closed [ 189.516181][ T1477] vhci_hcd: stop threads [ 189.516200][ T1477] vhci_hcd: release socket [ 189.516263][ T1477] vhci_hcd: disconnect device [ 189.614061][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.636211][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.469061][ T6312] usb 5-1: USB disconnect, device number 9 [ 191.973731][ T6058] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 192.055208][ T6620] pim6reg: entered allmulticast mode [ 192.153177][ T6058] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 192.153239][ T6058] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.153260][ T6058] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 192.153301][ T6058] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.153323][ T6058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.160041][ T6058] usbtmc 3-1:16.0: bulk endpoints not found [ 194.334808][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.334854][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.428398][ T5851] usb 3-1: USB disconnect, device number 9 [ 194.491772][ T44] usb 38-1: device descriptor read/8, error -110 [ 194.894169][ T44] usb usb38-port1: attempt power cycle [ 195.531193][ T44] usb usb38-port1: unable to enumerate USB device [ 195.752106][ T6651] netlink: 'syz.3.144': attribute type 1 has an invalid length. [ 195.812445][ T6651] overlayfs: missing 'lowerdir' [ 195.898981][ T6651] binder: BINDER_SET_CONTEXT_MGR already set [ 195.898991][ T6651] binder: 6650:6651 ioctl 4018620d 2000000002c0 returned -16 [ 196.454648][ T6668] netlink: 56 bytes leftover after parsing attributes in process `syz.2.149'. [ 196.859806][ T6653] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 196.863249][ T6653] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 196.877103][ T6653] vhci_hcd vhci_hcd.0: Device attached [ 196.948944][ T6653] autofs: Unknown parameter '0x0000000000000000' [ 197.161143][ T1245] usb 34-1: SetAddress Request (2) to port 0 [ 197.161225][ T1245] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 197.320245][ T6692] block nbd0: shutting down sockets [ 197.420934][ T6672] vhci_hcd: connection reset by peer [ 197.467368][ T3664] vhci_hcd: stop threads [ 197.467385][ T3664] vhci_hcd: release socket [ 197.471505][ T3664] vhci_hcd: disconnect device [ 197.642303][ T6058] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 197.991484][ T6058] usb 3-1: Using ep0 maxpacket: 8 [ 197.995898][ T6058] usb 3-1: unable to get BOS descriptor or descriptor too short [ 198.012590][ T6058] usb 3-1: config 4 interface 0 has no altsetting 0 [ 198.064443][ T6058] usb 3-1: string descriptor 0 read error: -22 [ 198.064589][ T6058] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 198.064610][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.368803][ T6058] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 198.511439][ T6058] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 198.512260][ T6058] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 198.512315][ T6058] usb 3-1: media controller created [ 199.843637][ T6058] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.077654][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 200.209179][ T6058] zl10353_read_register: readreg error (reg=127, ret==0) [ 200.525127][ T6058] usb 3-1: USB disconnect, device number 10 [ 201.919326][ T6733] netlink: 'syz.3.158': attribute type 1 has an invalid length. [ 201.942272][ T6733] overlayfs: missing 'lowerdir' [ 202.251274][ T1245] usb 34-1: device descriptor read/8, error -110 [ 202.819905][ T1245] usb usb34-port1: attempt power cycle [ 202.872519][ T37] audit: type=1326 audit(1758529959.613:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6755 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7671ec29 code=0x7ffc0000 [ 202.872550][ T37] audit: type=1326 audit(1758529959.613:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6755 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7671ec29 code=0x7ffc0000 [ 202.873586][ T37] audit: type=1326 audit(1758529959.623:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6755 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e7671d590 code=0x7ffc0000 [ 202.873622][ T37] audit: type=1326 audit(1758529959.623:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6755 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e7671e82b code=0x7ffc0000 [ 202.873671][ T37] audit: type=1326 audit(1758529959.623:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6755 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e7671e82b code=0x7ffc0000 [ 202.877214][ T37] audit: type=1326 audit(1758529959.623:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6755 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e7671e82b code=0x7ffc0000 [ 202.877241][ T37] audit: type=1326 audit(1758529959.623:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6755 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e7671e82b code=0x7ffc0000 [ 202.891492][ T44] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 202.985712][ T37] audit: type=1326 audit(1758529959.733:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6755 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e7671e82b code=0x7ffc0000 [ 203.047555][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 203.050315][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.050343][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.050364][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 203.050403][ T44] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 203.050425][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.055154][ T37] audit: type=1326 audit(1758529959.813:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6755 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e7671e82b code=0x7ffc0000 [ 203.099394][ T44] usb 3-1: config 0 descriptor?? [ 203.111112][ T6159] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 203.111947][ T37] audit: type=1326 audit(1758529959.863:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6755 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e7671e82b code=0x7ffc0000 [ 203.180085][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 203.241481][ T6159] usb 5-1: device descriptor read/64, error -71 [ 203.383533][ T1245] usb usb34-port1: unable to enumerate USB device [ 203.733220][ T6159] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 203.759182][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.759208][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 203.759261][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 203.759283][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.088980][ T6761] netlink: 'syz.1.165': attribute type 4 has an invalid length. [ 204.713140][ T6159] usb 5-1: device descriptor read/64, error -71 [ 204.779935][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 204.780061][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 204.821785][ T6159] usb usb5-port1: attempt power cycle [ 204.833117][ T9] usb 1-1: config 0 descriptor?? [ 204.879177][ T44] usb 3-1: USB disconnect, device number 11 [ 204.955344][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 204.955392][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 205.242547][ T6751] netlink: 'syz.0.159': attribute type 6 has an invalid length. [ 205.261193][ T6159] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 205.282174][ T6159] usb 5-1: device descriptor read/8, error -71 [ 205.361542][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 205.365447][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 205.365503][ T9] usb 1-1: media controller created [ 205.460917][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.521647][ T6159] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 205.544861][ T6159] usb 5-1: device descriptor read/8, error -71 [ 205.651630][ T6159] usb usb5-port1: unable to enumerate USB device [ 205.725996][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 205.726045][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 205.866846][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 206.803381][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 206.803403][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 206.811064][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 206.811102][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 206.811123][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 206.811145][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 206.942293][ T6765] ALSA: mixer_oss: invalid OSS volume '' [ 207.061748][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 207.061777][ T9] dvb-usb: error while querying for an remote control event. [ 207.357612][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 207.357645][ T9] dvb-usb: error while querying for an remote control event. [ 208.469076][ T6058] dvb-usb: bulk message failed: -22 (1/0) [ 208.469105][ T6058] dvb-usb: error while querying for an remote control event. [ 209.656515][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 209.656543][ T9] dvb-usb: error while querying for an remote control event. [ 209.936689][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 209.936720][ T5926] dvb-usb: error while querying for an remote control event. [ 210.075876][ T6786] netlink: 'syz.1.172': attribute type 1 has an invalid length. [ 210.091393][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 210.091439][ T5926] dvb-usb: error while querying for an remote control event. [ 210.093236][ T6786] overlayfs: missing 'lowerdir' [ 210.251135][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 210.251175][ T9] dvb-usb: error while querying for an remote control event. [ 210.841578][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.174'. [ 211.086762][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 211.086795][ T9] dvb-usb: error while querying for an remote control event. [ 211.241719][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 211.241749][ T9] dvb-usb: error while querying for an remote control event. [ 211.411115][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 211.411146][ T9] dvb-usb: error while querying for an remote control event. [ 211.578720][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 211.578750][ T9] dvb-usb: error while querying for an remote control event. [ 211.796804][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 211.796837][ T9] dvb-usb: error while querying for an remote control event. [ 211.951101][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 211.951130][ T9] dvb-usb: error while querying for an remote control event. [ 212.140491][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 212.140523][ T9] dvb-usb: error while querying for an remote control event. [ 212.291249][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 212.291270][ T5926] dvb-usb: error while querying for an remote control event. [ 212.446772][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 212.446784][ T37] audit: type=1326 audit(1758529969.193:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238b92ec29 code=0x7ffc0000 [ 212.448470][ T37] audit: type=1326 audit(1758529969.193:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238b92ec29 code=0x7ffc0000 [ 212.448664][ T37] audit: type=1326 audit(1758529969.193:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f238b92d590 code=0x7ffc0000 [ 212.449160][ T37] audit: type=1326 audit(1758529969.193:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f238b92e82b code=0x7ffc0000 [ 212.449928][ T37] audit: type=1326 audit(1758529969.193:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f238b92e82b code=0x7ffc0000 [ 212.451124][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 212.451142][ T9] dvb-usb: error while querying for an remote control event. [ 212.539449][ T37] audit: type=1326 audit(1758529969.193:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f238b92e82b code=0x7ffc0000 [ 212.539499][ T37] audit: type=1326 audit(1758529969.283:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f238b92e82b code=0x7ffc0000 [ 212.611089][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 212.611120][ T9] dvb-usb: error while querying for an remote control event. [ 212.681111][ T5926] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 212.688408][ T37] audit: type=1326 audit(1758529969.433:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f238b92e82b code=0x7ffc0000 [ 212.689694][ T37] audit: type=1326 audit(1758529969.433:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f238b92e82b code=0x7ffc0000 [ 212.693310][ T37] audit: type=1326 audit(1758529969.453:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f238b92e82b code=0x7ffc0000 [ 212.695566][ T5896] usb 1-1: USB disconnect, device number 3 [ 212.880520][ T6806] fuse: Bad value for 'fd' [ 212.885599][ T5926] usb 4-1: device descriptor read/64, error -71 [ 213.141142][ T5926] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 213.146183][ T5896] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 213.271080][ T5926] usb 4-1: device descriptor read/64, error -71 [ 213.381526][ T5926] usb usb4-port1: attempt power cycle [ 213.795812][ T5926] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 213.812401][ T5926] usb 4-1: device descriptor read/8, error -71 [ 214.272792][ T6827] netlink: 'syz.4.182': attribute type 4 has an invalid length. [ 214.861958][ T5926] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 214.963797][ T5926] usb 4-1: device descriptor read/8, error -71 [ 215.088218][ T5926] usb usb4-port1: unable to enumerate USB device [ 216.573233][ T6836] netlink: 'syz.3.186': attribute type 1 has an invalid length. [ 216.574692][ T6836] overlayfs: missing 'lowerdir' [ 216.631422][ T6837] binder: BINDER_SET_CONTEXT_MGR already set [ 216.631432][ T6837] binder: 6835:6837 ioctl 4018620d 2000000002c0 returned -16 [ 217.314581][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.3.187'. [ 218.391335][ T6851] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.190'. [ 218.662229][ T44] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 218.741972][ T5896] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 218.821090][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 218.827847][ T44] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 218.827870][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.838611][ T44] pvrusb2: Hardware description: Terratec Grabster AV400 [ 218.838628][ T44] pvrusb2: ********** [ 218.838634][ T44] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 218.838645][ T44] pvrusb2: Important functionality might not be entirely working. [ 218.838653][ T44] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 218.838663][ T44] pvrusb2: ********** [ 219.271073][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 219.330488][ T2368] pvrusb2: Invalid write control endpoint [ 219.383828][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.383860][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.383880][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 219.383922][ T5896] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 219.383943][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.403148][ T5896] usb 2-1: config 0 descriptor?? [ 219.597802][ T6848] pvrusb2: Invalid write control endpoint [ 219.734606][ T2368] pvrusb2: Invalid write control endpoint [ 219.734617][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 219.734621][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 219.735246][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 219.735257][ T2368] pvrusb2: Device being rendered inoperable [ 219.736759][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 219.737268][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 219.823269][ T2368] pvrusb2: Attached sub-driver cx25840 [ 219.823280][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 219.823285][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 222.144887][ T6871] netlink: 56 bytes leftover after parsing attributes in process `syz.2.194'. [ 224.502012][ T6876] random: crng reseeded on system resumption [ 224.512231][ T5896] usbhid 2-1:0.0: can't add hid device: -32 [ 224.512364][ T5896] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 225.389091][ T5896] usb 5-1: USB disconnect, device number 14 [ 225.493481][ T6312] usb 2-1: USB disconnect, device number 4 [ 226.646361][ T6878] ALSA: mixer_oss: invalid OSS volume '' [ 227.497886][ T6894] netlink: 'syz.1.198': attribute type 4 has an invalid length. [ 228.678679][ T6903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.200'. [ 229.779074][ T6910] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 232.038886][ T6921] pim6reg: entered allmulticast mode [ 232.191885][ T6914] block nbd4: shutting down sockets [ 232.421085][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 232.591005][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 232.598428][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 232.598446][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.718247][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 232.721166][ T9] pvrusb2: ********** [ 232.721176][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 232.721187][ T9] pvrusb2: Important functionality might not be entirely working. [ 232.721194][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 232.721203][ T9] pvrusb2: ********** [ 232.937917][ T2368] pvrusb2: Invalid write control endpoint [ 233.020262][ T2368] pvrusb2: Invalid write control endpoint [ 233.020272][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 233.020277][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 233.020281][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 233.020286][ T2368] pvrusb2: Device being rendered inoperable [ 233.020309][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 233.020338][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 233.125601][ T6927] pvrusb2: Attempted to execute control transfer when device not ok [ 233.148809][ T2368] pvrusb2: Attached sub-driver cx25840 [ 233.148825][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 233.148834][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 236.159874][ T6937] ALSA: mixer_oss: invalid OSS volume '' [ 239.111137][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 239.583114][ T6964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.214'. [ 240.131089][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 240.134252][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.134281][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.134399][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 240.134441][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 240.134463][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.293268][ T9] usb 2-1: config 0 descriptor?? [ 242.252035][ T6976] netlink: 'syz.4.218': attribute type 4 has an invalid length. [ 242.363148][ T5926] usb 3-1: USB disconnect, device number 12 [ 246.162790][ T9] usbhid 2-1:0.0: can't add hid device: -32 [ 246.162922][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 246.587529][ T6997] netlink: 68 bytes leftover after parsing attributes in process `syz.0.222'. [ 249.630554][ T6312] usb 2-1: USB disconnect, device number 5 [ 250.155368][ T7018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.226'. [ 251.091222][ T5896] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 251.276236][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 251.278728][ T5896] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 251.278753][ T5896] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 251.278772][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.278789][ T5896] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 251.278826][ T5896] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 251.278852][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.284772][ T5896] usb 3-1: config 0 descriptor?? [ 251.409228][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 251.409240][ T37] audit: type=1326 audit(1758530008.153:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7029 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7671ec29 code=0x7ffc0000 [ 251.409270][ T37] audit: type=1326 audit(1758530008.153:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7029 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0e7671ec29 code=0x7ffc0000 [ 251.409291][ T37] audit: type=1326 audit(1758530008.153:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7029 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7671ec29 code=0x7ffc0000 [ 251.537145][ T37] audit: type=1326 audit(1758530008.283:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7029 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0e7671ec29 code=0x7ffc0000 [ 251.537591][ T37] audit: type=1326 audit(1758530008.283:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7029 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7671ec29 code=0x7ffc0000 [ 251.537618][ T37] audit: type=1326 audit(1758530008.283:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7029 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f0e7671ec29 code=0x7ffc0000 [ 251.537639][ T37] audit: type=1326 audit(1758530008.283:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7029 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7671ec29 code=0x7ffc0000 [ 251.577870][ T37] audit: type=1326 audit(1758530008.283:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7029 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0e7671ec29 code=0x7ffc0000 [ 251.653560][ T37] audit: type=1326 audit(1758530008.403:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7029 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7671ec29 code=0x7ffc0000 [ 251.691330][ T37] audit: type=1326 audit(1758530008.443:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7029 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e7671ec29 code=0x7ffc0000 [ 252.812599][ T7042] netlink: 'syz.4.231': attribute type 4 has an invalid length. [ 253.437813][ T7043] overlayfs: failed to resolve './bus': -2 [ 253.458391][ T7045] netlink: 68 bytes leftover after parsing attributes in process `syz.4.233'. [ 253.573161][ T7046] binder: 7039:7046 ioctl c0306201 2000000001c0 returned -14 [ 253.729722][ T7032] syz.1.228 (7032): drop_caches: 2 [ 253.861191][ T44] usb 3-1: USB disconnect, device number 13 [ 256.108024][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.108102][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.114641][ T7072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.238'. [ 257.802667][ T5851] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 258.053701][ T5851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.053736][ T5851] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 258.053773][ T5851] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 258.053786][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.072937][ T5851] usb 3-1: config 0 descriptor?? [ 258.094550][ T5851] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 258.094579][ T5851] dvb-usb: bulk message failed: -22 (3/0) [ 258.100385][ T5851] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 258.172340][ T5851] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 258.172377][ T5851] usb 3-1: media controller created [ 258.174014][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.212933][ T5851] dvb-usb: bulk message failed: -22 (6/0) [ 258.212985][ T5851] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 258.265109][ T5851] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 258.269510][ T5851] dvb-usb: schedule remote query interval to 150 msecs. [ 258.269525][ T5851] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 258.296207][ T7069] dvb-usb: bulk message failed: -22 (2/0) [ 258.296902][ T7069] netlink: 'syz.2.239': attribute type 6 has an invalid length. [ 258.445215][ T5851] dvb-usb: bulk message failed: -22 (1/0) [ 258.445236][ T5851] dvb-usb: error while querying for an remote control event. [ 259.391344][ T5851] dvb-usb: bulk message failed: -22 (1/0) [ 259.391375][ T5851] dvb-usb: error while querying for an remote control event. [ 259.562813][ T5851] dvb-usb: bulk message failed: -22 (1/0) [ 259.562844][ T5851] dvb-usb: error while querying for an remote control event. [ 259.721320][ T5851] dvb-usb: bulk message failed: -22 (1/0) [ 259.721349][ T5851] dvb-usb: error while querying for an remote control event. [ 259.800216][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 259.800232][ T37] audit: type=1326 audit(1758530016.543:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a809ec29 code=0x7ffc0000 [ 259.800273][ T37] audit: type=1326 audit(1758530016.543:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff9a809ec29 code=0x7ffc0000 [ 259.800310][ T37] audit: type=1326 audit(1758530016.543:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a809ec29 code=0x7ffc0000 [ 259.801350][ T37] audit: type=1326 audit(1758530016.543:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a809ec29 code=0x7ffc0000 [ 259.803393][ T37] audit: type=1326 audit(1758530016.543:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff9a809ec29 code=0x7ffc0000 [ 259.803436][ T37] audit: type=1326 audit(1758530016.543:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a809ec29 code=0x7ffc0000 [ 259.803467][ T37] audit: type=1326 audit(1758530016.543:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a809ec29 code=0x7ffc0000 [ 259.803502][ T37] audit: type=1326 audit(1758530016.553:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff9a809ec29 code=0x7ffc0000 [ 259.803539][ T37] audit: type=1326 audit(1758530016.553:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a809ec29 code=0x7ffc0000 [ 259.803579][ T37] audit: type=1326 audit(1758530016.553:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a809ec29 code=0x7ffc0000 [ 259.881110][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 259.881140][ T9] dvb-usb: error while querying for an remote control event. [ 260.043452][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 260.043474][ T9] dvb-usb: error while querying for an remote control event. [ 260.211102][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 260.211133][ T9] dvb-usb: error while querying for an remote control event. [ 260.383717][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 260.383739][ T9] dvb-usb: error while querying for an remote control event. [ 260.541149][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 260.541170][ T9] dvb-usb: error while querying for an remote control event. [ 260.638771][ T6312] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 260.711173][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 260.711203][ T9] dvb-usb: error while querying for an remote control event. [ 260.851251][ T6312] usb 4-1: Using ep0 maxpacket: 32 [ 260.853099][ T6312] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.853115][ T6312] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 260.853130][ T6312] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.853148][ T6312] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 260.853160][ T6312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.856932][ T6312] usb 4-1: config 0 descriptor?? [ 260.871096][ T5851] dvb-usb: bulk message failed: -22 (1/0) [ 260.879503][ T5851] dvb-usb: error while querying for an remote control event. [ 260.885528][ T5851] usb 3-1: USB disconnect, device number 14 [ 261.052272][ T7087] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 261.052299][ T7087] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 261.106318][ T7087] vhci_hcd vhci_hcd.0: Device attached [ 261.170703][ T5851] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 261.281201][ T44] vhci_hcd: vhci_device speed not set [ 261.297245][ T7085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.243'. [ 261.341215][ T44] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 261.420702][ T6312] usbhid 4-1:0.0: can't add hid device: -71 [ 261.420822][ T6312] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 261.491574][ T6312] usb 4-1: USB disconnect, device number 7 [ 261.601120][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 261.623147][ T7094] overlayfs: failed to resolve './bus': -2 [ 261.677408][ T7095] binder: BINDER_SET_CONTEXT_MGR already set [ 261.677418][ T7095] binder: 7093:7095 ioctl 4018620d 2000000002c0 returned -16 [ 261.762891][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 261.762933][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.809165][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 261.809183][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 261.809194][ T9] usb 2-1: Manufacturer: syz [ 261.841661][ T9] usb 2-1: config 0 descriptor?? [ 261.852398][ T7097] netlink: 68 bytes leftover after parsing attributes in process `syz.0.246'. [ 261.961120][ T9] rc_core: IR keymap rc-hauppauge not found [ 261.961142][ T9] Registered IR keymap rc-empty [ 261.963068][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 261.996197][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 263.662850][ T7103] fuse: Bad value for 'fd' [ 263.902391][ T5851] IPVS: starting estimator thread 0... [ 264.004225][ T7109] IPVS: using max 13 ests per chain, 31200 per kthread [ 264.031578][ T9] usb 2-1: USB disconnect, device number 6 [ 264.054305][ T7089] vhci_hcd: connection reset by peer [ 264.125278][ T12] vhci_hcd: stop threads [ 264.125293][ T12] vhci_hcd: release socket [ 264.126016][ T12] vhci_hcd: disconnect device [ 264.261113][ T6312] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 264.441543][ T6312] usb 4-1: Using ep0 maxpacket: 8 [ 264.449115][ T6312] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 264.449144][ T6312] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 264.449167][ T6312] usb 4-1: config 1 interface 0 has no altsetting 0 [ 264.461518][ T6312] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 264.461546][ T6312] usb 4-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 264.461565][ T6312] usb 4-1: Product: syz [ 264.461579][ T6312] usb 4-1: Manufacturer: 폏蹃晡ᘌ疈澢ᢹλ樵ݡᙚ꽂髏韙䛒﷭⃃ᶏ覯뿄ų쎯褈⤗䜚툖萳殯Ȝꃈ㹡䒔肃僂ͣ๾憱롢嬭땶玍艱㒷唞鋫ॉ㸐峻哹ཧꛋᢌ낎ͳ섪뵞謟孌쨳뒮଄ꅵ迲龈汗令뢄䒎앐襎ネ㬡쟰糇拓ᡫ懤ㄕ⌔䫋ꤣጺዴ菌殺 [ 264.461605][ T6312] usb 4-1: SerialNumber: syz [ 264.597829][ T7110] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 264.597981][ T7110] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 264.635025][ T7112] block nbd4: shutting down sockets [ 264.806605][ T7110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.808447][ T7110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.028612][ T6312] usblp0: Disabling reads from problematic bidirectional printer [ 265.062426][ T6312] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 8 proto 3 vid 0x03F0 pid 0x0004 [ 265.094035][ T6312] usb 4-1: USB disconnect, device number 8 [ 265.181827][ T6312] usblp0: removed [ 265.553717][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.608469][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.868326][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.910514][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.078041][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.340199][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.448720][ T7119] syz.2.251 (7119): drop_caches: 2 [ 266.511140][ T44] vhci_hcd: vhci_device speed not set [ 266.818862][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.994893][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.181221][ T7131] netlink: 'syz.1.253': attribute type 4 has an invalid length. [ 267.190686][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.742988][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.281170][ T44] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 268.436971][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 268.447708][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.447765][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.447787][ T44] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 268.447799][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.509215][ T44] usb 5-1: config 0 descriptor?? [ 268.937623][ T44] ft260 0003:0403:6030.0003: unknown main item tag 0x7 [ 269.111956][ T7144] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.258'. [ 269.132458][ T44] ft260 0003:0403:6030.0003: chip code: 6424 8183 [ 269.168111][ T7144] debugfs: '`] Iq!>s*!)' already exists in 'ieee80211' [ 269.334323][ T44] ft260 0003:0403:6030.0003: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 269.542091][ T44] ft260 0003:0403:6030.0003: failed to retrieve status: -32, no wakeup [ 269.549065][ T44] ft260 0003:0403:6030.0003: failed to retrieve status: -71 [ 269.549543][ T44] ft260 0003:0403:6030.0003: failed to reset I2C controller: -71 [ 269.621486][ T44] usb 5-1: USB disconnect, device number 15 [ 270.148709][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.702094][ T7153] random: crng reseeded on system resumption [ 272.027634][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'. [ 272.061493][ T7160] team0: No ports can be present during mode change [ 272.061988][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'. [ 276.293435][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 276.794636][ T7185] netlink: 'syz.1.266': attribute type 4 has an invalid length. [ 277.294321][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 277.305958][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 277.341755][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 277.341784][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.341802][ T9] usb 3-1: Product: syz [ 277.341816][ T9] usb 3-1: Manufacturer: syz [ 277.341829][ T9] usb 3-1: SerialNumber: syz [ 277.349360][ T9] usb 3-1: config 0 descriptor?? [ 277.391462][ T7180] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 277.398515][ T7180] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 277.432024][ T7180] vhci_hcd vhci_hcd.0: Device attached [ 277.437980][ T9] usb 3-1: can't set config #0, error -71 [ 277.469340][ T7160] team0 (unregistering): Port device team_slave_0 removed [ 277.486861][ T7160] team0 (unregistering): Port device team_slave_1 removed [ 277.499377][ T7194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.270'. [ 277.666372][ T9] usb 3-1: USB disconnect, device number 15 [ 277.760019][ T5851] vhci_hcd: vhci_device speed not set [ 277.823306][ T5851] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 277.901132][ T1245] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 278.171264][ T6312] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 278.270721][ T7209] random: crng reseeded on system resumption [ 278.321188][ T6312] usb 1-1: Using ep0 maxpacket: 8 [ 278.340175][ T6312] usb 1-1: unable to get BOS descriptor or descriptor too short [ 278.346340][ T6312] usb 1-1: config 8 has an invalid interface number: 24 but max is 0 [ 278.346366][ T6312] usb 1-1: config 8 has no interface number 0 [ 278.346414][ T6312] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 278.346495][ T6312] usb 1-1: config 8 interface 24 has no altsetting 0 [ 278.373242][ T6312] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 278.373301][ T6312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.373312][ T6312] usb 1-1: Product: syz [ 278.373319][ T6312] usb 1-1: Manufacturer: syz [ 278.373327][ T6312] usb 1-1: SerialNumber: syz [ 278.450508][ T1245] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 278.450565][ T1245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.604412][ T1245] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 278.604443][ T1245] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 278.604462][ T1245] usb 4-1: Manufacturer: syz [ 279.042449][ T1245] usb 4-1: config 0 descriptor?? [ 279.899512][ T7188] vhci_hcd: connection reset by peer [ 279.907275][ T1245] usb 4-1: can't set config #0, error -71 [ 279.909767][ T1245] usb 4-1: USB disconnect, device number 9 [ 279.915464][ T3006] vhci_hcd: stop threads [ 279.915482][ T3006] vhci_hcd: release socket [ 279.915660][ T3006] vhci_hcd: disconnect device [ 283.312491][ T5851] vhci_hcd: vhci_device speed not set [ 284.316855][ T6312] vmk80xx 1-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 285.578496][ T5851] usb 1-1: USB disconnect, device number 4 [ 288.207031][ T7247] overlayfs: failed to resolve './bus': -2 [ 288.313018][ T7249] binder: BINDER_SET_CONTEXT_MGR already set [ 288.313028][ T7249] binder: 7245:7249 ioctl 4018620d 2000000002c0 returned -16 [ 288.611190][ T5851] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 288.761195][ T5851] usb 3-1: Using ep0 maxpacket: 8 [ 288.767009][ T5851] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 288.767027][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.821735][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'. [ 288.832598][ T7253] team0: No ports can be present during mode change [ 288.854717][ T5851] pvrusb2: Hardware description: Terratec Grabster AV400 [ 288.854734][ T5851] pvrusb2: ********** [ 288.854741][ T5851] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 288.854752][ T5851] pvrusb2: Important functionality might not be entirely working. [ 288.854760][ T5851] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 288.854771][ T5851] pvrusb2: ********** [ 288.856147][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.283'. [ 288.968491][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.282'. [ 289.095325][ T2368] pvrusb2: Invalid write control endpoint [ 289.374143][ T7259] random: crng reseeded on system resumption [ 290.013285][ T2368] pvrusb2: Invalid write control endpoint [ 290.013298][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 290.013306][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 290.013314][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 290.013322][ T2368] pvrusb2: Device being rendered inoperable [ 290.013361][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 290.013411][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 290.014432][ T2368] pvrusb2: Attached sub-driver cx25840 [ 290.014442][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 290.014451][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 290.050322][ T7248] pvrusb2: Attempted to execute control transfer when device not ok [ 292.456179][ T5851] usb 3-1: USB disconnect, device number 16 [ 293.002998][ T7284] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 293.003016][ T7284] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 293.003108][ T7284] vhci_hcd vhci_hcd.0: Device attached [ 293.041296][ T7253] team0 (unregistering): Port device team_slave_0 removed [ 293.046491][ T7284] autofs: Unknown parameter '0x0000000000000000' [ 293.105747][ T7253] team0 (unregistering): Port device team_slave_1 removed [ 293.274112][ T7290] fuse: Bad value for 'fd' [ 293.617681][ T6312] usb 34-1: SetAddress Request (6) to port 0 [ 293.617734][ T6312] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 293.704083][ T7289] block nbd0: shutting down sockets [ 293.767190][ T7267] syzkaller0: entered promiscuous mode [ 293.767218][ T7267] syzkaller0: entered allmulticast mode [ 293.818681][ T7287] vhci_hcd: connection reset by peer [ 293.819282][ T205] vhci_hcd: stop threads [ 293.819297][ T205] vhci_hcd: release socket [ 293.820356][ T205] vhci_hcd: disconnect device [ 294.351125][ T44] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 294.523858][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 294.527925][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 294.546222][ T44] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 294.546239][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.546250][ T44] usb 4-1: Product: syz [ 294.546257][ T44] usb 4-1: Manufacturer: syz [ 294.546264][ T44] usb 4-1: SerialNumber: syz [ 294.583689][ T1245] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 294.604266][ T44] usb 4-1: config 0 descriptor?? [ 294.626160][ T44] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 294.626192][ T44] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 294.741293][ T1245] usb 2-1: Using ep0 maxpacket: 16 [ 295.273538][ T44] em28xx 4-1:0.0: chip ID is em2765 [ 295.974674][ T44] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 295.974694][ T44] em28xx 4-1:0.0: board has no eeprom [ 296.103504][ T44] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 296.103531][ T44] em28xx 4-1:0.0: dvb set to bulk mode. [ 296.106746][ T6159] em28xx 4-1:0.0: Binding DVB extension [ 296.192720][ T44] usb 4-1: USB disconnect, device number 10 [ 296.221666][ T44] em28xx 4-1:0.0: Disconnecting em28xx [ 296.595090][ T6159] em28xx 4-1:0.0: Registering input extension [ 296.596782][ T44] em28xx 4-1:0.0: Closing input extension [ 296.935354][ T44] em28xx 4-1:0.0: Freeing device [ 298.651305][ T6312] usb 34-1: device descriptor read/8, error -110 [ 299.043132][ T6312] usb usb34-port1: attempt power cycle [ 299.854772][ T1245] usb 2-1: unable to get BOS descriptor or descriptor too short [ 299.854830][ T1245] usb 2-1: no configurations [ 299.854837][ T1245] usb 2-1: can't read configurations, error -22 [ 300.031157][ T1245] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 300.161547][ T1245] usb 2-1: device descriptor read/64, error -32 [ 300.223843][ T6312] usb usb34-port1: unable to enumerate USB device [ 300.271997][ T1245] usb usb2-port1: attempt power cycle [ 300.611734][ T1245] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 300.633526][ T1245] usb 2-1: device descriptor read/8, error -32 [ 300.871285][ T1245] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 300.891568][ T1245] usb 2-1: device descriptor read/8, error -32 [ 301.001887][ T1245] usb usb2-port1: unable to enumerate USB device [ 301.743607][ T7333] syz.3.297 (7333): drop_caches: 2 [ 302.271107][ T1245] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 302.511585][ T1245] usb 3-1: Using ep0 maxpacket: 8 [ 302.518791][ T1245] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 302.518818][ T1245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.553261][ T1245] pvrusb2: Hardware description: Terratec Grabster AV400 [ 302.553273][ T1245] pvrusb2: ********** [ 302.553277][ T1245] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 302.553282][ T1245] pvrusb2: Important functionality might not be entirely working. [ 302.553287][ T1245] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 302.553292][ T1245] pvrusb2: ********** [ 302.816649][ T2368] pvrusb2: Invalid write control endpoint [ 303.008780][ T7337] pvrusb2: Invalid write control endpoint [ 303.139513][ T7342] overlay: Unknown parameter '/' [ 304.052425][ T2368] pvrusb2: Invalid write control endpoint [ 304.052436][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 304.052441][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 304.052444][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 304.052449][ T2368] pvrusb2: Device being rendered inoperable [ 304.052473][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 304.052499][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 304.054832][ T2368] pvrusb2: Attached sub-driver cx25840 [ 304.054841][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 304.054846][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 304.562790][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 304.591116][ T1245] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 304.743102][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 305.012224][ T7356] syzkaller0: entered promiscuous mode [ 305.012252][ T7356] syzkaller0: entered allmulticast mode [ 305.018185][ T1245] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.018210][ T1245] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 305.018265][ T1245] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 305.018287][ T1245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.097622][ T1245] usb 1-1: config 0 descriptor?? [ 305.112268][ T1245] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 305.112298][ T1245] dvb-usb: bulk message failed: -22 (3/0) [ 305.134692][ T1245] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 305.138196][ T1245] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 305.138230][ T1245] usb 1-1: media controller created [ 305.139675][ T1245] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.218902][ T1245] dvb-usb: bulk message failed: -22 (6/0) [ 305.218950][ T1245] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 305.261223][ T1245] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 305.300297][ T1245] dvb-usb: schedule remote query interval to 150 msecs. [ 305.300313][ T1245] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 305.422115][ T7348] pvrusb2: Attempted to execute control transfer when device not ok [ 305.426762][ T7348] netlink: 'syz.0.300': attribute type 6 has an invalid length. [ 305.451862][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 305.451883][ T1245] dvb-usb: error while querying for an remote control event. [ 305.581703][ T10] usb 3-1: USB disconnect, device number 17 [ 305.611258][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 305.611291][ T1245] dvb-usb: error while querying for an remote control event. [ 305.852432][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 305.852455][ T1245] dvb-usb: error while querying for an remote control event. [ 306.011269][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 306.011292][ T1245] dvb-usb: error while querying for an remote control event. [ 306.176553][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 306.176577][ T1245] dvb-usb: error while querying for an remote control event. [ 306.331196][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 306.331226][ T1245] dvb-usb: error while querying for an remote control event. [ 306.491702][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 306.491725][ T1245] dvb-usb: error while querying for an remote control event. [ 306.691253][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 306.691274][ T1245] dvb-usb: error while querying for an remote control event. [ 306.851118][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 306.851150][ T1245] dvb-usb: error while querying for an remote control event. [ 307.011096][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 307.011129][ T1245] dvb-usb: error while querying for an remote control event. [ 307.171172][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 307.171202][ T1245] dvb-usb: error while querying for an remote control event. [ 307.331197][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 307.331229][ T1245] dvb-usb: error while querying for an remote control event. [ 307.491233][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 307.491267][ T1245] dvb-usb: error while querying for an remote control event. [ 307.719943][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 307.719975][ T1245] dvb-usb: error while querying for an remote control event. [ 307.799048][ T7373] overlayfs: failed to resolve './bus': -2 [ 307.842489][ T7373] binder: 7372:7373 ioctl c0306201 2000000001c0 returned -14 [ 307.871151][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 307.871183][ T1245] dvb-usb: error while querying for an remote control event. [ 308.014643][ T1245] usb 1-1: USB disconnect, device number 5 [ 308.233065][ T1245] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 308.383812][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 308.529747][ T7380] block nbd4: shutting down sockets [ 308.551107][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 308.610580][ T1245] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 308.634432][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 308.639951][ T10] usb 3-1: config 4 interface 0 has no altsetting 0 [ 308.645365][ T10] usb 3-1: string descriptor 0 read error: -22 [ 308.645517][ T10] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 308.645540][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.682544][ T10] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 308.767325][ T1245] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.767356][ T1245] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.767405][ T1245] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 308.767428][ T1245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.830559][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 308.830887][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 308.830927][ T10] usb 3-1: media controller created [ 309.059520][ T1245] usb 1-1: usb_control_msg returned -32 [ 309.059565][ T1245] usbtmc 1-1:16.0: can't read capabilities [ 309.143420][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.333716][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 309.503917][ T7393] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -32 [ 309.507364][ T1245] usb 1-1: USB disconnect, device number 6 [ 309.554757][ T7395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.313'. [ 309.776147][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 309.788199][ T10] usb 3-1: USB disconnect, device number 18 [ 310.371152][ T1245] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 310.447479][ T7409] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.315'. [ 310.537044][ T7409] debugfs: '`] Iq!>s*!)' already exists in 'ieee80211' [ 310.553074][ T1245] usb 3-1: Using ep0 maxpacket: 8 [ 310.579859][ T1245] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 310.579889][ T1245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.694243][ T1245] pvrusb2: Hardware description: Terratec Grabster AV400 [ 310.694260][ T1245] pvrusb2: ********** [ 310.694263][ T1245] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 310.694269][ T1245] pvrusb2: Important functionality might not be entirely working. [ 310.694274][ T1245] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 310.694279][ T1245] pvrusb2: ********** [ 310.946841][ T2368] pvrusb2: Invalid write control endpoint [ 311.206412][ T7405] pvrusb2: Invalid write control endpoint [ 311.325645][ T2368] pvrusb2: Invalid write control endpoint [ 311.325660][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 311.325668][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 311.325675][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 311.325684][ T2368] pvrusb2: Device being rendered inoperable [ 311.325913][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 311.326108][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 311.328208][ T2368] pvrusb2: Attached sub-driver cx25840 [ 311.328220][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 311.328229][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 311.577901][ T7418] syzkaller0: entered promiscuous mode [ 311.577931][ T7418] syzkaller0: entered allmulticast mode [ 312.971989][ T5926] usb 3-1: USB disconnect, device number 19 [ 314.613057][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 315.312360][ T7438] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 315.317481][ T7438] overlayfs: failed to resolve './bus': -2 [ 315.830210][ T7440] binder: 7436:7440 ioctl c0306201 2000000001c0 returned -14 [ 316.273957][ T7448] block nbd4: shutting down sockets [ 316.281154][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 316.379497][ T7451] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 316.379513][ T7451] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 316.379570][ T7451] vhci_hcd vhci_hcd.0: Device attached [ 316.431101][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 316.433836][ T10] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 316.433861][ T10] usb 2-1: config 0 has no interface number 0 [ 316.433909][ T10] usb 2-1: config 0 interface 12 has no altsetting 0 [ 316.496487][ T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 316.496505][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.496515][ T10] usb 2-1: Product: syz [ 316.496523][ T10] usb 2-1: Manufacturer: syz [ 316.496530][ T10] usb 2-1: SerialNumber: syz [ 316.500515][ T7451] autofs: Unknown parameter '0x0000000000000000' [ 316.569172][ T10] usb 2-1: config 0 descriptor?? [ 316.651305][ T6312] usb 38-1: SetAddress Request (6) to port 0 [ 316.651368][ T6312] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 316.933721][ T7451] block nbd2: shutting down sockets [ 316.962292][ T7455] vhci_hcd: connection reset by peer [ 316.966892][ T3018] vhci_hcd: stop threads [ 316.966909][ T3018] vhci_hcd: release socket [ 316.966968][ T3018] vhci_hcd: disconnect device [ 317.112276][ T7445] netlink: 452 bytes leftover after parsing attributes in process `syz.1.324'. [ 317.182242][ T10] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 317.182296][ T10] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 317.182312][ T10] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 317.182404][ T10] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 317.227488][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.227531][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.284936][ T7461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.326'. [ 317.303835][ T7461] team0: No ports can be present during mode change [ 317.304510][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'. [ 317.354044][ T10] usb 2-1: USB disconnect, device number 11 [ 318.661229][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 318.661563][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 318.791237][ T10] usb 3-1: device descriptor read/64, error -32 [ 319.032048][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 319.192322][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 319.198230][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 319.198260][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.228680][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 319.228697][ T10] pvrusb2: ********** [ 319.228703][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 319.228714][ T10] pvrusb2: Important functionality might not be entirely working. [ 319.228722][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 319.228737][ T10] pvrusb2: ********** [ 319.429276][ T2368] pvrusb2: Invalid write control endpoint [ 319.608364][ T2368] pvrusb2: Invalid write control endpoint [ 319.608373][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 319.608378][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 319.608382][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 319.608387][ T2368] pvrusb2: Device being rendered inoperable [ 319.615590][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 319.615646][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 319.678556][ T2368] pvrusb2: Attached sub-driver cx25840 [ 319.678567][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 319.678572][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 319.746953][ T7488] pvrusb2: Attempted to execute control transfer when device not ok [ 319.766972][ T7461] team0 (unregistering): Port device team_slave_0 removed [ 319.908282][ T7461] team0 (unregistering): Port device team_slave_1 removed [ 320.079798][ T7482] syzkaller0: entered promiscuous mode [ 320.079826][ T7482] syzkaller0: entered allmulticast mode [ 320.421938][ T59] Bluetooth: hci4: command 0x0405 tx timeout [ 321.061435][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.694914][ T6312] usb 38-1: device descriptor read/8, error -110 [ 321.838243][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.103001][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.103748][ T6312] usb usb38-port1: attempt power cycle [ 322.161168][ T7503] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 322.783011][ T6312] usb usb38-port1: unable to enumerate USB device [ 323.361726][ T10] usb 3-1: USB disconnect, device number 21 [ 324.453824][ T7527] netlink: 'syz.4.338': attribute type 4 has an invalid length. [ 325.251211][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 325.442094][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 325.449254][ T10] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.449272][ T10] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 325.449286][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 325.449305][ T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 325.449317][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.551399][ T10] usb 3-1: config 0 descriptor?? [ 325.769635][ T7522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.337'. [ 325.770359][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 325.866153][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 325.866239][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 325.924097][ T10] usb 3-1: USB disconnect, device number 22 [ 326.020520][ T7530] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 326.020536][ T7530] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 326.020688][ T7530] vhci_hcd vhci_hcd.0: Device attached [ 326.074144][ T7530] autofs: Unknown parameter '0x0000000000000000' [ 326.190464][ T7538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.341'. [ 326.262918][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'. [ 326.281359][ T6312] usb 42-1: SetAddress Request (6) to port 0 [ 326.281441][ T6312] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 326.303028][ T7530] block nbd4: shutting down sockets [ 326.390346][ T7531] vhci_hcd: connection reset by peer [ 326.391531][ T3076] vhci_hcd: stop threads [ 326.391548][ T3076] vhci_hcd: release socket [ 326.393478][ T3076] vhci_hcd: disconnect device [ 326.999167][ T7548] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 326.999193][ T7548] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 328.096198][ T7548] vhci_hcd vhci_hcd.0: Device attached [ 328.101189][ T1245] vhci_hcd: vhci_device speed not set [ 328.161651][ T1245] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 328.771255][ T44] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 328.821173][ T6159] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 328.934732][ T44] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 328.934793][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.938252][ T44] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 328.938279][ T44] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 328.938299][ T44] usb 4-1: Manufacturer: syz [ 329.011446][ T6159] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 329.011483][ T6159] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.011502][ T6159] usb 1-1: config 0 has no interface number 0 [ 329.017991][ T6159] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 329.018018][ T6159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.018037][ T6159] usb 1-1: Product: syz [ 329.018051][ T6159] usb 1-1: Manufacturer: syz [ 329.018064][ T6159] usb 1-1: SerialNumber: syz [ 329.162491][ T6159] usb 1-1: config 0 descriptor?? [ 329.178470][ T6159] ims_pcu 1-1:0.41: Missing CDC union descriptor [ 329.178505][ T6159] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 329.179828][ T44] usb 4-1: config 0 descriptor?? [ 329.450578][ T7566] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.457820][ T7566] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.511240][ T7569] netlink: 60 bytes leftover after parsing attributes in process `syz.4.347'. [ 329.622778][ T7556] vhci_hcd: connection reset by peer [ 329.667185][ T3018] vhci_hcd: stop threads [ 329.667205][ T3018] vhci_hcd: release socket [ 329.667288][ T3018] vhci_hcd: disconnect device [ 329.791084][ T5851] IPVS: starting estimator thread 0... [ 329.962912][ T44] rc_core: IR keymap rc-hauppauge not found [ 329.962925][ T44] Registered IR keymap rc-empty [ 329.963862][ T44] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 329.965582][ T44] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 329.991177][ T7570] IPVS: using max 13 ests per chain, 31200 per kthread [ 330.114635][ T44] usb 4-1: USB disconnect, device number 11 [ 331.381149][ T6312] usb 42-1: device descriptor read/8, error -110 [ 331.690802][ T7582] netlink: 'syz.3.349': attribute type 4 has an invalid length. [ 332.304071][ T6312] usb usb42-port1: attempt power cycle [ 332.363018][ T44] usb 1-1: USB disconnect, device number 7 [ 332.931980][ T6312] usb usb42-port1: unable to enumerate USB device [ 333.252464][ T7596] 9pnet_fd: Insufficient options for proto=fd [ 334.251255][ T5851] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 334.271291][ T1245] vhci_hcd: vhci_device speed not set [ 334.482854][ T5851] usb 3-1: Using ep0 maxpacket: 16 [ 334.485443][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 334.487399][ T5851] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 334.487415][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.487425][ T5851] usb 3-1: Product: syz [ 334.487433][ T5851] usb 3-1: Manufacturer: syz [ 334.487440][ T5851] usb 3-1: SerialNumber: syz [ 334.546352][ T5851] usb 3-1: config 0 descriptor?? [ 334.593070][ T5851] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 334.593104][ T5851] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 335.275690][ T5851] em28xx 3-1:0.0: chip ID is em2765 [ 335.894030][ T5851] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 335.894050][ T5851] em28xx 3-1:0.0: board has no eeprom [ 336.667106][ T7608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.356'. [ 337.251094][ T7592] em28xx 3-1:0.0: reading from i2c device at 0x8 failed (error=-5) [ 337.305298][ T5851] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 337.305325][ T5851] em28xx 3-1:0.0: dvb set to bulk mode. [ 337.376323][ T10] em28xx 3-1:0.0: Binding DVB extension [ 337.498029][ T5851] usb 3-1: USB disconnect, device number 23 [ 337.500648][ T5851] em28xx 3-1:0.0: Disconnecting em28xx [ 337.631037][ T7613] netlink: 68 bytes leftover after parsing attributes in process `syz.2.358'. [ 337.942718][ T10] em28xx 3-1:0.0: Registering input extension [ 337.982069][ T5851] em28xx 3-1:0.0: Closing input extension [ 338.145727][ T5851] em28xx 3-1:0.0: Freeing device [ 338.653795][ T7617] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 338.653821][ T7617] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 338.657872][ T7617] vhci_hcd vhci_hcd.0: Device attached [ 338.661031][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 338.661045][ T37] audit: type=1326 audit(1758530095.403:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b72aec29 code=0x7ffc0000 [ 338.725552][ T37] audit: type=1326 audit(1758530095.473:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7b72ad590 code=0x7ffc0000 [ 338.725606][ T37] audit: type=1326 audit(1758530095.473:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7b72ae82b code=0x7ffc0000 [ 338.725639][ T37] audit: type=1326 audit(1758530095.473:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7b72ae82b code=0x7ffc0000 [ 338.730457][ T7617] autofs: Unknown parameter '0x0000000000000000' [ 338.895482][ T7624] block nbd0: Attempted send on invalid socket [ 338.895506][ T7624] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 338.951197][ T1245] usb 42-1: SetAddress Request (10) to port 0 [ 338.953370][ T1245] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 338.964875][ T37] audit: type=1326 audit(1758530095.713:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7b72ae82b code=0x7ffc0000 [ 338.964904][ T37] audit: type=1326 audit(1758530095.713:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7b72ae82b code=0x7ffc0000 [ 338.964926][ T37] audit: type=1326 audit(1758530095.713:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7b72ae82b code=0x7ffc0000 [ 339.062002][ T37] audit: type=1326 audit(1758530095.813:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7b72ae82b code=0x7ffc0000 [ 339.119175][ T7617] block nbd4: shutting down sockets [ 339.121172][ T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 339.132011][ T37] audit: type=1326 audit(1758530095.883:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7b72ae82b code=0x7ffc0000 [ 339.133492][ T37] audit: type=1326 audit(1758530095.883:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7b72ae82b code=0x7ffc0000 [ 339.260339][ T7619] vhci_hcd: connection reset by peer [ 339.260539][ T3139] vhci_hcd: stop threads [ 339.260554][ T3139] vhci_hcd: release socket [ 339.260622][ T3139] vhci_hcd: disconnect device [ 339.341042][ T10] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 339.341106][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.341128][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 339.341169][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 339.341192][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.524134][ T7634] netlink: 'syz.3.361': attribute type 4 has an invalid length. [ 341.531824][ T7635] netlink: 'syz.1.362': attribute type 4 has an invalid length. [ 341.531831][ T10] usbtmc 1-1:16.0: bulk endpoints not found [ 342.238704][ T5851] usb 1-1: USB disconnect, device number 8 [ 342.569880][ T7645] pim6reg: entered allmulticast mode [ 342.718677][ T7644] syz.1.363 (7644): drop_caches: 2 [ 342.807704][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 342.871271][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 343.131871][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 343.171270][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 343.171301][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.349009][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 343.349028][ T10] pvrusb2: ********** [ 343.349035][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 343.349047][ T10] pvrusb2: Important functionality might not be entirely working. [ 343.349056][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 343.349068][ T10] pvrusb2: ********** [ 343.441203][ T2368] pvrusb2: Invalid write control endpoint [ 343.650519][ T7645] pvrusb2: Invalid write control endpoint [ 344.017439][ T1245] usb 42-1: device descriptor read/8, error -110 [ 344.278527][ T7662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.368'. [ 344.787410][ T1245] usb usb42-port1: attempt power cycle [ 345.136411][ T2368] pvrusb2: Invalid write control endpoint [ 345.136422][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 345.136427][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 345.136431][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 345.136437][ T2368] pvrusb2: Device being rendered inoperable [ 345.136463][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 345.136491][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 345.137157][ T2368] pvrusb2: Attached sub-driver cx25840 [ 345.137165][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 345.137169][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 345.363684][ T1245] usb usb42-port1: unable to enumerate USB device [ 345.896982][ T7668] syzkaller0: entered promiscuous mode [ 345.897002][ T7668] syzkaller0: entered allmulticast mode [ 346.550844][ T1245] usb 4-1: USB disconnect, device number 12 [ 346.911127][ T6312] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 347.061095][ T6312] usb 3-1: Using ep0 maxpacket: 16 [ 347.063963][ T6312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.063999][ T6312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.064021][ T6312] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 347.064064][ T6312] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 347.064087][ T6312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.191794][ T6312] usb 3-1: config 0 descriptor?? [ 349.372410][ T7689] netlink: 'syz.4.374': attribute type 4 has an invalid length. [ 349.835358][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 349.835376][ T37] audit: type=1326 audit(1758530106.583:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7691 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7671ec29 code=0x7ffc0000 [ 349.837530][ T37] audit: type=1326 audit(1758530106.583:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7691 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7671ec29 code=0x7ffc0000 [ 349.910719][ T37] audit: type=1326 audit(1758530106.653:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7691 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e7671d590 code=0x7ffc0000 [ 349.941148][ T37] audit: type=1326 audit(1758530106.683:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7691 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e7671e82b code=0x7ffc0000 [ 349.945167][ T37] audit: type=1326 audit(1758530106.693:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7691 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e7671e82b code=0x7ffc0000 [ 350.079114][ T37] audit: type=1326 audit(1758530106.823:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7691 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e7671e82b code=0x7ffc0000 [ 350.082143][ T37] audit: type=1326 audit(1758530106.833:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7691 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e7671e82b code=0x7ffc0000 [ 350.142106][ T37] audit: type=1326 audit(1758530106.893:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7691 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e7671e82b code=0x7ffc0000 [ 350.198718][ T6312] usbhid 3-1:0.0: can't add hid device: -71 [ 350.198794][ T6312] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 350.223276][ T37] audit: type=1326 audit(1758530106.973:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7691 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e7671e82b code=0x7ffc0000 [ 350.271166][ T1245] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 350.276832][ T6312] usb 3-1: USB disconnect, device number 24 [ 350.277550][ T37] audit: type=1326 audit(1758530107.023:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7691 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e7671e82b code=0x7ffc0000 [ 350.445694][ T1245] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.445713][ T1245] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 350.445724][ T1245] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.445747][ T1245] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 350.445759][ T1245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.757174][ T1245] usbtmc 5-1:16.0: bulk endpoints not found [ 351.587596][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.380'. [ 352.221183][ T10] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 352.375877][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 352.375908][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.375950][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 352.375963][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.591316][ T10] usb 3-1: usb_control_msg returned -32 [ 352.591363][ T10] usbtmc 3-1:16.0: can't read capabilities [ 352.629198][ T7711] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 352.629221][ T7711] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 352.630281][ T7711] vhci_hcd vhci_hcd.0: Device attached [ 352.841395][ T6312] usb 5-1: USB disconnect, device number 16 [ 352.851318][ T5851] vhci_hcd: vhci_device speed not set [ 352.861171][ T1245] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 352.922026][ T5851] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 353.165234][ T6312] usb 3-1: USB disconnect, device number 25 [ 353.254610][ T1245] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 353.254680][ T1245] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.282004][ T1245] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 353.282034][ T1245] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 353.282053][ T1245] usb 2-1: Manufacturer: syz [ 353.375505][ T1245] usb 2-1: config 0 descriptor?? [ 353.611109][ T1245] rc_core: IR keymap rc-hauppauge not found [ 353.611129][ T1245] Registered IR keymap rc-empty [ 353.612987][ T1245] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 353.736496][ T1245] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 353.881834][ T7716] vhci_hcd: connection reset by peer [ 353.885332][ T1477] vhci_hcd: stop threads [ 353.885348][ T1477] vhci_hcd: release socket [ 353.885421][ T1477] vhci_hcd: disconnect device [ 353.924330][ T1245] usb 2-1: USB disconnect, device number 12 [ 354.258946][ T7732] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 354.258973][ T7732] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 354.286515][ T7732] vhci_hcd vhci_hcd.0: Device attached [ 354.379799][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 354.591211][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 354.615747][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 354.631498][ T10] usb 5-1: config 8 has an invalid interface number: 24 but max is 0 [ 354.631515][ T10] usb 5-1: config 8 has no interface number 0 [ 354.631543][ T10] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 354.631558][ T10] usb 5-1: config 8 interface 24 has no altsetting 0 [ 354.689607][ T6312] usb 34-1: SetAddress Request (10) to port 0 [ 354.689694][ T6312] usb 34-1: new SuperSpeed USB device number 10 using vhci_hcd [ 354.756163][ T10] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 354.756181][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.756192][ T10] usb 5-1: Product: syz [ 354.756199][ T10] usb 5-1: Manufacturer: syz [ 354.756207][ T10] usb 5-1: SerialNumber: syz [ 355.835613][ T7743] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.386'. [ 356.090812][ T7734] vhci_hcd: connection reset by peer [ 356.094141][ T3099] vhci_hcd: stop threads [ 356.094160][ T3099] vhci_hcd: release socket [ 356.094238][ T3099] vhci_hcd: disconnect device [ 357.802592][ T7743] debugfs: '`] Iq!>s*!)' already exists in 'ieee80211' [ 358.021160][ T5851] vhci_hcd: vhci_device speed not set [ 358.804651][ T10] vmk80xx 5-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 358.962287][ T10] usb 5-1: USB disconnect, device number 17 [ 359.771250][ T6312] usb 34-1: device descriptor read/8, error -110 [ 360.197712][ T6312] usb usb34-port1: attempt power cycle [ 360.724586][ T7765] autofs: Unknown parameter '0x0000000000000000' [ 360.773539][ T7762] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 360.773557][ T7762] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 360.773750][ T7762] vhci_hcd vhci_hcd.0: Device attached [ 360.815051][ T6312] usb usb34-port1: unable to enumerate USB device [ 361.036482][ T7769] block nbd3: shutting down sockets [ 361.042637][ T1245] usb 40-1: SetAddress Request (6) to port 0 [ 361.042721][ T1245] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 362.475581][ T7776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.394'. [ 362.482359][ T7775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.482370][ T7775] IPv6: NLM_F_CREATE should be set when creating new route [ 362.482495][ T7775] IPv6: NLM_F_CREATE should be set when creating new route [ 362.482513][ T7775] IPv6: NLM_F_CREATE should be set when creating new route [ 362.531137][ T7763] vhci_hcd: connection reset by peer [ 362.551015][ T3018] vhci_hcd: stop threads [ 362.561201][ T3018] vhci_hcd: release socket [ 362.561281][ T3018] vhci_hcd: disconnect device [ 362.637920][ T7775] 9pnet_virtio: no channels available for device syz [ 363.020246][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.396'. [ 363.023002][ T5851] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 363.184848][ T5851] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.184869][ T5851] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.184893][ T5851] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 363.184906][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.461187][ T5851] usb 4-1: usb_control_msg returned -32 [ 363.461239][ T5851] usbtmc 4-1:16.0: can't read capabilities [ 364.015324][ T6159] usb 4-1: USB disconnect, device number 13 [ 364.410400][ T7797] syz.0.398 (7797): drop_caches: 2 [ 366.094901][ T1245] usb 40-1: device descriptor read/8, error -110 [ 366.488284][ T1245] usb usb40-port1: attempt power cycle [ 366.819000][ T7814] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 366.819027][ T7814] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 366.902757][ T7814] vhci_hcd vhci_hcd.0: Device attached [ 366.943094][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 366.943110][ T37] audit: type=1800 audit(1758530123.693:183): pid=7814 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.403" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 367.135496][ T1245] usb usb40-port1: unable to enumerate USB device [ 367.191201][ T6312] usb 42-1: SetAddress Request (14) to port 0 [ 367.191258][ T6312] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 367.336163][ T7815] vhci_hcd: connection reset by peer [ 367.491354][ T3018] vhci_hcd: stop threads [ 367.491370][ T3018] vhci_hcd: release socket [ 367.491429][ T3018] vhci_hcd: disconnect device [ 370.016956][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 370.117571][ T7834] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 370.117589][ T7834] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 370.117770][ T7834] vhci_hcd vhci_hcd.0: Device attached [ 370.176305][ T7834] autofs: Unknown parameter '0x0000000000000000' [ 370.211145][ T1245] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 370.326327][ T7843] block nbd1: shutting down sockets [ 370.382598][ T1245] usb 3-1: config 0 has no interfaces? [ 370.422238][ T6159] usb 36-1: SetAddress Request (10) to port 0 [ 370.422259][ T6159] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 370.422267][ T6159] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 6159, name: kworker/1:6 [ 370.422275][ T6159] preempt_count: 0, expected: 0 [ 370.422280][ T6159] RCU nest depth: 0, expected: 0 [ 370.422298][ T6159] 6 locks held by kworker/1:6/6159: [ 370.422304][ T6159] #0: ffff888019fe2d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 370.422342][ T6159] #1: ffffc9000556fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 370.422366][ T6159] #2: ffff888146347188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 370.422390][ T6159] #3: ffff888028e435b8 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 370.422412][ T6159] #4: ffff888145f5e258 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 370.422434][ T6159] #5: ffff888140469a68 (&mbus->lock){+.+.}-{3:3}, at: mon_complete+0x5c/0x200 [ 370.422463][ T6159] irq event stamp: 71576 [ 370.422467][ T6159] hardirqs last enabled at (71575): [] _raw_spin_unlock_irqrestore+0x85/0x110 [ 370.422484][ T6159] hardirqs last disabled at (71576): [] vhci_urb_enqueue+0xb2c/0xe70 [ 370.422495][ T6159] softirqs last enabled at (68174): [] __local_bh_enable_ip+0x1a4/0x270 [ 370.422509][ T6159] softirqs last disabled at (68168): [] xprt_destroy_bc+0x45/0x390 [ 370.422539][ T6159] CPU: 1 UID: 0 PID: 6159 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 370.422551][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 370.422557][ T6159] Workqueue: usb_hub_wq hub_event [ 370.422573][ T6159] Call Trace: [ 370.422578][ T6159] [ 370.422583][ T6159] dump_stack_lvl+0x189/0x250 [ 370.422598][ T6159] ? xprt_destroy_bc+0x45/0x390 [ 370.422607][ T6159] ? xprt_destroy_bc+0x45/0x390 [ 370.422618][ T6159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.422632][ T6159] ? rtlock_slowlock_locked+0xd8/0x4010 [ 370.422647][ T6159] ? print_lock_name+0xde/0x100 [ 370.422661][ T6159] __might_resched+0x44b/0x5d0 [ 370.422677][ T6159] ? __pfx___might_resched+0x10/0x10 [ 370.422687][ T6159] ? mon_complete+0x5c/0x200 [ 370.422701][ T6159] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 370.422721][ T6159] rt_spin_lock+0xc7/0x2c0 [ 370.422734][ T6159] ? __pfx_rt_spin_lock+0x10/0x10 [ 370.422747][ T6159] ? rt_mutex_slowunlock+0x493/0x8a0 [ 370.422759][ T6159] ? reacquire_held_locks+0x127/0x1d0 [ 370.422774][ T6159] ? __pfx_migrate_enable+0x10/0x10 [ 370.422787][ T6159] mon_complete+0x5c/0x200 [ 370.422803][ T6159] __usb_hcd_giveback_urb+0x251/0x5e0 [ 370.422820][ T6159] vhci_urb_enqueue+0xb4f/0xe70 [ 370.422838][ T6159] ? __pfx_vhci_urb_enqueue+0x10/0x10 [ 370.422849][ T6159] ? usb_hcd_map_urb_for_dma+0x3c1/0xd80 [ 370.422867][ T6159] usb_hcd_submit_urb+0x31d/0x1a80 [ 370.422897][ T6159] usb_start_wait_urb+0x114/0x4c0 [ 370.422913][ T6159] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 370.422929][ T6159] ? trace_kmalloc+0x1f/0xd0 [ 370.422948][ T6159] usb_control_msg+0x232/0x3e0 [ 370.422963][ T6159] hub_port_init+0xe24/0x2800 [ 370.422993][ T6159] hub_event+0x2532/0x4a20 [ 370.423037][ T6159] ? __pfx_hub_event+0x10/0x10 [ 370.423048][ T6159] ? process_scheduled_works+0x9ef/0x17b0 [ 370.423064][ T6159] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.423077][ T6159] ? process_scheduled_works+0x9ef/0x17b0 [ 370.423088][ T6159] ? process_scheduled_works+0x9ef/0x17b0 [ 370.423101][ T6159] process_scheduled_works+0xade/0x17b0 [ 370.423143][ T6159] ? __pfx_process_scheduled_works+0x10/0x10 [ 370.423184][ T6159] worker_thread+0x8a0/0xda0 [ 370.423209][ T6159] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 370.423243][ T6159] ? __kthread_parkme+0x7b/0x200 [ 370.423266][ T6159] kthread+0x70e/0x8a0 [ 370.423283][ T6159] ? __pfx_worker_thread+0x10/0x10 [ 370.423294][ T6159] ? __pfx_kthread+0x10/0x10 [ 370.423311][ T6159] ? __pfx_kthread+0x10/0x10 [ 370.423326][ T6159] ret_from_fork+0x436/0x7d0 [ 370.423341][ T6159] ? __pfx_ret_from_fork+0x10/0x10 [ 370.423357][ T6159] ? __switch_to_asm+0x39/0x70 [ 370.423366][ T6159] ? __switch_to_asm+0x33/0x70 [ 370.423374][ T6159] ? __pfx_kthread+0x10/0x10 [ 370.423388][ T6159] ret_from_fork_asm+0x1a/0x30 [ 370.423408][ T6159] [ 370.938961][ T6159] usb 36-1: new SuperSpeed USB device number 10 using vhci_hcd [ 370.967808][ T7841] vhci_hcd: connection reset by peer [ 370.968308][ T39] vhci_hcd: stop threads [ 370.968381][ T39] vhci_hcd: release socket [ 370.968632][ T39] vhci_hcd: disconnect device [ 370.996807][ T1245] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 370.996836][ T1245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.996967][ T1245] usb 3-1: Product: syz [ 370.996983][ T1245] usb 3-1: Manufacturer: syz [ 370.996997][ T1245] usb 3-1: SerialNumber: syz [ 371.080129][ T1245] usb 3-1: config 0 descriptor?? [ 371.300563][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.300866][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.251432][ T6312] usb 42-1: device descriptor read/8, error -110 [ 372.650447][ T6312] usb usb42-port1: attempt power cycle [ 372.764916][ T1245] usb 3-1: USB disconnect, device number 26 [ 373.214359][ T6312] usb usb42-port1: unable to enumerate USB device [ 376.015764][ T6159] usb 36-1: device descriptor read/8, error -110 [ 376.403758][ T6159] usb usb36-port1: attempt power cycle [ 376.964478][ T6159] usb usb36-port1: unable to enumerate USB device [ 378.660771][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.660846][ T1323] ieee802154 phy1 wpan1: encryption failed: -22