last executing test programs: 8.450813271s ago: executing program 3 (id=698): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x232002, 0x70) 8.395016793s ago: executing program 3 (id=699): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)={0x0, 0x1f000000}) 8.262302272s ago: executing program 3 (id=700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0x1}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r8, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xc, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfd}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x7b, 0x0, 0x10, 0x100000000, 0x0, 0x2004cb, 0x3, 0x8, 0xfffffffffffffff8, 0xffff, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2, 0x2000000000], 0x2, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x40000, 0xfffffffd, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x20000014) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x20, r1, 0x101, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044014}, 0x8004) 7.687887881s ago: executing program 4 (id=704): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0xdddd0000, 0x1000, &(0x7f0000c15000/0x1000)=nil}) getresgid(&(0x7f0000000280), &(0x7f0000000440), &(0x7f0000000480)=0x0) fchownat(r2, &(0x7f00000000c0)='./file0\x00', 0x0, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000380)={0x7fffffff}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xa) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000240)={&(0x7f0000000040)={0x0, 0x0, 0x1, 0x9, 0xfffffffffffffffb}}, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000022c0)=ANY=[@ANYBLOB="e8001fb875d49806d5ff74e33bb73d5cd0dd104d9af560", @ANYRES16=r1, @ANYBLOB="010027bd60000400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000500130001000000"], 0x3c}}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x2e, 0x9, 0x70bd27, 0x25dfdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000002060102040000ffff000000000000000500010006000000050005000700000016000300686173683a6e65742c706f72742c6e65745a0f757089140000000900020073717adf000000000500040003000000"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r7, 0x5}}, 0x48) 7.202491185s ago: executing program 0 (id=706): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00000eb040)={0x2, &(0x7f00000eaf00)=[{0xa000006, 0x21c, &(0x7f00000002c0)=[0x1ff, 0x0, 0x6, 0xfffffac2, 0x5, 0x7ff, 0x0, 0xc4a7, 0x7, 0x4, 0x5, 0x4, 0x1, 0x6, 0x7, 0x9, 0x1, 0x7fffffff, 0x9, 0x2, 0x1000, 0x200, 0x9fc, 0x3, 0x1, 0x1, 0x6, 0xffffffdb, 0x5, 0x5, 0xa, 0x9, 0x8, 0x5, 0x4db448b9, 0x74c8, 0x2, 0x3, 0xa161, 0x81, 0x7fffffff, 0x8, 0x3, 0x10, 0x1, 0x8, 0x6, 0x6, 0x8, 0x514, 0x3, 0x7, 0x23bd, 0x80, 0x3, 0xfffffff4, 0x0, 0x1ec0000, 0x1, 0x10000, 0x7, 0x9f81, 0x1, 0x7, 0x6, 0xd, 0xfffffffc, 0x1, 0x1, 0x3, 0x5, 0x8, 0x3ff, 0x6, 0x1, 0xb, 0x8, 0x7ff, 0x1, 0x1, 0x2, 0x5, 0x5, 0x4, 0x6, 0xff1c, 0xb, 0x2, 0x81, 0x7c, 0x4, 0xa3, 0xeac9, 0x8, 0x3, 0x0, 0xc, 0x4, 0x7, 0x6, 0x4, 0xfffffff6, 0x5b12e358, 0x7fff, 0xffffffff, 0x8, 0xaa64, 0x7, 0x8c29, 0x4, 0x7, 0x5, 0x6, 0x2, 0x0, 0x2, 0x4e98, 0x9, 0x7, 0x7, 0xc, 0x6, 0x7, 0x1, 0x1000, 0xfffffffc, 0x0, 0xe3c, 0x7, 0x32d6, 0x3ff, 0x0, 0x7, 0x352, 0xffffffff, 0x2, 0x6, 0x1, 0x6, 0x8, 0x2, 0x4, 0x3, 0x4b02, 0x1, 0x4, 0x4, 0x81, 0x8, 0x8001, 0xc, 0x6, 0x7f, 0x8, 0x59, 0x2, 0x8, 0x0, 0xffffffff, 0x9, 0x8, 0x5, 0x7, 0x9, 0x91, 0x4, 0x9, 0x7ff, 0x3ff, 0xae, 0x2, 0xb, 0x800, 0x0, 0x2, 0x2, 0x6d, 0xf4e, 0x9, 0x4, 0xd, 0x6, 0x4, 0x2, 0x101, 0xbeac, 0x80000000, 0x5, 0x9, 0x876, 0xffffffc0, 0x5b5, 0x7ff, 0x3ff, 0x5, 0x40, 0x9, 0xcf7, 0x0, 0x2, 0x6, 0x76, 0x0, 0x3, 0x7, 0xa31, 0x8, 0x6, 0x7, 0x0, 0x9, 0x7, 0x2, 0x1000, 0x6, 0xfffffffb, 0x7f, 0x29f, 0x8, 0xffff, 0x4, 0xffff, 0x4, 0x5, 0xffffff49, 0x4000, 0x8f, 0x2, 0x2, 0x8c79, 0x8322, 0x6, 0x22de4ca1, 0x2, 0xe1, 0x401, 0x4145, 0x8001, 0x5, 0x7ff, 0x4, 0xd24, 0x4, 0x0, 0x3, 0xad, 0x6, 0x0, 0x9, 0x4, 0x7, 0x4, 0x6, 0x80000000, 0xf, 0x3, 0x7, 0xfffffff9, 0x6, 0x4, 0x7, 0xc11d, 0x7fdea9f4, 0x4, 0x2, 0x7, 0x4, 0x0, 0x9, 0x47, 0x200, 0x1, 0x68, 0x2, 0x3, 0xffff, 0x8, 0xc04, 0x81, 0x10000, 0x5, 0x3, 0x3ff, 0x3, 0x7f, 0xe, 0x7, 0x1, 0x2, 0xf44, 0x7, 0x9, 0x8001, 0xc6, 0x6, 0x101, 0x401, 0x97f, 0x35d, 0x9, 0x8001, 0xea79, 0x5, 0x6, 0x7, 0x10, 0x7, 0xc4, 0x8, 0x7, 0x7, 0x101, 0x5, 0x2, 0x1, 0x1, 0x5, 0x5, 0x1, 0x8000000, 0x1, 0x8, 0x0, 0x23b6, 0x3, 0x7, 0x0, 0x3, 0x1, 0x3ff, 0x4e32, 0x4, 0x8, 0x1, 0xc, 0x3, 0x8, 0x3, 0x800, 0x3, 0x9, 0x3, 0x0, 0x1, 0xfffffffa, 0x7, 0x9d3f, 0x4, 0x4, 0x9, 0x8, 0x3ff, 0x9, 0x8, 0x2, 0x5, 0x8, 0x7, 0xffffffc0, 0x9, 0xfff, 0x100, 0xa8, 0x1000, 0x2cf37823, 0x2, 0xf069, 0x8, 0x8, 0x63, 0x0, 0x6, 0x9, 0x10000, 0x41a4, 0x2, 0x800000, 0x1, 0x0, 0x10, 0xfffffffc, 0x7, 0x7f, 0x7, 0x7, 0x9, 0x5, 0x3, 0xfffffff8, 0xffffff87, 0x4, 0xfffffffd, 0x5, 0x7, 0x8, 0x80, 0x2, 0xd, 0x4b, 0x1, 0x1, 0x9, 0x4fbea64f, 0xfffffa0d, 0x72f1, 0x8, 0x3, 0x0, 0x6, 0x4, 0x4, 0x9, 0x6, 0x101, 0x4, 0x800, 0x9, 0x1, 0x3, 0x1, 0x9, 0x1, 0x2, 0x8001, 0x0, 0x41fb, 0x3, 0xfffffffb, 0x6, 0x6, 0x5, 0x8, 0x6, 0xc, 0xf0000000, 0x0, 0x9, 0x6a, 0x4c9d, 0x1, 0x2, 0x2, 0x8000, 0x4, 0x6, 0x10, 0x9, 0x6, 0x9, 0x9524, 0x44, 0xf, 0x0, 0x2, 0x8, 0x80000000, 0x8001, 0x2, 0x9, 0x4, 0x3, 0x7, 0x0, 0x9, 0xb, 0x0, 0xecc, 0x3, 0x55c66abd, 0x3, 0x1, 0x2, 0x72, 0xfffffffe, 0x0, 0x5, 0x4, 0x3, 0xffff, 0x3, 0x9, 0x2ce, 0xfff, 0x8001, 0x7fff, 0x101, 0x8, 0x7fff, 0x7, 0x9, 0x7, 0x8, 0xffff0001, 0x32b, 0xffff, 0x104, 0xfff, 0x5, 0x4, 0x800, 0x745, 0x8, 0x4, 0x67dd, 0xffffffff, 0x5, 0xa, 0x2548ae40, 0x9, 0x10001, 0x100, 0x2, 0x2, 0x1, 0xc, 0x5, 0x9, 0x9, 0x1ff, 0x401, 0x6, 0x200, 0x4fd, 0x8c, 0xb, 0x100, 0x5, 0x6, 0x6, 0xffffde69, 0x9, 0xc0fe7ad7, 0x0, 0x8, 0x4, 0x9, 0x0, 0xfffffff9, 0x0, 0x1], 0x6, 0x7}, {0xa000006, 0x0, 0x0, 0x2}]}) 7.178930576s ago: executing program 2 (id=707): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$vim2m(0x0, 0x3fe, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) read$msr(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000019c0)=@RTM_NEWMDB={0x118, 0x54, 0x300, 0x70bd29, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x3, {@ip4=@private=0xa010101, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x4, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x1, {@ip4=@private=0xa010102, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x3, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x39}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x1, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0xa}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x4, {@in6_addr=@local, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x3, {@in6_addr=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x0, {@in6_addr=@mcast2, 0x436e}}}]}, 0x118}}, 0x4000844) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 7.062473594s ago: executing program 0 (id=708): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) close(r2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0xfffffffc, 0x80c}, 0x28) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 7.039477025s ago: executing program 4 (id=709): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2000000000005, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0xd3f, 0x709d2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x8}, {0x3, 0x9}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x48007}, 0x20040054) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) 7.015219985s ago: executing program 2 (id=710): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000100)=0x16, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f7902"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0_to_hsr\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240048d4}, 0x40800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtaction={0x190, 0x30, 0x1, 0x1, 0x0, {}, [{0x17c, 0x1, [@m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x5, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0xec, 0x1c, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x403, 0x5, 0x3, 0x9, 0xd}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc20, 0x7, 0x0, 0x10001, 0x70000}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xaf993f0, 0x7, 0x3ff, 0x7}, 0x1da8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x0, 0x941, 0x1000}, 0x9}}]}, {0x4c, 0x6, "2b6ff7ad04a393ce333b795cd2c598ef782d5e23c06b9edddbc1c9686a303fc1692456868a23fbcbe9f91c45388e662b12fb1a4c60505c97985dff0954bddb4736aecb00654ac3af"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000084}, 0xc0) syslog(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000002c0)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x4, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, 0x0) syslog(0x3, &(0x7f00000003c0)=""/180, 0xb4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x11240, 0x0, {0x77359400}, {0x7, 0x2, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) syz_open_dev$media(&(0x7f0000000000), 0x2, 0x20500) syz_usb_disconnect(r2) 6.409325665s ago: executing program 1 (id=714): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r6) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="070060000000000000000200000004000680"], 0x18}}, 0x4040) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0xdddd0000, 0x10000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5fae, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="348fb61c000d", @ANYRES16=0x0, @ANYBLOB="010027bd7000ffdbdf250b0000000800370002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20040090) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x3, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x50}, 0x1, 0x2}, 0x190) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x202203, 0x0) sendfile(r4, r1, 0x0, 0x201f00) 5.627229419s ago: executing program 0 (id=715): fsopen(&(0x7f0000000040)='romfs\x00', 0x0) r0 = socket(0x29, 0x2, 0x1040) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x40c}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (fail_nth: 4) lseek(r2, 0x851, 0x1) 4.259461947s ago: executing program 0 (id=716): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000004000800000009500000000000000"], &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="1100000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x14) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (fail_nth: 5) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) close(r5) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = epoll_create1(0x80000) epoll_pwait(r7, &(0x7f0000000040)=[{}], 0x1, 0x8000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x90000005}) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0xf) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) close(r3) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x18) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000640)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0xe7fe, 0x6, 0x0, 0x2b0d, 0xfffffffffffffffb], 0x9, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x9, @loopback, 0x8000008, 0x4}, 0x3f, &(0x7f0000000180)=[{&(0x7f0000000040)="81", 0x1}], 0x1}, 0x41) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') 3.577822272s ago: executing program 1 (id=717): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x11a) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='omfs\x00', 0x0, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x20f39, 0x8) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=@newtfilter={0x48, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x48}}, 0x48c0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) setreuid(0x0, 0xee00) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) fstat(0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 3.333342095s ago: executing program 4 (id=718): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x19, 0x1, 0xffffffff, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x1, 0x101000}}, 0x1c}}, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000025c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x8e4, 0x163, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x81, 0x50, 0xf8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3e, 0x80, 0xd, {0x7, 0x25, 0x1, 0xc, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0x9, 0x0, {0x7, 0x25, 0x1, 0x337990419f4657a2, 0x3, 0x2006}}}}}}}}]}}, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0}) ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)={@fallback, r3, 0x36, 0x10}, 0x20) syz_clone(0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.314918107s ago: executing program 3 (id=719): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00000eb040)={0x2, &(0x7f00000eaf00)=[{0xa000006, 0x21b, &(0x7f00000002c0)=[0x1ff, 0x0, 0x6, 0xfffffac2, 0x5, 0x7ff, 0x0, 0xc4a7, 0x7, 0x4, 0x5, 0x4, 0x1, 0x6, 0x7, 0x9, 0x1, 0x7fffffff, 0x9, 0x2, 0x1000, 0x200, 0x9fc, 0x3, 0x1, 0x1, 0x6, 0xffffffdb, 0x5, 0x5, 0xa, 0x9, 0x8, 0x5, 0x4db448b9, 0x74c8, 0x2, 0x3, 0xa161, 0x81, 0x7fffffff, 0x8, 0x3, 0x10, 0x1, 0x8, 0x6, 0x6, 0x8, 0x514, 0x3, 0x7, 0x23bd, 0x80, 0x3, 0xfffffff4, 0x0, 0x1ec0000, 0x1, 0x10000, 0x7, 0x9f81, 0x1, 0x7, 0x6, 0xd, 0xfffffffc, 0x1, 0x1, 0x3, 0x5, 0x8, 0x3ff, 0x6, 0x1, 0xb, 0x8, 0x7ff, 0x1, 0x1, 0x2, 0x5, 0x5, 0x4, 0x6, 0xff1c, 0xb, 0x2, 0x81, 0x7c, 0x4, 0xa3, 0xeac9, 0x8, 0x3, 0x0, 0xc, 0x4, 0x7, 0x6, 0x4, 0xfffffff6, 0x5b12e358, 0x7fff, 0xffffffff, 0x8, 0xaa64, 0x7, 0x8c29, 0x4, 0x7, 0x5, 0x6, 0x2, 0x0, 0x2, 0x4e98, 0x9, 0x7, 0x7, 0xc, 0x6, 0x7, 0x1, 0x1000, 0xfffffffc, 0x0, 0xe3c, 0x7, 0x32d6, 0x3ff, 0x0, 0x7, 0x352, 0xffffffff, 0x2, 0x6, 0x1, 0x6, 0x8, 0x2, 0x4, 0x3, 0x4b02, 0x1, 0x4, 0x4, 0x81, 0x8, 0x8001, 0xc, 0x6, 0x7f, 0x8, 0x59, 0x2, 0x8, 0x0, 0xffffffff, 0x9, 0x8, 0x5, 0x7, 0x9, 0x91, 0x4, 0x9, 0x7ff, 0x3ff, 0xae, 0x2, 0xb, 0x800, 0x0, 0x2, 0x2, 0x6d, 0xf4e, 0x9, 0x4, 0xd, 0x6, 0x4, 0x2, 0x101, 0xbeac, 0x80000000, 0x5, 0x9, 0x876, 0xffffffc0, 0x5b5, 0x7ff, 0x3ff, 0x5, 0x40, 0x9, 0xcf7, 0x0, 0x2, 0x6, 0x76, 0x0, 0x3, 0x7, 0xa31, 0x8, 0x6, 0x7, 0x0, 0x9, 0x7, 0x2, 0x1000, 0x6, 0xfffffffb, 0x7f, 0x29f, 0x8, 0xffff, 0x4, 0xffff, 0x4, 0x5, 0xffffff49, 0x4000, 0x8f, 0x2, 0x2, 0x8c79, 0x8322, 0x6, 0x22de4ca1, 0x2, 0xe1, 0x401, 0x4145, 0x8001, 0x5, 0x7ff, 0x4, 0xd24, 0x4, 0x0, 0x3, 0xad, 0x6, 0x0, 0x9, 0x4, 0x7, 0x4, 0x6, 0x80000000, 0xf, 0x3, 0x7, 0xfffffff9, 0x6, 0x4, 0x7, 0xc11d, 0x7fdea9f4, 0x4, 0x2, 0x7, 0x4, 0x0, 0x9, 0x47, 0x200, 0x1, 0x68, 0x2, 0x3, 0xffff, 0x8, 0xc04, 0x81, 0x10000, 0x5, 0x3, 0x3ff, 0x3, 0x7f, 0xe, 0x7, 0x1, 0x2, 0xf44, 0x7, 0x9, 0x8001, 0xc6, 0x6, 0x101, 0x401, 0x97f, 0x35d, 0x9, 0x8001, 0xea79, 0x5, 0x6, 0x7, 0x10, 0x7, 0xc4, 0x8, 0x7, 0x7, 0x101, 0x5, 0x2, 0x1, 0x1, 0x5, 0x5, 0x1, 0x8000000, 0x1, 0x8, 0x0, 0x23b6, 0x3, 0x7, 0x0, 0x3, 0x1, 0x3ff, 0x4e32, 0x4, 0x8, 0x1, 0xc, 0x3, 0x8, 0x3, 0x800, 0x3, 0x9, 0x3, 0x0, 0x1, 0xfffffffa, 0x7, 0x9d3f, 0x4, 0x4, 0x9, 0x8, 0x3ff, 0x9, 0x8, 0x2, 0x5, 0x8, 0x7, 0xffffffc0, 0x9, 0xfff, 0x100, 0xa8, 0x1000, 0x2cf37823, 0x2, 0xf069, 0x8, 0x8, 0x63, 0x0, 0x6, 0x9, 0x10000, 0x41a4, 0x2, 0x800000, 0x1, 0x0, 0x10, 0xfffffffc, 0x7, 0x7f, 0x7, 0x7, 0x9, 0x5, 0x3, 0xfffffff8, 0xffffff87, 0x4, 0xfffffffd, 0x5, 0x7, 0x8, 0x80, 0x2, 0xd, 0x4b, 0x1, 0x1, 0x9, 0x4fbea64f, 0xfffffa0d, 0x72f1, 0x8, 0x3, 0x0, 0x6, 0x4, 0x4, 0x9, 0x6, 0x101, 0x4, 0x800, 0x9, 0x1, 0x3, 0x1, 0x9, 0x1, 0x2, 0x8001, 0x0, 0x41fb, 0x3, 0xfffffffb, 0x6, 0x6, 0x5, 0x8, 0x6, 0xc, 0xf0000000, 0x0, 0x9, 0x6a, 0x4c9d, 0x1, 0x2, 0x2, 0x8000, 0x4, 0x6, 0x10, 0x9, 0x6, 0x9, 0x9524, 0x44, 0xf, 0x0, 0x2, 0x8, 0x80000000, 0x8001, 0x2, 0x9, 0x4, 0x3, 0x7, 0x0, 0x9, 0xb, 0x0, 0xecc, 0x3, 0x55c66abd, 0x3, 0x1, 0x2, 0x72, 0xfffffffe, 0x0, 0x5, 0x4, 0x3, 0xffff, 0x3, 0x9, 0x2ce, 0xfff, 0x8001, 0x7fff, 0x101, 0x8, 0x7fff, 0x7, 0x9, 0x7, 0x8, 0xffff0001, 0x32b, 0xffff, 0x104, 0xfff, 0x5, 0x4, 0x800, 0x745, 0x8, 0x4, 0x67dd, 0xffffffff, 0xa, 0x2548ae40, 0x9, 0x10001, 0x100, 0x2, 0x2, 0x1, 0xc, 0x5, 0x9, 0x9, 0x1ff, 0x401, 0x6, 0x200, 0x4fd, 0x8c, 0xb, 0x100, 0x5, 0x6, 0x6, 0xffffde69, 0x9, 0xc0fe7ad7, 0x0, 0x8, 0x4, 0x9, 0x0, 0xfffffff9, 0x0, 0x1], 0x6, 0x7}, {0xa000006, 0x0, 0x0, 0x2}]}) 3.255051502s ago: executing program 3 (id=720): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000080)={0x4, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4a2ac067b1b99eeeaa1ae15a525115cc7198345652fd547f7ae8614532e7138f637f3513a5f2674185", {0x4}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000f, 0xfffffffffffffffc, 0x4, 0x4a, 0x2685, 0x80000005, 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prlimit64(0x0, 0xe, 0x0, 0x0) getpgrp(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x197fffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x4, 0x7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x60800) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) 3.085528562s ago: executing program 2 (id=721): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$vim2m(0x0, 0x3fe, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000844) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 3.08511831s ago: executing program 0 (id=722): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blo']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket(0x22, 0x5, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r2 = socket(0x18, 0x3, 0x8) shutdown(r2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) recvmmsg(r1, &(0x7f0000000cc0), 0x0, 0x60010000, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) mmap(&(0x7f0000246000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x7ef34000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) ftruncate(r0, 0x8008976) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x540f, 0x10, 0xfffffdef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xcb, 0x0) 2.640250559s ago: executing program 1 (id=723): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = inotify_init1(0x800) syz_pidfd_open(r1, 0x0) getpid() r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYRES64=r0, @ANYRESHEX=r1, @ANYBLOB="976f43f0b520de2e8f4c231dee893969ad21b10e4754512d96ed560c329db9819d1c6fc2b56a6db9b5356c39dc652bae935078d7f202c8cca734b972bb41929d52070a154246ca1468f5b58e2747e2497b1b671a024cd4bff39ef1ee3199c4cf1562b72f99aa7b2cbe3f293446c1486364e6d9f369be7d5a8876a018d2854fdecf6a34c0c8ec4782f927e26c54828a96cfdf03b1b9e1b351c2c435527004d06b", @ANYRES64, @ANYBLOB="5af13a03b6e3c1991515ad2e785b25995cd198c83fdcec521a9dded85f6654781f3540d7dd299bfde6fee522f4b677d7075e43cc79afde03417e77e90fffdd96012c74574eb0059e37b6b2fa0e7d1b20464dd2f7e6eeadb254fccb9eb51f74c5d74a7a9139bc4b8cd03fbb5b8d04e0a820750124ab3e9f6621dbba125b45387faacf1e61f7888f13da82d951f3e5ddd9871fbe4f39c3a940c47081be73", @ANYRES32=r3, @ANYRESHEX=r0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb6000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x2675762ae5d5e229, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000200)=0x382, 0x4) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, r8, 0x25, 0x0, @void}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r9, r10, 0x4, r7}, 0x10) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r11 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x1}) getpgid(0xffffffffffffffff) r12 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r13 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x89ff, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0xd96, 0x7, 0x1000000, 0x0, 0xa1, 0x7}}) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x10000002) ioctl$VIDIOC_S_EXT_CTRLS(r12, 0xc0205647, &(0x7f0000000180)={0xf000000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @p_u32=&(0x7f00000000c0)=0xa1}}) 2.594847167s ago: executing program 0 (id=724): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) r1 = msgget$private(0x0, 0x790) msgsnd(r1, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000180)=""/14) landlock_restrict_self(r2, 0x9) msgctl$IPC_SET(r1, 0x1, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, 0xee01, 0x52, 0x7}, 0x0, 0x0, 0xc7af, 0x4, 0x7fff, 0x7fffffff, 0x5, 0x180, 0x8, 0x401}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000000)={0x20, 0x1, 0x5b, "a3a01a1461c5dc49332ea2ea960b0eae0972630dbda222b251b2b3305468d275052c8b091b6ecbe541cdd1fb5f84451ea8cfd7719d14617af21341c79ebc3afcfc1eaa4cb23e94882dffd64dd70bceff7f27ae85fd8fa51ac169ca"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001680)) r4 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000080)={0x0, 0x24, 0xa8, {0xa8, 0x1, "af85b30c9c51250484e0635faee000228eaed0a6870adde8ceb66a03c4290e914bd76d8511feea95037cd5ce6d8323dfed0a7fedc71d2fa1b4b711f14dfa3564ffb33a7e2a5d7452212bde7e71fa84ea61a0000a4eca581ce97920d917bf63e19133f00697a79e037c80e9e856fd1333787d8e1516141c0f37e541096290cff88a546c6e62981e9309292cc75e28da8d44472acd5074ddab263385f9faa0998c784c0ec945b1"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}, &(0x7f0000000240)={0x0, 0xf, 0x193, {0x5, 0xf, 0x193, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x9, 0xb}, @generic={0x84, 0x10, 0x3, "adc2097d43626ee6b006a6b1a836a58ee82fece650c264ec14e90c04453e090d6015a5a6cead625c440e3d52234b2eb8402bf06d6eaaa059d694c330510a0c5c7259fcf68c3b68a5fdce073b176ff58826b0c41df98086b4e4e2ff1dbc249bd9d76bd86f6cf62f1a96b3dd21abe13fe9aaf0ae60662c771e2f45cedff5f4320706"}, @ptm_cap={0x3}, @generic={0xe1, 0x10, 0xa, "a112e65f1b7363c2d4050feab53add15d78897ca68b7529444974cac5fe72477c5cab5785a21911e69297827da90654fa378a94710e3ec890bd472bb605b3dc46603e0cac803c5eb494ad90a3ad1db3f99371dcc410f38eb56600f4ace8707498ae1d718f0228acee0469d05815c0cee9a41150bdea3a2862611b7a876f4f843c03ba2d9186ccc9e0f03b3a86122202e300426fb58d06d66a0e76a3b2304ec1f38d75d6227822e3a2d6509b03f964d4aa6e5f126c8afa22882ed81a1221ee7ecabd84d6042f29e7bbc8dc684c5bd126c30a059ab781fb5ee0eedf787c5ce"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "5fd0657808f96e7b2860f98f7933e07e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4e, 0xd5, 0x6, 0x0, 0xb}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x70, 0x81, 0xd6, "3298b725", "bed93b77"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x53, 0x1, 0x9, 0x7, 0x3, 0x2, 0x9}}}, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x40, 0xe, 0x94, "5271240f380d9d9b18986b22a84f3f583f2281b435ce8effcf94200626f8c255d0e477ed76c8274373c707c31968f9c982f29e4bc9a09a8e4fa91e8f761bc017f3806830bb4b776b1a7817055fe33c011bf0b4a7f9ffef356a75c3b91ed9d7fe39604ea2d45faf5b73d9b8eab678b10476abe3057734266a55b28a65b31cdaa8eb20a9f27b8940b7617d7a6a5c461cf67370bba2"}, &(0x7f00000005c0)={0x0, 0xa, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x100, 0x20, [0xff0f]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000740)={0x40, 0xb, 0x2, "98cf"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0xfd0}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000800)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000840)={0x40, 0x19, 0x2, "bbef"}, &(0x7f0000000880)={0x40, 0x1a, 0x2}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0xa3}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x2}}) 2.449193724s ago: executing program 1 (id=725): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0xdddd0000, 0x1000, &(0x7f0000c15000/0x1000)=nil}) getresgid(&(0x7f0000000280), &(0x7f0000000440), &(0x7f0000000480)=0x0) fchownat(r2, &(0x7f00000000c0)='./file0\x00', 0x0, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000380)={0x7fffffff}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xa) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000240)={&(0x7f0000000040)={0x0, 0x0, 0x1, 0x9, 0xfffffffffffffffb}}, 0x1) fchdir(0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000022c0)=ANY=[@ANYBLOB="e8001fb875d49806d5ff74e33bb73d5cd0dd104d9af560", @ANYRES16=r1, @ANYBLOB="010027bd60000400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000500130001000000"], 0x3c}}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x2e, 0x9, 0x70bd27, 0x25dfdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000002060102040000ffff000000000000000500010006000000050005000700000016000300686173683a6e65742c706f72742c6e65745a0f757089140000000900020073717adf000000000500040003000000"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r7, 0x5}}, 0x48) 2.401478012s ago: executing program 2 (id=726): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f00000001c0)=0x4) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="40b29d00100020010400", @ANYRESOCT=0x0, @ANYBLOB="002400000000000014001280090001007663616e00000000040002800a000100ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x8011}, 0x4000000) 1.913567252s ago: executing program 2 (id=727): mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) fchownat(r2, &(0x7f00000000c0)='./file0\x00', 0x0, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) pread64(0xffffffffffffffff, 0x0, 0x0, 0xa) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000240)={&(0x7f0000000040)={0x0, 0x0, 0x1, 0x9, 0xfffffffffffffffb}}, 0x1) fchdir(0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000022c0)=ANY=[@ANYBLOB="e8001fb875d49806d5ff74e33bb73d5cd0dd104d9af560", @ANYRES16=r1, @ANYBLOB="010027bd60000400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000500130001000000"], 0x3c}}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x2e, 0x9, 0x70bd27, 0x25dfdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000002060102040000ffff000000000000000500010006000000050005000700000016000300686173683a6e65742c706f72742c6e65745a0f757089140000000900020073717adf000000000500040003000000"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r6, 0x5}}, 0x48) 954.152766ms ago: executing program 4 (id=732): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_setup(0x2736, &(0x7f0000000000)={0x0, 0xb906, 0x4000, 0x0, 0x7ff}) clock_adjtime(0x4, &(0x7f0000000000)={0xa, 0x8d, 0xfffffffffffffffd, 0x200000000000006, 0x3b26db96, 0x40000004a, 0x52e6ac5d, 0x100000000001, 0x9655, 0xfffffffffffffffe, 0xa, 0xfffffffffffffffd, 0x5, 0x8000000b, 0x80000000008000, 0xcc3, 0x10001, 0x85, 0x401, 0x2, 0xffffffff, 0x5, 0x200000007, 0xfffffffffffffffe, 0x3, 0xa}) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000751972950301010100000000000000000a0000061e0001800c000280050001003a0000000c00198008000100"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYRESDEC=r5], 0x48) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000180)={0x7, {0x3, 0x9f, 0x9, 0x82, 0xfffffff9, 0x3}}) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = gettid() recvmmsg(r4, &(0x7f00000066c0)=[{{&(0x7f00000003c0)=@ax25={{0x3, @netrom}, [@null, @rose, @default, @rose, @remote, @null, @bcast]}, 0x80, &(0x7f0000002780)=[{&(0x7f0000000440)=""/246, 0xf6}, {&(0x7f0000000540)=""/221, 0xdd}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/117, 0x75}, {&(0x7f00000007c0)=""/51, 0x33}, {&(0x7f0000000840)=""/188, 0xbc}, {&(0x7f0000000900)=""/211, 0xd3}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/131, 0x83}], 0x9, &(0x7f0000002840)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000003840)=@tipc=@id, 0x80, &(0x7f0000004bc0)=[{&(0x7f00000038c0)=""/163, 0xa3}, {&(0x7f0000003980)=""/224, 0xe0}, {&(0x7f0000003a80)=""/174, 0xae}, {&(0x7f0000000a80)=""/6, 0x6}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/19, 0x13}], 0x6, &(0x7f0000004c40)=""/184, 0xb8}, 0xff}, {{&(0x7f0000004d00)=@ieee802154, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004d80)=""/12, 0xc}, {&(0x7f0000004dc0)=""/87, 0x57}, {&(0x7f0000004e40)=""/199, 0xc7}], 0x3, &(0x7f0000004f80)=""/108, 0x6c}}, {{&(0x7f0000005000)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x80, &(0x7f0000005380)=[{&(0x7f0000005080)=""/177, 0xb1}, {&(0x7f0000000a00)=""/128, 0x80}, {&(0x7f00000051c0)=""/129, 0x81}, {&(0x7f0000005280)=""/181, 0xb5}, {&(0x7f0000005340)=""/34, 0x22}], 0x5}, 0x8}, {{&(0x7f0000005400)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/111, 0x6f}, {&(0x7f0000006500)=""/62, 0x3e}, {&(0x7f0000006540)=""/105, 0x69}], 0x4, &(0x7f0000006600)=""/184, 0xb8}}], 0x5, 0x2020, &(0x7f0000006840)) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000000000)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syncfs(0xffffffffffffffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) 141.543955ms ago: executing program 3 (id=733): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 0s ago: executing program 4 (id=734): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x0, 0xf, {0xffffffffffffffff}, {}, 0x1, 0xd}) ptrace$pokeuser(0x6, r0, 0x8, 0xfffffffffffff990) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="10005f29131700001114010028bd7000ffdbe225"], 0x10}, 0x1, 0x0, 0x0, 0x844}, 0x810) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2}) close(0x3) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb", @ANYBLOB="0300000000000000280012800a00010076786c61"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = epoll_create1(0x0) epoll_wait(r7, &(0x7f0000000000)=[{}], 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setscheduler(0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): ss=netlink_tcpdiag_socket pid=7042 comm=syz.0.301 [ 154.110331][ T990] em28xx 5-1:0.132: No AC97 audio processor [ 154.118987][ T990] usb 5-1: Decoder not found [ 154.126545][ T990] em28xx 5-1:0.132: failed to create media graph [ 154.132984][ T804] hid-retrode 0003:0403:97C1.0006: unknown main item tag 0x0 [ 154.134727][ T990] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 154.156292][ T990] em28xx 5-1:0.132: Remote control support is not available for this card. [ 154.166304][ T5716] em28xx 5-1:0.132: Closing input extension [ 154.183307][ T804] hid-retrode 0003:0403:97C1.0006: unknown main item tag 0x0 [ 154.197911][ T5716] em28xx 5-1:0.132: Freeing device [ 154.231683][ T5702] usb 4-1: GET_CAPABILITIES returned b2 [ 154.252629][ T804] hid-retrode 0003:0403:97C1.0006: item fetching failed at offset 2/47 [ 154.307950][ T5702] usbtmc 4-1:16.0: can't read capabilities [ 154.332518][ T804] hid-retrode 0003:0403:97C1.0006: probe with driver hid-retrode failed with error -22 [ 154.361812][ T7046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.409578][ T804] usb 3-1: USB disconnect, device number 7 [ 154.502476][ T7050] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 154.559080][ T7032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.587682][ T7050] kvm: pic: non byte read [ 154.592453][ T7032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.607757][ T7050] kvm: pic: level sensitive irq not supported [ 154.608033][ T7050] kvm: pic: non byte read [ 154.633501][ T9] usb 4-1: USB disconnect, device number 11 [ 154.782015][ T5841] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 154.953455][ T5841] usb 5-1: Using ep0 maxpacket: 32 [ 154.961763][ T5841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 154.969635][ T5841] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 154.981379][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.994348][ T5841] usb 5-1: config 0 descriptor?? [ 155.183035][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 155.204604][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.216049][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.332015][ T9] usb 3-1: device descriptor read/64, error -71 [ 155.412167][ T804] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 155.432829][ T5841] usbhid 5-1:0.0: can't add hid device: -71 [ 155.442177][ T5841] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 155.464330][ T5841] usb 5-1: USB disconnect, device number 14 [ 155.571983][ T804] usb 2-1: Using ep0 maxpacket: 32 [ 155.581527][ T804] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 155.590211][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 155.605625][ T804] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 155.621979][ T804] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 155.641239][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.658744][ T804] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 155.675049][ T804] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 155.688538][ T804] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 155.697804][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.708254][ T804] usb 2-1: config 0 descriptor?? [ 156.257825][ T9] usb 3-1: device descriptor read/64, error -71 [ 156.267783][ T804] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 156.303605][ T804] usb 2-1: USB disconnect, device number 11 [ 156.318397][ T804] usblp0: removed [ 156.372307][ T9] usb usb3-port1: attempt power cycle [ 157.022993][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 157.092531][ T9] usb 3-1: device descriptor read/8, error -71 [ 157.612021][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 157.804647][ T9] usb 3-1: device descriptor read/8, error -71 [ 157.922369][ T9] usb usb3-port1: unable to enumerate USB device [ 158.263338][ T804] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 158.344524][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 158.433468][ T804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.456133][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.478854][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.503941][ T804] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 158.531987][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 158.543908][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.562645][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 158.579027][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.589655][ T804] usb 4-1: config 0 descriptor?? [ 158.617047][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.633624][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.643802][ T5702] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 158.651521][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.666793][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 158.676206][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.812154][ T5702] usb 3-1: Using ep0 maxpacket: 32 [ 158.819598][ T5702] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 158.829593][ T5702] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 158.843517][ T5702] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 158.857345][ T5702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 158.871995][ T5702] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 158.882925][ T5702] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 158.900420][ T9] usb 2-1: GET_CAPABILITIES returned b2 [ 158.908824][ T9] usbtmc 2-1:16.0: can't read capabilities [ 158.919564][ T7107] Cannot find add_set index 0 as target [ 158.929216][ T5702] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 158.944324][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.970389][ T5702] usb 3-1: config 0 descriptor?? [ 159.019160][ T804] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 159.074728][ T804] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 159.090181][ T804] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 159.103202][ T804] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 159.117395][ T7089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.131436][ T804] hid-picolcd 0003:04D8:F002.0007: report_id 0 is invalid [ 159.142963][ T7089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.152913][ T804] hid-picolcd 0003:04D8:F002.0007: item 0 0 1 8 parsing failed [ 159.166836][ T804] hid-picolcd 0003:04D8:F002.0007: device report parse failed [ 159.176199][ T9] usb 2-1: USB disconnect, device number 12 [ 159.208537][ T804] hid-picolcd 0003:04D8:F002.0007: probe with driver hid-picolcd failed with error -22 [ 159.226174][ T5702] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 159.671418][ T990] usb 3-1: USB disconnect, device number 12 [ 159.716665][ T990] usblp1: removed [ 159.835104][ T5817] usb 4-1: USB disconnect, device number 12 [ 160.211963][ T990] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 160.259154][ T7123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.329'. [ 160.383941][ T990] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.466706][ T990] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 160.558417][ T990] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 160.637870][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.667465][ T990] usb 5-1: config 0 descriptor?? [ 160.728929][ T7135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.846746][ T7139] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 160.938615][ T7139] kvm: pic: level sensitive irq not supported [ 160.938680][ T7139] kvm: pic: non byte read [ 162.064707][ T7148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.337'. [ 162.512041][ T990] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 162.682559][ T990] usb 1-1: Using ep0 maxpacket: 8 [ 162.712424][ T990] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 162.742354][ T990] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.762486][ T5817] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 162.771935][ T990] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.794707][ T990] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.823331][ T990] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.860266][ T990] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.881601][ T990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.942208][ T5817] usb 3-1: Using ep0 maxpacket: 32 [ 162.957723][ T5817] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 162.981485][ T5817] usb 3-1: config 0 has no interface number 0 [ 162.987719][ T5702] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 163.011090][ T5817] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.026919][ T5716] usb 5-1: USB disconnect, device number 15 [ 163.050628][ T5817] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 163.074874][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.095809][ T5817] usb 3-1: Product: syz [ 163.108358][ T5817] usb 3-1: Manufacturer: syz [ 163.122341][ T5817] usb 3-1: SerialNumber: syz [ 163.129693][ T990] usb 1-1: GET_CAPABILITIES returned b2 [ 163.145868][ T5817] usb 3-1: config 0 descriptor?? [ 163.160653][ T990] usbtmc 1-1:16.0: can't read capabilities [ 163.172058][ T5702] usb 2-1: Using ep0 maxpacket: 32 [ 163.178719][ T5817] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 163.196289][ T5702] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 163.211993][ T5817] em28xx 3-1:0.132: Video interface 132 found: [ 163.462813][ T5702] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 163.472244][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.502121][ T5702] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 163.502345][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.545199][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.579256][ T5702] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 163.608283][ T804] usb 1-1: USB disconnect, device number 8 [ 163.621721][ T5702] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 163.665074][ T5702] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 163.706097][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.728205][ T5702] usb 2-1: config 0 descriptor?? [ 163.780979][ T5817] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 163.963677][ T5702] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 164.142011][ T990] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 164.165243][ T30] audit: type=1400 audit(1778741724.788:358): avc: denied { read write } for pid=7157 comm="syz.1.340" name="lp0" dev="devtmpfs" ino=3088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 164.220996][ T30] audit: type=1400 audit(1778741724.788:359): avc: denied { open } for pid=7157 comm="syz.1.340" path="/dev/usb/lp0" dev="devtmpfs" ino=3088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 164.333285][ T990] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.344341][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 164.361152][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.381049][ T990] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 164.391665][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.412022][ T5817] em28xx 3-1:0.132: failed to read eeprom (err=-110) [ 164.416789][ T990] usb 5-1: config 0 descriptor?? [ 164.456647][ T5817] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 164.698513][ T7176] netlink: 44 bytes leftover after parsing attributes in process `syz.3.346'. [ 164.721740][ T5817] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 164.729659][ T5817] em28xx 3-1:0.132: analog set to bulk mode. [ 164.735747][ T5702] em28xx 3-1:0.132: Registering V4L2 extension [ 164.853845][ T990] hid-picolcd 0003:04D8:F002.0008: unknown main item tag 0x0 [ 164.877016][ T990] hid-picolcd 0003:04D8:F002.0008: unknown main item tag 0x0 [ 164.894289][ T5702] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 164.895151][ T5716] usb 3-1: USB disconnect, device number 13 [ 164.911566][ T990] hid-picolcd 0003:04D8:F002.0008: unknown main item tag 0x0 [ 164.922367][ T990] hid-picolcd 0003:04D8:F002.0008: unknown main item tag 0x0 [ 164.931011][ T5716] em28xx 3-1:0.132: Disconnecting em28xx [ 164.939254][ T990] hid-picolcd 0003:04D8:F002.0008: report_id 0 is invalid [ 164.947804][ T990] hid-picolcd 0003:04D8:F002.0008: item 0 0 1 8 parsing failed [ 164.956881][ T990] hid-picolcd 0003:04D8:F002.0008: device report parse failed [ 164.966082][ T990] hid-picolcd 0003:04D8:F002.0008: probe with driver hid-picolcd failed with error -22 [ 165.061737][ T5702] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 165.088424][ T5702] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 165.107450][ T5702] em28xx 3-1:0.132: No AC97 audio processor [ 165.122328][ T5702] usb 3-1: Decoder not found [ 165.135617][ T5702] em28xx 3-1:0.132: failed to create media graph [ 165.148545][ T5702] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 165.176534][ T5702] em28xx 3-1:0.132: Remote control support is not available for this card. [ 165.200401][ T5716] em28xx 3-1:0.132: Closing input extension [ 165.235486][ T5716] em28xx 3-1:0.132: Freeing device [ 165.806711][ T5817] usb 2-1: USB disconnect, device number 13 [ 165.858299][ T5817] usblp0: removed [ 165.996188][ T7195] fuse: Bad value for 'fd' [ 166.362650][ T5702] usb 5-1: USB disconnect, device number 16 [ 166.526931][ T7210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.620514][ T7213] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 166.644302][ T7213] kvm: pic: level sensitive irq not supported [ 166.644384][ T7213] kvm: pic: non byte read [ 166.902068][ T5817] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 167.074364][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 167.089395][ T5817] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 167.116585][ T5817] usb 2-1: config 0 has no interface number 0 [ 167.132082][ T5817] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 167.159010][ T5817] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 167.175586][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.196572][ T5817] usb 2-1: Product: syz [ 167.201070][ T7220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.212178][ T5817] usb 2-1: Manufacturer: syz [ 167.232780][ T5817] usb 2-1: SerialNumber: syz [ 167.276380][ T5817] usb 2-1: config 0 descriptor?? [ 167.296288][ T5817] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 167.321574][ T5817] em28xx 2-1:0.132: Video interface 132 found: [ 167.382181][ T7221] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 167.438225][ T7221] kvm: pic: level sensitive irq not supported [ 167.439140][ T7221] kvm: pic: non byte read [ 167.462014][ T5702] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 167.632403][ T5702] usb 5-1: Using ep0 maxpacket: 32 [ 167.651575][ T5702] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.680905][ T5702] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.723796][ T5702] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.755315][ T5817] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 167.766501][ T5702] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 167.814185][ T5702] usb 5-1: config 0 interface 0 has no altsetting 0 [ 167.836095][ T5702] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 167.868684][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.912220][ T5702] usb 5-1: config 0 descriptor?? [ 168.146758][ T5702] usbhid 5-1:0.0: can't add hid device: -71 [ 168.167154][ T5702] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 168.202134][ T5702] usb 5-1: USB disconnect, device number 17 [ 168.411976][ T5817] em28xx 2-1:0.132: failed to read eeprom (err=-110) [ 168.424232][ T5817] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 168.772026][ T5817] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 168.795954][ T5817] em28xx 2-1:0.132: analog set to bulk mode. [ 168.813767][ T5702] em28xx 2-1:0.132: Registering V4L2 extension [ 169.017319][ T5702] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 169.040614][ T804] usb 2-1: USB disconnect, device number 14 [ 169.047638][ T5702] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 169.060658][ T804] em28xx 2-1:0.132: Disconnecting em28xx [ 169.203560][ T5817] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 169.217667][ T5702] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 169.237726][ T5702] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 169.259458][ T5702] em28xx 2-1:0.132: No AC97 audio processor [ 169.288254][ T5702] usb 2-1: Decoder not found [ 169.302378][ T5702] em28xx 2-1:0.132: failed to create media graph [ 169.323323][ T5702] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 169.364312][ T5702] em28xx 2-1:0.132: Remote control support is not available for this card. [ 169.383377][ T804] em28xx 2-1:0.132: Closing input extension [ 169.391966][ T5817] usb 4-1: Using ep0 maxpacket: 32 [ 169.401408][ T5817] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 169.417156][ T804] em28xx 2-1:0.132: Freeing device [ 169.436372][ T5817] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 169.469821][ T5817] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 169.505836][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 169.539834][ T5817] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 169.572080][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 169.604860][ T5817] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 169.635083][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.689072][ T5817] usb 4-1: config 0 descriptor?? [ 169.804397][ T7244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.921412][ T7251] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 169.949161][ T5817] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 169.988045][ T7251] kvm: pic: non byte read [ 170.008802][ T7251] kvm: pic: level sensitive irq not supported [ 170.009296][ T7251] kvm: pic: non byte read [ 171.931687][ T990] usb 4-1: USB disconnect, device number 13 [ 171.960372][ T990] usblp0: removed [ 172.132344][ T5716] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 172.380392][ T5716] usb 3-1: Using ep0 maxpacket: 32 [ 172.413123][ T5716] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.450454][ T5716] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.480572][ T5716] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.516494][ T5716] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 172.555240][ T5716] usb 3-1: config 0 interface 0 has no altsetting 0 [ 172.579405][ T5716] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 172.607334][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.637159][ T5716] usb 3-1: config 0 descriptor?? [ 172.898790][ T5716] usbhid 3-1:0.0: can't add hid device: -71 [ 172.924754][ T5716] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 172.937943][ T7284] netlink: 'syz.3.374': attribute type 1 has an invalid length. [ 173.005737][ T5716] usb 3-1: USB disconnect, device number 14 [ 173.044593][ T7284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.114128][ T7286] bond1: (slave ip6erspan0): making interface the new active one [ 173.137428][ T7286] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 173.933166][ T7298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.039958][ T7303] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 174.385679][ T7303] kvm: pic: level sensitive irq not supported [ 174.385789][ T7303] kvm: pic: non byte read [ 174.951978][ T5716] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 175.084427][ T7314] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7314 comm=syz.4.383 [ 175.122421][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 175.139314][ T5716] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 175.155551][ T5716] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 175.180243][ T5716] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 175.204996][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.225243][ T5716] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 175.247915][ T5716] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 175.281832][ T5716] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 175.302199][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.342589][ T5716] usb 4-1: config 0 descriptor?? [ 175.736798][ T5716] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 176.053500][ T7325] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 177.232141][ T5817] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 177.641097][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.389'. [ 177.672360][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 177.681368][ T5817] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.716693][ T5716] usb 4-1: USB disconnect, device number 14 [ 177.725972][ T5716] usblp0: removed [ 177.734303][ T5817] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.791098][ T5817] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.833529][ T5817] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 177.895684][ T5817] usb 2-1: config 0 interface 0 has no altsetting 0 [ 177.897782][ T7339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.391'. [ 177.934956][ T5817] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 177.949696][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.990841][ T5817] usb 2-1: config 0 descriptor?? [ 178.172132][ T5716] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 178.443183][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 178.466283][ T5716] usb 4-1: config 0 interface 0 has no altsetting 0 [ 178.466901][ T5817] usbhid 2-1:0.0: can't add hid device: -71 [ 178.488032][ T5716] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 178.488052][ T5817] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 178.774014][ T5817] usb 2-1: USB disconnect, device number 15 [ 178.799133][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.847126][ T5716] usb 4-1: config 0 descriptor?? [ 179.322786][ T7352] fuse: Bad value for 'fd' [ 179.373136][ T5716] hid-retrode 0003:0403:97C1.0009: unknown main item tag 0x0 [ 179.388960][ T5716] hid-retrode 0003:0403:97C1.0009: unknown main item tag 0x0 [ 179.410068][ T5716] hid-retrode 0003:0403:97C1.0009: item fetching failed at offset 2/47 [ 179.425279][ T5716] hid-retrode 0003:0403:97C1.0009: probe with driver hid-retrode failed with error -22 [ 179.652724][ T5716] usb 4-1: USB disconnect, device number 15 [ 179.895302][ T7362] Cannot find add_set index 0 as target [ 179.925608][ T7364] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 180.769151][ T7370] comedi: valid board names for 8255 driver are: [ 180.807498][ T7370] 8255 [ 180.838716][ T7370] comedi: valid board names for vmk80xx driver are: [ 180.852374][ T7370] vmk80xx [ 180.855493][ T7370] comedi: valid board names for usbduxsigma driver are: [ 180.881862][ T7370] usbduxsigma [ 180.890445][ T7370] comedi: valid board names for usbduxfast driver are: [ 180.906518][ T7370] usbduxfast [ 180.918579][ T7370] comedi: valid board names for usbdux driver are: [ 180.937081][ T7370] usbdux [ 180.947430][ T7370] comedi: valid board names for ni6501 driver are: [ 180.972646][ T7370] ni6501 [ 180.981586][ T7370] comedi: valid board names for dt9812 driver are: [ 181.012739][ T5702] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 181.038405][ T7370] dt9812 [ 181.051583][ T7370] comedi: valid board names for ni_labpc_cs driver are: [ 181.090946][ T7370] ni_labpc_cs [ 181.101021][ T7370] comedi: valid board names for ni_daq_700 driver are: [ 181.125397][ T7370] ni_daq_700 [ 181.135382][ T7370] comedi: valid board names for labpc_pci driver are: [ 181.162463][ T7370] labpc_pci [ 181.170414][ T7370] comedi: valid board names for adl_pci9118 driver are: [ 181.181945][ T5702] usb 4-1: Using ep0 maxpacket: 32 [ 181.190987][ T5702] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 181.209329][ T5702] usb 4-1: config 0 has no interface number 0 [ 181.222807][ T5702] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.232994][ T7370] pci9118dg [ 181.237672][ T7370] pci9118hg [ 181.253931][ T7370] pci9118hr [ 181.258963][ T5702] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 181.269902][ T7370] comedi: valid board names for 8255_pci driver are: [ 181.276758][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.302635][ T7370] 8255_pci [ 181.313666][ T7370] comedi: valid board names for s526 driver are: [ 181.320010][ T5702] usb 4-1: Product: syz [ 181.332592][ T5702] usb 4-1: Manufacturer: syz [ 181.342906][ T7370] s526 [ 181.353507][ T5702] usb 4-1: SerialNumber: syz [ 181.358137][ T7370] comedi: valid board names for multiq3 driver are: [ 181.375185][ T5702] usb 4-1: config 0 descriptor?? [ 181.383609][ T7370] multiq3 [ 181.394867][ T7370] comedi: valid board names for pcmuio driver are: [ 181.411992][ T5702] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 181.425140][ T7370] pcmuio48 [ 181.436454][ T7370] pcmuio96 [ 181.441684][ T5702] em28xx 4-1:0.132: Video interface 132 found: [ 181.448433][ T7370] comedi: valid board names for pcmmio driver are: [ 181.460311][ T7370] pcmmio [ 181.467245][ T7370] comedi: valid board names for pcmda12 driver are: [ 181.479432][ T7370] pcmda12 [ 181.485861][ T7370] comedi: valid board names for pcmad driver are: [ 181.497349][ T7370] pcmad12 [ 181.514813][ T7370] pcmad16 [ 181.527058][ T7370] comedi: valid board names for ni_labpc driver are: [ 181.583592][ T7370] lab-pc-1200 [ 181.607167][ T7370] lab-pc-1200ai [ 181.618121][ T7370] lab-pc+ [ 181.626649][ T7370] comedi: valid board names for atmio16 driver are: [ 181.640446][ T7370] atmio16 [ 181.647291][ T7370] atmio16d [ 181.654112][ T7370] comedi: valid board names for ni_at_ao driver are: [ 181.669280][ T7370] at-ao-6 [ 181.677053][ T7370] at-ao-10 [ 181.685473][ T7370] comedi: valid board names for ni_at_a2150 driver are: [ 181.700708][ T7370] ni_at_a2150 [ 181.754865][ T7370] comedi: valid board names for adq12b driver are: [ 181.791311][ T7370] adq12b [ 181.813645][ T7370] comedi: valid board names for mpc624 driver are: [ 181.846974][ T7370] mpc624 [ 181.850289][ T7370] comedi: valid board names for c6xdigio driver are: [ 181.863237][ T5702] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 181.907004][ T7370] c6xdigio [ 181.911836][ T7370] comedi: valid board names for aio_iiro_16 driver are: [ 181.931646][ T7370] aio_iiro_16 [ 181.939264][ T7370] comedi: valid board names for aio_aio12_8 driver are: [ 181.953922][ T7370] aio_aio12_8 [ 181.966095][ T7370] aio_ai12_8 [ 181.972762][ T7370] aio_ao12_4 [ 181.977508][ T7370] comedi: valid board names for fl512 driver are: [ 181.994164][ T7370] fl512 [ 182.001286][ T7370] comedi: valid board names for dmm32at driver are: [ 182.023341][ T7370] dmm32at [ 182.032372][ T7370] comedi: valid board names for dt282x driver are: [ 182.054647][ T7370] dt2821 [ 182.061163][ T7370] dt2821-f [ 182.069236][ T7370] dt2821-g [ 182.075874][ T7370] dt2823 [ 182.084016][ T7370] dt2824-pgh [ 182.092795][ T7370] dt2824-pgl [ 182.102126][ T7370] dt2825 [ 182.109115][ T7370] dt2827 [ 182.117360][ T7370] dt2828 [ 182.128977][ T7370] dt2829 [ 182.133713][ T7370] dt21-ez [ 182.141064][ T7370] dt23-ez [ 182.148979][ T7370] dt24-ez [ 182.157528][ T7370] dt24-ez-pgl [ 182.168681][ T7370] comedi: valid board names for dt2817 driver are: [ 182.184387][ T7370] dt2817 [ 182.191176][ T7370] comedi: valid board names for dt2815 driver are: [ 182.209009][ T7370] dt2815 [ 182.216276][ T7370] comedi: valid board names for dt2814 driver are: [ 182.231983][ T7370] dt2814 [ 182.239936][ T7370] comedi: valid board names for dt2811 driver are: [ 182.258507][ T7370] dt2811-pgh [ 182.266827][ T7370] dt2811-pgl [ 182.277641][ T7370] comedi: valid board names for dt2801 driver are: [ 182.293826][ T7370] dt2801 [ 182.306493][ T7370] comedi: valid board names for das6402 driver are: [ 182.320378][ T7370] das6402-12 [ 182.341967][ T7370] das6402-16 [ 182.358295][ T7370] comedi: valid board names for das1800 driver are: [ 182.382335][ T7370] das-1701st [ 182.393388][ T7370] das-1701st-da [ 182.407104][ T7370] das-1702st [ 182.423755][ T7370] das-1702st-da [ 182.432069][ T7370] das-1702hr [ 182.445703][ T7370] das-1702hr-da [ 182.457435][ T7370] das-1701ao [ 182.470844][ T7370] das-1702ao [ 182.480304][ T7370] das-1801st [ 182.488905][ T7370] das-1801st-da [ 182.682733][ T7370] das-1802st [ 182.708235][ T7370] das-1802st-da [ 182.739252][ T7370] das-1802hr [ 182.842332][ T7370] das-1802hr-da [ 182.864087][ T7370] das-1801hc [ 182.876539][ T7370] das-1802hc [ 182.912022][ T5702] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 182.920911][ T7370] das-1801ao [ 182.929181][ T7370] das-1802ao [ 182.937320][ T5702] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 182.941563][ T7370] comedi: valid board names for das800 driver are: [ 182.961277][ T7370] das-800 [ 182.968916][ T7370] cio-das800 [ 182.972305][ T7370] das-801 [ 182.975988][ T7370] cio-das801 [ 182.980858][ T7370] das-802 [ 183.005764][ T7370] cio-das802 [ 183.031443][ T7370] cio-das802/16 [ 183.068927][ T7370] comedi: valid board names for isa-das08 driver are: [ 183.100616][ T7370] isa-das08 [ 183.114152][ T7370] das08-pgm [ 183.131582][ T7370] das08-pgh [ 183.144335][ T7370] das08-pgl [ 183.159700][ T7370] das08-aoh [ 183.172532][ T7370] das08-aol [ 183.187693][ T7370] das08-aom [ 183.201477][ T7370] das08/jr-ao [ 183.221976][ T5702] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 183.232421][ T7370] das08jr-16-ao [ 183.242025][ T7370] pc104-das08 [ 183.251262][ T5702] em28xx 4-1:0.132: analog set to bulk mode. [ 183.258913][ T7370] das08jr/16 [ 183.270990][ T7370] comedi: valid board names for das16m1 driver are: [ 183.282217][ T7370] das16m1 [ 183.290715][ T7370] comedi: valid board names for dac02 driver are: [ 183.303605][ T9] em28xx 4-1:0.132: Registering V4L2 extension [ 183.313895][ T7370] dac02 [ 183.317207][ T5702] usb 4-1: USB disconnect, device number 16 [ 183.331684][ T7370] comedi: valid board names for rti802 driver are: [ 183.346041][ T5702] em28xx 4-1:0.132: Disconnecting em28xx [ 183.358202][ T7370] rti802 [ 183.361234][ T7370] comedi: valid board names for rti800 driver are: [ 183.369685][ T7370] rti800 [ 183.375368][ T7370] rti815 [ 183.378322][ T7370] comedi: valid board names for pcm3724 driver are: [ 183.386725][ T7370] pcm3724 [ 183.389751][ T7370] comedi: valid board names for pcl818 driver are: [ 183.396858][ T7370] pcl818l [ 183.442138][ T7370] pcl818h [ 183.456065][ T7370] pcl818hd [ 183.479403][ T7370] pcl818hg [ 183.494787][ T7370] pcl818 [ 183.522022][ T7370] pcl718 [ 183.536504][ T7370] pcm3718 [ 183.554869][ T7370] comedi: valid board names for pcl816 driver are: [ 183.582074][ T7370] pcl816 [ 183.590323][ T7370] pcl814b [ 183.591921][ T9] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 183.602099][ T7370] comedi: valid board names for pcl812 driver are: [ 183.609233][ T7370] pcl812 [ 183.612779][ T7370] pcl812pg [ 183.622352][ T7370] acl8112pg [ 183.626817][ T7370] acl8112dg [ 183.634327][ T7370] acl8112hg [ 183.642107][ T9] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 183.654452][ T7370] a821pgl [ 183.657867][ T7370] a821pglnda [ 183.668528][ T7370] a821pgh [ 183.671559][ T7370] a822pgl [ 183.678629][ T7370] a822pgh [ 183.679913][ T9] em28xx 4-1:0.132: No AC97 audio processor [ 183.687968][ T7370] a823pgl [ 183.687980][ T7370] a823pgh [ 183.687986][ T7370] pcl813 [ 183.687992][ T7370] pcl813b [ 183.687998][ T7370] acl8113 [ 183.688005][ T7370] iso813 [ 183.688011][ T7370] acl8216 [ 183.688017][ T7370] a826pg [ 183.688025][ T7370] comedi: valid board names for pcl730 driver are: [ 183.688033][ T7370] pcl730 [ 183.688039][ T7370] iso730 [ 183.688046][ T7370] acl7130 [ 183.688052][ T7370] pcm3730 [ 183.688058][ T7370] pcl725 [ 183.688064][ T7370] p8r8dio [ 183.688071][ T7370] acl7225b [ 183.688077][ T7370] p16r16dio [ 183.688083][ T7370] pcl733 [ 183.688089][ T7370] pcl734 [ 183.688095][ T7370] opmm-1616-xt [ 183.688102][ T7370] pearl-mm-p [ 183.688108][ T7370] ir104-pbf [ 183.688115][ T7370] comedi: valid board names for pcl726 driver are: [ 183.688123][ T7370] pcl726 [ 183.688129][ T7370] pcl727 [ 183.688135][ T7370] pcl728 [ 183.688142][ T7370] acl6126 [ 183.688148][ T7370] acl6128 [ 183.688154][ T7370] comedi: valid board names for pcl724 driver are: [ 183.688161][ T7370] pcl724 [ 183.688168][ T7370] pcl722 [ 183.688174][ T7370] pcl731 [ 183.688179][ T7370] acl7122 [ 183.688185][ T7370] acl7124 [ 183.688190][ T7370] pet48dio [ 183.688196][ T7370] pcmio48 [ 183.688202][ T7370] onyx-mm-dio [ 183.688209][ T7370] comedi: valid board names for pcl711 driver are: [ 183.688217][ T7370] pcl711 [ 183.688223][ T7370] pcl711b [ 183.688229][ T7370] acl8112hg [ 183.688235][ T7370] acl8112dg [ 183.688242][ T7370] comedi: valid board names for amplc_pc263 driver are: [ 183.688250][ T7370] pc263 [ 183.688256][ T7370] comedi: valid board names for amplc_pc236 driver are: [ 183.688264][ T7370] pc36at [ 183.688270][ T7370] comedi: valid board names for amplc_dio200 driver are: [ 183.688277][ T7370] pc212e [ 183.688282][ T7370] pc214e [ 183.688288][ T7370] pc215e [ 183.688293][ T7370] pc218e [ 183.688299][ T7370] pc272e [ 183.688304][ T7370] comedi: valid board names for comedi_parport driver are: [ 183.688312][ T7370] comedi_parport [ 183.688318][ T7370] comedi: valid board names for comedi_test driver are: [ 183.688326][ T7370] comedi_test [ 183.688332][ T7370] comedi: valid board names for comedi_bond driver are: [ 183.688340][ T7370] comedi_bond [ 184.165823][ T7414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.409'. [ 184.746412][ T9] usb 4-1: Decoder not found [ 184.751085][ T9] em28xx 4-1:0.132: failed to create media graph [ 184.758371][ T9] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 184.794448][ T9] em28xx 4-1:0.132: Remote control support is not available for this card. [ 184.812831][ T5702] em28xx 4-1:0.132: Closing input extension [ 184.824222][ T5702] em28xx 4-1:0.132: Freeing device [ 185.413047][ T5701] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 185.464213][ T7431] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 186.048231][ T7435] netlink: 'syz.1.417': attribute type 1 has an invalid length. [ 186.289481][ T7435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.392019][ T5701] usb 4-1: Using ep0 maxpacket: 8 [ 186.408054][ T5701] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 186.416552][ T5701] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.426432][ T5701] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.436248][ T5701] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.446239][ T5701] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.459559][ T5701] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 186.471176][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.801114][ T7444] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 186.826218][ T7448] netlink: 44 bytes leftover after parsing attributes in process `syz.0.421'. [ 186.846780][ T7444] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.870220][ T5701] usb 4-1: GET_CAPABILITIES returned b2 [ 186.880620][ T5701] usbtmc 4-1:16.0: can't read capabilities [ 187.223035][ T5701] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 187.284761][ T7424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.305739][ T7424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.348553][ T7462] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 187.434175][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.663523][ T5701] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 187.676971][ T5716] usb 4-1: USB disconnect, device number 17 [ 187.698758][ T5701] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 187.763164][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.799726][ T7446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.831487][ T5701] usb 5-1: config 0 descriptor?? [ 188.023589][ T7472] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7472 comm=syz.0.426 [ 188.826916][ T5702] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 188.827314][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.844075][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.914408][ T7490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.431'. [ 188.964463][ T7492] netlink: 'syz.1.432': attribute type 1 has an invalid length. [ 188.982005][ T5702] usb 1-1: Using ep0 maxpacket: 32 [ 188.990345][ T7492] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.995176][ T5702] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 189.006420][ T5702] usb 1-1: config 0 has no interface number 0 [ 189.018350][ T5702] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 189.040418][ T5702] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 189.053775][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.075504][ T5702] usb 1-1: Product: syz [ 189.081638][ T5702] usb 1-1: Manufacturer: syz [ 189.086661][ T5702] usb 1-1: SerialNumber: syz [ 189.096968][ T7495] IPVS: dh: FWM 3 0x00000003 - no destination available [ 189.105414][ T5702] usb 1-1: config 0 descriptor?? [ 189.116553][ T5702] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 189.126914][ T5702] em28xx 1-1:0.132: Video interface 132 found: [ 189.615064][ T5702] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 189.983286][ T804] usb 5-1: USB disconnect, device number 18 [ 190.632100][ T5702] em28xx 1-1:0.132: failed to read eeprom (err=-110) [ 190.639000][ T5702] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 190.670742][ T7512] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7512 comm=syz.4.438 [ 190.883522][ T7516] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 190.962851][ T5702] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 190.972404][ T5702] em28xx 1-1:0.132: analog set to bulk mode. [ 190.978929][ T804] em28xx 1-1:0.132: Registering V4L2 extension [ 190.996629][ T5702] usb 1-1: USB disconnect, device number 9 [ 191.009965][ T5702] em28xx 1-1:0.132: Disconnecting em28xx [ 191.043982][ T7526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.443'. [ 191.144277][ T7531] netlink: 'syz.1.444': attribute type 1 has an invalid length. [ 191.186067][ T7531] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.226372][ T804] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 191.436391][ T804] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 191.444033][ T804] em28xx 1-1:0.132: No AC97 audio processor [ 191.473518][ T804] usb 1-1: Decoder not found [ 191.486013][ T804] em28xx 1-1:0.132: failed to create media graph [ 191.504524][ T804] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 191.620784][ T804] em28xx 1-1:0.132: Remote control support is not available for this card. [ 191.630654][ T5702] em28xx 1-1:0.132: Closing input extension [ 191.642430][ T5702] em28xx 1-1:0.132: Freeing device [ 192.374245][ T7555] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7555 comm=syz.0.449 [ 192.811953][ T804] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 192.984367][ T804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.037045][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.093353][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.149337][ T804] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 193.198363][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.280196][ T5701] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 193.317072][ T804] usb 5-1: config 0 descriptor?? [ 193.433327][ T5701] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.443692][ T5701] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.456829][ T5701] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 193.465960][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.483278][ T5701] usb 4-1: config 0 descriptor?? [ 193.525386][ T5701] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 193.552044][ T5716] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 193.712162][ T5716] usb 1-1: Using ep0 maxpacket: 32 [ 193.726157][ T5716] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 193.742553][ T804] hid-picolcd 0003:04D8:F002.000A: unknown main item tag 0x0 [ 193.754167][ T5716] usb 1-1: config 0 has no interface number 0 [ 193.756978][ T804] hid-picolcd 0003:04D8:F002.000A: unknown main item tag 0x0 [ 193.775517][ T5716] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 193.776579][ T804] hid-picolcd 0003:04D8:F002.000A: unknown main item tag 0x0 [ 193.810729][ T5716] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 193.819893][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.834021][ T5716] usb 1-1: Product: syz [ 193.836769][ T804] hid-picolcd 0003:04D8:F002.000A: unknown main item tag 0x0 [ 193.848938][ T5716] usb 1-1: Manufacturer: syz [ 193.854248][ T804] hid-picolcd 0003:04D8:F002.000A: report_id 0 is invalid [ 193.862580][ T804] hid-picolcd 0003:04D8:F002.000A: item 0 0 1 8 parsing failed [ 193.864619][ T5716] usb 1-1: SerialNumber: syz [ 193.878218][ T804] hid-picolcd 0003:04D8:F002.000A: device report parse failed [ 193.890835][ T5716] usb 1-1: config 0 descriptor?? [ 193.894599][ T804] hid-picolcd 0003:04D8:F002.000A: probe with driver hid-picolcd failed with error -22 [ 193.914738][ T5716] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 193.944028][ T5716] em28xx 1-1:0.132: Video interface 132 found: [ 194.211012][ T804] usb 5-1: USB disconnect, device number 19 [ 194.369589][ T5716] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 194.547937][ T7579] netlink: 'syz.1.457': attribute type 1 has an invalid length. [ 194.619667][ T7579] 8021q: adding VLAN 0 to HW filter on device bond6 [ 194.630974][ T7582] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 195.068002][ T5716] em28xx 1-1:0.132: failed to read eeprom (err=-110) [ 195.090281][ T5716] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 195.372085][ T5716] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 195.388689][ T5716] em28xx 1-1:0.132: analog set to bulk mode. [ 195.403403][ T990] em28xx 1-1:0.132: Registering V4L2 extension [ 195.810099][ T5716] usb 1-1: USB disconnect, device number 10 [ 195.817648][ T5716] em28xx 1-1:0.132: Disconnecting em28xx [ 195.852038][ T804] usb 4-1: USB disconnect, device number 18 [ 196.341837][ T990] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 196.357897][ T990] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 196.447755][ T990] em28xx 1-1:0.132: No AC97 audio processor [ 196.742336][ T990] usb 1-1: Decoder not found [ 196.763441][ T990] em28xx 1-1:0.132: failed to create media graph [ 196.789480][ T990] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 196.832805][ T990] em28xx 1-1:0.132: Remote control support is not available for this card. [ 196.879822][ T5716] em28xx 1-1:0.132: Closing input extension [ 196.903205][ T5716] em28xx 1-1:0.132: Freeing device [ 197.551975][ T990] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 197.742322][ T990] usb 2-1: Using ep0 maxpacket: 8 [ 197.915773][ T990] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 197.940402][ T990] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.979652][ T990] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.007036][ T990] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 198.054098][ T990] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.070456][ T7629] netlink: 44 bytes leftover after parsing attributes in process `syz.3.471'. [ 198.103880][ T990] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 198.130725][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.208990][ T7633] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 198.404660][ T990] usb 2-1: GET_CAPABILITIES returned b2 [ 198.417591][ T990] usbtmc 2-1:16.0: can't read capabilities [ 198.607797][ T7623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.619752][ T7623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.682837][ T990] usb 2-1: USB disconnect, device number 16 [ 199.901938][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 200.172117][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 200.187881][ T9] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 200.210026][ T9] usb 5-1: config 0 has no interface number 0 [ 200.231555][ T9] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 200.271794][ T9] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 200.298951][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.320408][ T9] usb 5-1: Product: syz [ 200.336775][ T9] usb 5-1: Manufacturer: syz [ 200.355577][ T9] usb 5-1: SerialNumber: syz [ 200.369663][ T9] usb 5-1: config 0 descriptor?? [ 200.393130][ T9] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 200.411943][ T9] em28xx 5-1:0.132: Video interface 132 found: [ 200.429965][ T7658] netlink: 'syz.3.481': attribute type 1 has an invalid length. [ 200.461394][ T7658] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.522142][ T804] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 200.563779][ T7663] netlink: 44 bytes leftover after parsing attributes in process `syz.0.482'. [ 200.682069][ T804] usb 2-1: Using ep0 maxpacket: 32 [ 200.691644][ T804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.705160][ T804] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.719503][ T804] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.731480][ T804] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 200.745318][ T804] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.752191][ T804] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 200.761663][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.787349][ T804] usb 2-1: config 0 descriptor?? [ 200.815902][ T5716] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 200.856088][ T9] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 200.972302][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 200.978800][ T5716] usb 4-1: config 0 interface 0 has no altsetting 0 [ 200.986690][ T5716] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 200.998497][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.025743][ T5716] usb 4-1: config 0 descriptor?? [ 201.027018][ T804] usbhid 2-1:0.0: can't add hid device: -71 [ 201.062737][ T804] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 201.145722][ T804] usb 2-1: USB disconnect, device number 17 [ 201.456301][ T5716] hid-retrode 0003:0403:97C1.000B: unknown main item tag 0x0 [ 201.469456][ T5716] hid-retrode 0003:0403:97C1.000B: unknown main item tag 0x0 [ 201.478415][ T5716] hid-retrode 0003:0403:97C1.000B: unknown main item tag 0x0 [ 201.487920][ T5716] hid-retrode 0003:0403:97C1.000B: unknown main item tag 0x0 [ 201.495830][ T9] em28xx 5-1:0.132: failed to read eeprom (err=-110) [ 201.496249][ T5716] hid-retrode 0003:0403:97C1.000B: unknown main item tag 0x0 [ 201.510044][ T9] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 201.510626][ T5716] hid-retrode 0003:0403:97C1.000B: unknown main item tag 0x0 [ 201.528388][ T7678] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 201.544390][ T5716] hid-retrode 0003:0403:97C1.000B: unknown main item tag 0x0 [ 201.554668][ T5716] hid-retrode 0003:0403:97C1.000B: unknown main item tag 0x0 [ 201.564319][ T5716] hid-retrode 0003:0403:97C1.000B: unknown main item tag 0x0 [ 201.572158][ T5716] hid-retrode 0003:0403:97C1.000B: unknown main item tag 0x0 [ 201.601585][ T5716] hid-retrode 0003:0403:97C1.000B: hidraw0: USB HID v0.04 Device [HID 0403:97c1] on usb-dummy_hcd.3-1/input0 [ 201.674321][ T5716] usb 4-1: USB disconnect, device number 19 [ 201.722659][ T7680] fido_id[7680]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 202.441696][ T9] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 202.449830][ T9] em28xx 5-1:0.132: analog set to bulk mode. [ 202.455898][ T804] em28xx 5-1:0.132: Registering V4L2 extension [ 202.495495][ T9] usb 5-1: USB disconnect, device number 20 [ 202.557583][ T9] em28xx 5-1:0.132: Disconnecting em28xx [ 202.696764][ T7696] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 202.841047][ T804] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 202.987476][ T804] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 203.063579][ T804] em28xx 5-1:0.132: No AC97 audio processor [ 203.079528][ T804] usb 5-1: Decoder not found [ 203.100279][ T804] em28xx 5-1:0.132: failed to create media graph [ 203.129621][ T804] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 203.170976][ T804] em28xx 5-1:0.132: Remote control support is not available for this card. [ 203.218981][ T9] em28xx 5-1:0.132: Closing input extension [ 203.616050][ T9] em28xx 5-1:0.132: Freeing device [ 203.947443][ T7724] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 204.397037][ T7734] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7734 comm=syz.2.502 [ 205.702541][ T5716] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 205.726766][ T7749] netlink: 'syz.2.505': attribute type 1 has an invalid length. [ 205.882020][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 205.900581][ T5716] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 205.921361][ T5716] usb 4-1: config 0 has no interface number 0 [ 205.949846][ T5716] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 205.992104][ T5716] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 206.017805][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.036758][ T5716] usb 4-1: Product: syz [ 206.042023][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 206.049460][ T5716] usb 4-1: Manufacturer: syz [ 206.078143][ T5716] usb 4-1: SerialNumber: syz [ 206.117227][ T5716] usb 4-1: config 0 descriptor?? [ 206.129455][ T5716] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 206.142358][ T5716] em28xx 4-1:0.132: Video interface 132 found: [ 206.423929][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 206.440979][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 206.460472][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 206.546987][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.620475][ T9] usb 2-1: config 0 descriptor?? [ 206.678431][ T5716] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 206.892094][ T990] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 206.957643][ T7767] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7767 comm=syz.0.514 [ 207.062683][ T990] usb 3-1: Using ep0 maxpacket: 8 [ 207.103108][ T990] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 207.119699][ T990] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.144476][ T990] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.165980][ T990] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.187795][ T990] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.201507][ T990] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 207.221459][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.313249][ T5716] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 207.324454][ T5716] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 207.438281][ T990] usb 3-1: GET_CAPABILITIES returned b2 [ 207.452584][ T990] usbtmc 3-1:16.0: can't read capabilities [ 207.591968][ T5716] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 207.614899][ T5716] em28xx 4-1:0.132: analog set to bulk mode. [ 207.639150][ T990] em28xx 4-1:0.132: Registering V4L2 extension [ 207.673550][ T7760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.742973][ T7760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.779401][ T5701] usb 4-1: USB disconnect, device number 20 [ 207.833493][ T5701] em28xx 4-1:0.132: Disconnecting em28xx [ 207.878776][ T5716] usb 3-1: USB disconnect, device number 15 [ 207.896702][ T9] hid_parser_main: 37 callbacks suppressed [ 207.896722][ T9] hid-retrode 0003:0403:97C1.000C: unknown main item tag 0x0 [ 207.909981][ T9] hid-retrode 0003:0403:97C1.000C: unknown main item tag 0x0 [ 207.918388][ T9] hid-retrode 0003:0403:97C1.000C: unknown main item tag 0x0 [ 207.927068][ T9] hid-retrode 0003:0403:97C1.000C: unknown main item tag 0x0 [ 207.934549][ T9] hid-retrode 0003:0403:97C1.000C: unknown main item tag 0x0 [ 207.951976][ T9] hid-retrode 0003:0403:97C1.000C: unknown main item tag 0x0 [ 207.965075][ T9] hid-retrode 0003:0403:97C1.000C: unknown main item tag 0x0 [ 207.997916][ T9] hid-retrode 0003:0403:97C1.000C: unknown main item tag 0x0 [ 208.012192][ T24] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 208.133263][ T9] hid-retrode 0003:0403:97C1.000C: unknown main item tag 0x0 [ 208.141080][ T9] hid-retrode 0003:0403:97C1.000C: unknown main item tag 0x0 [ 208.178115][ T9] hid-retrode 0003:0403:97C1.000C: hidraw0: USB HID v0.04 Device [HID 0403:97c1] on usb-dummy_hcd.1-1/input0 [ 208.187030][ T990] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 208.199257][ T9] usb 2-1: USB disconnect, device number 18 [ 208.203876][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.220439][ T990] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 208.232118][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.243753][ T990] em28xx 4-1:0.132: No AC97 audio processor [ 208.251549][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.398447][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 208.447101][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.556174][ T24] usb 5-1: config 0 descriptor?? [ 208.562095][ T990] usb 4-1: Decoder not found [ 208.581026][ T990] em28xx 4-1:0.132: failed to create media graph [ 208.582625][ T7786] fido_id[7786]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 208.622021][ T990] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 208.716976][ T990] em28xx 4-1:0.132: Remote control support is not available for this card. [ 208.757649][ T5701] em28xx 4-1:0.132: Closing input extension [ 208.779208][ T5701] em28xx 4-1:0.132: Freeing device [ 208.862446][ T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 209.245903][ T9] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 209.249476][ T24] hid-picolcd 0003:04D8:F002.000D: report_id 0 is invalid [ 209.266321][ T24] hid-picolcd 0003:04D8:F002.000D: item 0 0 1 8 parsing failed [ 209.281652][ T24] hid-picolcd 0003:04D8:F002.000D: device report parse failed [ 209.301048][ T24] hid-picolcd 0003:04D8:F002.000D: probe with driver hid-picolcd failed with error -22 [ 209.319198][ T9] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.350126][ T9] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 209.395104][ T7801] netlink: 44 bytes leftover after parsing attributes in process `syz.3.524'. [ 209.404632][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 209.490708][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 209.542522][ T7805] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7805 comm=syz.3.526 [ 209.559736][ T9] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 209.653984][ T9] usb 2-1: Manufacturer: syz [ 209.683414][ T9] usb 2-1: config 0 descriptor?? [ 209.807593][ T7811] Cannot find add_set index 0 as target [ 210.097642][ T24] usb 5-1: USB disconnect, device number 21 [ 210.168245][ T9] sony 0003:054C:0268.000E: hiddev0,hidraw0: USB HID v80.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 210.201112][ T9] sony 0003:054C:0268.000E: failed to claim input [ 210.771430][ T7824] netlink: 'syz.0.531': attribute type 1 has an invalid length. [ 210.901947][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 211.312443][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 211.318948][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 211.325643][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 211.382644][ T804] usb 2-1: USB disconnect, device number 19 [ 211.431278][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.522711][ T9] usb 3-1: config 0 descriptor?? [ 211.612656][ T7837] IPVS: dh: FWM 3 0x00000003 - no destination available [ 212.113679][ T7845] 0x000000003c39-0x000000020000 : "" [ 212.154430][ T9] hid-retrode 0003:0403:97C1.000F: hidraw0: USB HID v0.04 Device [HID 0403:97c1] on usb-dummy_hcd.2-1/input0 [ 212.170088][ T7845] ftl_cs: FTL header corrupt! [ 212.343414][ T24] usb 3-1: USB disconnect, device number 16 [ 212.445232][ T7850] fido_id[7850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 213.017213][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 213.188985][ T7867] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 213.218147][ T7868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.252221][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 213.342905][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.370433][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.406663][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.440264][ T9] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 213.476405][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 213.488985][ T9] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 213.513439][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.544552][ T9] usb 5-1: config 0 descriptor?? [ 213.770487][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 213.786078][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 213.810198][ T9] usb 5-1: USB disconnect, device number 22 [ 214.774147][ T5701] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 214.933452][ T7897] IPVS: dh: FWM 3 0x00000003 - no destination available [ 214.955536][ T5701] usb 3-1: Using ep0 maxpacket: 32 [ 214.971389][ T5701] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 215.001468][ T5701] usb 3-1: config 0 has no interface number 0 [ 215.035506][ T5701] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 215.075588][ T5701] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 215.101654][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.127449][ T5701] usb 3-1: Product: syz [ 215.147209][ T5701] usb 3-1: Manufacturer: syz [ 215.166236][ T5701] usb 3-1: SerialNumber: syz [ 215.190363][ T5701] usb 3-1: config 0 descriptor?? [ 215.220946][ T5701] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 215.332885][ T5701] em28xx 3-1:0.132: Video interface 132 found: [ 215.668987][ T5701] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 216.601439][ T7903] netlink: 'syz.0.555': attribute type 1 has an invalid length. [ 216.609669][ T5701] em28xx 3-1:0.132: failed to read eeprom (err=-110) [ 216.633980][ T5701] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 216.877500][ T7911] netlink: 'syz.0.558': attribute type 1 has an invalid length. [ 217.080863][ T7911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.306227][ T7916] bond2: (slave ip6erspan0): making interface the new active one [ 217.356513][ T7916] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 217.771951][ T5701] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 217.818603][ T5701] em28xx 3-1:0.132: analog set to bulk mode. [ 217.870218][ T24] em28xx 3-1:0.132: Registering V4L2 extension [ 217.945492][ T5701] usb 3-1: USB disconnect, device number 17 [ 217.976426][ T5701] em28xx 3-1:0.132: Disconnecting em28xx [ 218.756160][ T24] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 218.763268][ T24] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 218.773509][ T24] em28xx 3-1:0.132: No AC97 audio processor [ 218.789832][ T24] usb 3-1: Decoder not found [ 218.813003][ T24] em28xx 3-1:0.132: failed to create media graph [ 218.827190][ T24] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 218.838467][ T24] em28xx 3-1:0.132: Remote control support is not available for this card. [ 218.894920][ T5701] em28xx 3-1:0.132: Closing input extension [ 218.917172][ T5701] em28xx 3-1:0.132: Freeing device [ 219.282338][ T5701] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 219.282350][ T5702] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 219.574681][ T7943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.602002][ T5702] usb 1-1: Using ep0 maxpacket: 32 [ 219.613071][ T5702] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 219.627329][ T5701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.632574][ T5702] usb 1-1: config 0 has no interface number 0 [ 219.662129][ T5701] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.685033][ T5702] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 219.705158][ T5701] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 219.724006][ T5702] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 219.741954][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.753444][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.774724][ T5702] usb 1-1: Product: syz [ 219.782627][ T5701] usb 3-1: config 0 descriptor?? [ 219.809432][ T5702] usb 1-1: Manufacturer: syz [ 219.809623][ T5701] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 219.824778][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 219.842714][ T5702] usb 1-1: SerialNumber: syz [ 219.862768][ T5702] usb 1-1: config 0 descriptor?? [ 219.874794][ T5702] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 219.894362][ T5702] em28xx 1-1:0.132: Video interface 132 found: [ 219.985416][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 220.000478][ T24] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 220.027673][ T24] usb 2-1: config 0 has no interface number 0 [ 220.043474][ T24] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 220.066241][ T24] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 220.075748][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.088906][ T24] usb 2-1: Product: syz [ 220.098549][ T24] usb 2-1: Manufacturer: syz [ 220.112008][ T24] usb 2-1: SerialNumber: syz [ 220.153079][ T24] usb 2-1: config 0 descriptor?? [ 220.179061][ T24] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 220.195546][ T24] em28xx 2-1:0.132: Video interface 132 found: [ 220.330570][ T5702] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 220.630746][ T24] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 220.952036][ T5702] em28xx 1-1:0.132: failed to read eeprom (err=-110) [ 220.963881][ T5702] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 221.242044][ T5702] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 221.259638][ T5702] em28xx 1-1:0.132: analog set to bulk mode. [ 221.265773][ T24] em28xx 2-1:0.132: failed to read eeprom (err=-110) [ 221.271956][ T9] em28xx 1-1:0.132: Registering V4L2 extension [ 221.291999][ T24] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 221.372854][ T9] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 221.373759][ T5701] usb 1-1: USB disconnect, device number 11 [ 221.404084][ T9] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 221.419682][ T5701] em28xx 1-1:0.132: Disconnecting em28xx [ 221.518559][ T9] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 221.530986][ T9] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 221.554896][ T9] em28xx 1-1:0.132: No AC97 audio processor [ 221.570749][ T9] usb 1-1: Decoder not found [ 221.572348][ T24] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 221.598588][ T9] em28xx 1-1:0.132: failed to create media graph [ 221.608954][ T24] em28xx 2-1:0.132: analog set to bulk mode. [ 221.616857][ T9] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 221.644520][ T9] em28xx 1-1:0.132: Remote control support is not available for this card. [ 221.676281][ T990] em28xx 2-1:0.132: Registering V4L2 extension [ 221.780293][ T24] usb 2-1: USB disconnect, device number 20 [ 221.786639][ T990] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 221.803093][ T24] em28xx 2-1:0.132: Disconnecting em28xx [ 221.823539][ T9] usb 3-1: USB disconnect, device number 18 [ 222.019749][ T990] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 222.035704][ T990] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 222.054373][ T990] em28xx 2-1:0.132: No AC97 audio processor [ 222.099306][ T990] usb 2-1: Decoder not found [ 222.112833][ T7972] Cannot find add_set index 0 as target [ 222.124880][ T990] em28xx 2-1:0.132: failed to create media graph [ 222.153730][ T990] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 222.222314][ T990] em28xx 2-1:0.132: Remote control support is not available for this card. [ 222.239487][ T5701] em28xx 1-1:0.132: Closing input extension [ 222.345147][ T24] em28xx 2-1:0.132: Closing input extension [ 222.585515][ T24] em28xx 2-1:0.132: Freeing device [ 222.594724][ T5701] em28xx 1-1:0.132: Freeing device [ 223.241958][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 223.413976][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.442740][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.766118][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.807213][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 223.848025][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.880677][ T9] usb 1-1: config 0 descriptor?? [ 224.223739][ T5702] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 224.282465][ T804] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 224.433667][ T5702] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.446210][ T5702] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.464020][ T5702] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 224.474144][ T804] usb 3-1: Using ep0 maxpacket: 32 [ 224.480566][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.494164][ T804] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 224.512920][ T804] usb 3-1: config 0 has no interface number 0 [ 224.519613][ T5702] usb 4-1: config 0 descriptor?? [ 224.526648][ T804] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 224.550978][ T5702] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 224.568763][ T804] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 224.592017][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.608387][ T804] usb 3-1: Product: syz [ 224.625176][ T804] usb 3-1: Manufacturer: syz [ 224.648078][ T804] usb 3-1: SerialNumber: syz [ 224.692842][ T804] usb 3-1: config 0 descriptor?? [ 224.714852][ T804] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 224.725737][ T804] em28xx 3-1:0.132: Video interface 132 found: [ 224.897300][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 224.903365][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 224.933712][ T9] usb 1-1: USB disconnect, device number 12 [ 224.987094][ T8006] netlink: 44 bytes leftover after parsing attributes in process `syz.1.584'. [ 225.321668][ T804] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 225.739255][ T8022] Cannot find add_set index 0 as target [ 225.942098][ T804] em28xx 3-1:0.132: failed to read eeprom (err=-110) [ 225.951141][ T804] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 226.181959][ T5701] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 226.211943][ T804] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 226.219898][ T804] em28xx 3-1:0.132: analog set to bulk mode. [ 226.226122][ T9] em28xx 3-1:0.132: Registering V4L2 extension [ 226.339576][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 226.339858][ T24] usb 3-1: USB disconnect, device number 19 [ 226.354726][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 226.354730][ T5701] usb 1-1: Using ep0 maxpacket: 32 [ 226.355981][ T5701] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.379368][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 226.380731][ T24] em28xx 3-1:0.132: Disconnecting em28xx [ 226.398668][ T5701] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.421035][ T5701] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.435160][ T5701] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 226.463078][ T5701] usb 1-1: config 0 interface 0 has no altsetting 0 [ 226.463244][ T9] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 226.469819][ T5701] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 226.489044][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.489139][ T9] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 226.505120][ T5701] usb 1-1: config 0 descriptor?? [ 226.505267][ T9] em28xx 3-1:0.132: No AC97 audio processor [ 226.524943][ T9] usb 3-1: Decoder not found [ 226.529712][ T9] em28xx 3-1:0.132: failed to create media graph [ 226.544719][ T9] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 226.554065][ T9] em28xx 3-1:0.132: Remote control support is not available for this card. [ 226.563040][ T24] em28xx 3-1:0.132: Closing input extension [ 226.607161][ T24] em28xx 3-1:0.132: Freeing device [ 226.748523][ T5701] usbhid 1-1:0.0: can't add hid device: -71 [ 226.760321][ T5701] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 226.780265][ T5701] usb 1-1: USB disconnect, device number 13 [ 227.068618][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 227.174364][ T5701] usb 4-1: USB disconnect, device number 21 [ 227.261264][ T8044] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8044 comm=syz.3.596 [ 227.313702][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 227.586066][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 227.593776][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 227.603904][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.636216][ T9] usb 5-1: config 0 descriptor?? [ 227.872180][ T5817] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 227.974156][ T24] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 228.071269][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 228.082404][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 228.101317][ T5817] usb 4-1: Using ep0 maxpacket: 32 [ 228.108397][ T9] usb 5-1: USB disconnect, device number 23 [ 228.116288][ T5817] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 228.133899][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.155418][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.167947][ T5817] usb 4-1: config 0 has no interface number 0 [ 228.185640][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.218546][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 228.232041][ T5817] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 228.246021][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.262260][ T5817] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 228.264911][ T24] usb 1-1: config 0 descriptor?? [ 228.297368][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.328673][ T5817] usb 4-1: Product: syz [ 228.348159][ T5817] usb 4-1: Manufacturer: syz [ 228.364976][ T5817] usb 4-1: SerialNumber: syz [ 228.410557][ T5817] usb 4-1: config 0 descriptor?? [ 228.428329][ T5817] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 228.479285][ T5817] em28xx 4-1:0.132: Video interface 132 found: [ 229.075701][ T5817] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 229.368724][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 229.378604][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 229.415687][ T24] usb 1-1: USB disconnect, device number 14 [ 229.742326][ T5817] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 229.765387][ T5817] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 230.011502][ T8088] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8088 comm=syz.0.608 [ 230.012103][ T5817] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 230.034524][ T5817] em28xx 4-1:0.132: analog set to bulk mode. [ 230.040559][ T9] em28xx 4-1:0.132: Registering V4L2 extension [ 230.052658][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 230.122444][ T5701] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 230.206837][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 230.206966][ T990] usb 4-1: USB disconnect, device number 22 [ 230.215814][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 230.228014][ T990] em28xx 4-1:0.132: Disconnecting em28xx [ 230.236423][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 230.250435][ T24] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 230.267253][ T24] usb 5-1: config 0 has no interface number 0 [ 230.276276][ T24] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 230.300075][ T5701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.310509][ T5701] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.317405][ T9] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 230.326674][ T5701] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 230.339889][ T9] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 230.341773][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.361351][ T9] em28xx 4-1:0.132: No AC97 audio processor [ 230.377703][ T9] usb 4-1: Decoder not found [ 230.387605][ T9] em28xx 4-1:0.132: failed to create media graph [ 230.395586][ T9] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 230.412549][ T9] em28xx 4-1:0.132: Remote control support is not available for this card. [ 230.426685][ T8101] netlink: 44 bytes leftover after parsing attributes in process `syz.0.612'. [ 230.427293][ T990] em28xx 4-1:0.132: Closing input extension [ 230.441621][ T24] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 230.450943][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.459601][ T24] usb 5-1: Product: syz [ 230.469138][ T990] em28xx 4-1:0.132: Freeing device [ 230.474364][ T24] usb 5-1: Manufacturer: syz [ 230.479642][ T5701] usb 3-1: config 0 descriptor?? [ 230.490367][ T5701] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 230.498020][ T24] usb 5-1: SerialNumber: syz [ 230.518430][ T24] usb 5-1: config 0 descriptor?? [ 230.548209][ T24] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 230.558694][ T24] em28xx 5-1:0.132: Video interface 132 found: [ 231.205686][ T24] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 231.230368][ T8116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.328502][ T8120] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 231.379381][ T8120] kvm: pic: non byte read [ 231.396709][ T8120] kvm: pic: level sensitive irq not supported [ 231.396769][ T8120] kvm: pic: non byte read [ 231.831922][ T24] em28xx 5-1:0.132: failed to read eeprom (err=-110) [ 231.838747][ T24] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 232.102113][ T24] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 232.114668][ T24] em28xx 5-1:0.132: analog set to bulk mode. [ 232.126899][ T5701] em28xx 5-1:0.132: Registering V4L2 extension [ 232.237106][ T24] usb 5-1: USB disconnect, device number 24 [ 232.254840][ T24] em28xx 5-1:0.132: Disconnecting em28xx [ 232.359175][ T8129] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8129 comm=syz.3.619 [ 232.556725][ T5701] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 232.578651][ T5701] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 232.587075][ T5701] em28xx 5-1:0.132: No AC97 audio processor [ 232.601368][ T5701] usb 5-1: Decoder not found [ 232.616564][ T5701] em28xx 5-1:0.132: failed to create media graph [ 232.632915][ T5701] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 232.651161][ T5701] em28xx 5-1:0.132: Remote control support is not available for this card. [ 232.668612][ T24] em28xx 5-1:0.132: Closing input extension [ 232.692736][ T24] em28xx 5-1:0.132: Freeing device [ 232.918961][ T9] usb 3-1: USB disconnect, device number 20 [ 232.946061][ T8144] netlink: 44 bytes leftover after parsing attributes in process `syz.4.624'. [ 232.973534][ T990] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 233.143220][ T990] usb 4-1: Using ep0 maxpacket: 32 [ 233.185795][ T990] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 233.260116][ T990] usb 4-1: config 0 has no interface number 0 [ 233.343430][ T990] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.384987][ T990] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 233.396136][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.411899][ T990] usb 4-1: Product: syz [ 233.416588][ T990] usb 4-1: Manufacturer: syz [ 233.425953][ T990] usb 4-1: SerialNumber: syz [ 233.731808][ T990] usb 4-1: config 0 descriptor?? [ 233.746792][ T990] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 233.756728][ T990] em28xx 4-1:0.132: Video interface 132 found: [ 234.433155][ T990] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 234.839497][ T8171] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8171 comm=syz.4.632 [ 235.012604][ T990] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 235.053938][ T990] em28xx 4-1:0.132: board has no eeprom [ 235.131309][ T8177] IPVS: dh: FWM 3 0x00000003 - no destination available [ 235.138555][ T990] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 235.148398][ T990] em28xx 4-1:0.132: analog set to bulk mode. [ 235.176912][ T5701] em28xx 4-1:0.132: Registering V4L2 extension [ 235.199140][ T990] usb 4-1: USB disconnect, device number 23 [ 235.236211][ T990] em28xx 4-1:0.132: Disconnecting em28xx [ 235.485720][ T5701] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 235.498822][ T5701] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 235.541728][ T5701] em28xx 4-1:0.132: No AC97 audio processor [ 235.586301][ T5701] usb 4-1: Decoder not found [ 235.606975][ T5701] em28xx 4-1:0.132: failed to create media graph [ 235.626156][ T5701] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 235.664190][ T5701] em28xx 4-1:0.132: Remote control support is not available for this card. [ 235.751463][ T990] em28xx 4-1:0.132: Closing input extension [ 235.771777][ T990] em28xx 4-1:0.132: Freeing device [ 235.872262][ T24] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 236.045278][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.070621][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.111414][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 236.128799][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.182925][ T24] usb 5-1: config 0 descriptor?? [ 236.192995][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 236.329283][ T8192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.418995][ T8193] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 236.619914][ T8193] kvm: pic: non byte read [ 236.644489][ T8193] kvm: pic: level sensitive irq not supported [ 236.647347][ T8193] kvm: pic: non byte read [ 238.346155][ T8227] IPVS: dh: FWM 3 0x00000003 - no destination available [ 238.353409][ T9] IPVS: starting estimator thread 0... [ 238.441931][ T8228] IPVS: using max 78 ests per chain, 187200 per kthread [ 238.491938][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 238.561971][ T990] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 238.631799][ T5701] usb 5-1: USB disconnect, device number 25 [ 238.656667][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 238.677543][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 238.696813][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 238.710034][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.736022][ T24] usb 2-1: config 0 descriptor?? [ 238.751543][ T8231] netlink: 44 bytes leftover after parsing attributes in process `syz.4.650'. [ 238.765978][ T990] usb 4-1: Using ep0 maxpacket: 32 [ 238.777386][ T990] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.789555][ T990] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.802379][ T990] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.814002][ T990] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 238.827446][ T990] usb 4-1: config 0 interface 0 has no altsetting 0 [ 238.834591][ T990] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 238.844280][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.871023][ T990] usb 4-1: config 0 descriptor?? [ 239.113584][ T990] usbhid 4-1:0.0: can't add hid device: -71 [ 239.132670][ T990] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 239.160931][ T990] usb 4-1: USB disconnect, device number 24 [ 239.168876][ T24] hid_parser_main: 88 callbacks suppressed [ 239.168894][ T24] hid-retrode 0003:0403:97C1.0010: unknown main item tag 0x0 [ 239.192887][ T24] hid-retrode 0003:0403:97C1.0010: unknown main item tag 0x0 [ 239.202878][ T24] hid-retrode 0003:0403:97C1.0010: unknown main item tag 0x0 [ 239.216322][ T24] hid-retrode 0003:0403:97C1.0010: unknown main item tag 0x0 [ 239.230898][ T24] hid-retrode 0003:0403:97C1.0010: unknown main item tag 0x0 [ 239.238796][ T24] hid-retrode 0003:0403:97C1.0010: unknown main item tag 0x0 [ 239.246837][ T24] hid-retrode 0003:0403:97C1.0010: unknown main item tag 0x0 [ 239.254730][ T24] hid-retrode 0003:0403:97C1.0010: unknown main item tag 0x0 [ 239.262557][ T24] hid-retrode 0003:0403:97C1.0010: unknown main item tag 0x0 [ 239.270196][ T24] hid-retrode 0003:0403:97C1.0010: unknown main item tag 0x0 [ 239.336919][ T24] hid-retrode 0003:0403:97C1.0010: hidraw0: USB HID v0.04 Device [HID 0403:97c1] on usb-dummy_hcd.1-1/input0 [ 239.388821][ T24] usb 2-1: USB disconnect, device number 21 [ 239.444672][ T8234] fido_id[8234]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 240.016703][ T8244] fuse: Unknown parameter 'group_i00000000000000000000' [ 240.126076][ T8249] Cannot find add_set index 0 as target [ 240.482073][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 240.601978][ T990] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 240.621963][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 240.651936][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 240.660459][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 240.671137][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 240.681786][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.702948][ T24] usb 3-1: config 0 descriptor?? [ 240.766345][ T990] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.773329][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 240.783979][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 240.786583][ T9] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 240.795654][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.815403][ T990] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 240.826863][ T9] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 240.827464][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.839107][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.855793][ T990] usb 2-1: config 0 descriptor?? [ 240.855897][ T9] usb 4-1: Product: syz [ 240.867795][ T9] usb 4-1: Manufacturer: syz [ 240.874516][ T9] usb 4-1: SerialNumber: syz [ 240.885316][ T9] ch9200 4-1:2.0: probe with driver ch9200 failed with error -22 [ 240.977835][ T8265] netlink: 44 bytes leftover after parsing attributes in process `syz.0.661'. [ 241.081981][ T5701] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 241.123499][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 241.145516][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 241.181611][ T24] usb 3-1: USB disconnect, device number 21 [ 241.242147][ T5701] usb 5-1: Using ep0 maxpacket: 8 [ 241.249407][ T5701] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 241.258859][ T5701] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.268707][ T5701] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 241.285499][ T5701] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 241.297560][ T990] hid-picolcd 0003:04D8:F002.0011: report_id 0 is invalid [ 241.304763][ T990] hid-picolcd 0003:04D8:F002.0011: item 0 0 1 8 parsing failed [ 241.312436][ T5701] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.326109][ T990] hid-picolcd 0003:04D8:F002.0011: device report parse failed [ 241.334003][ T5701] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 241.343194][ T990] hid-picolcd 0003:04D8:F002.0011: probe with driver hid-picolcd failed with error -22 [ 241.353458][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.574634][ T5701] usb 5-1: GET_CAPABILITIES returned b2 [ 241.580352][ T5701] usbtmc 5-1:16.0: can't read capabilities [ 241.611957][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 241.685947][ T8275] fuse: Bad value for 'group_id' [ 241.690964][ T8275] fuse: Bad value for 'group_id' [ 241.716325][ T5701] usb 2-1: USB disconnect, device number 22 [ 241.771975][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 241.778789][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.789374][ T9] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.800713][ T9] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.809396][ T8263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.811393][ T9] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 241.832228][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 241.839504][ T9] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 241.840523][ T8263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.849234][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.871504][ T9] usb 1-1: config 0 descriptor?? [ 241.891243][ T24] usb 5-1: USB disconnect, device number 26 [ 242.088277][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 242.094951][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 242.106217][ T9] usb 1-1: USB disconnect, device number 15 [ 242.362816][ T8282] netlink: 'syz.1.666': attribute type 1 has an invalid length. [ 243.456018][ T8294] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 243.522046][ T8295] netlink: 40 bytes leftover after parsing attributes in process `syz.2.669'. [ 244.238848][ T9] usb 4-1: USB disconnect, device number 25 [ 245.805831][ T8333] Cannot find add_set index 0 as target [ 245.982021][ T990] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 246.082427][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 246.142439][ T5701] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 246.150222][ T990] usb 4-1: Using ep0 maxpacket: 32 [ 246.159851][ T990] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 246.170043][ T990] usb 4-1: config 0 has no interface number 0 [ 246.176357][ T990] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 246.191746][ T990] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 246.201150][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.210219][ T990] usb 4-1: Product: syz [ 246.217839][ T990] usb 4-1: Manufacturer: syz [ 246.224666][ T990] usb 4-1: SerialNumber: syz [ 246.234941][ T990] usb 4-1: config 0 descriptor?? [ 246.242214][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 246.249833][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.261741][ T990] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 246.272150][ T24] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.284567][ T990] em28xx 4-1:0.132: Video interface 132 found: [ 246.291029][ T24] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.301191][ T24] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 246.314183][ T5701] usb 1-1: Using ep0 maxpacket: 32 [ 246.320295][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.327454][ T24] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 246.336796][ T5701] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 246.345195][ T5701] usb 1-1: config 0 has no interface number 0 [ 246.351341][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.359750][ T5701] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 246.371819][ T24] usb 3-1: config 0 descriptor?? [ 246.384510][ T5701] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 246.395851][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.421992][ T5701] usb 1-1: Product: syz [ 246.426404][ T5701] usb 1-1: Manufacturer: syz [ 246.431095][ T5701] usb 1-1: SerialNumber: syz [ 246.455607][ T5701] usb 1-1: config 0 descriptor?? [ 246.471676][ T5701] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 246.489916][ T5701] em28xx 1-1:0.132: Video interface 132 found: [ 246.589399][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 246.596652][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 246.609749][ T24] usb 3-1: USB disconnect, device number 22 [ 246.664493][ T8340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.715666][ T990] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 246.744716][ T8343] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 246.757301][ T8343] kvm: pic: non byte read [ 246.762239][ T8343] kvm: pic: level sensitive irq not supported [ 246.762296][ T8343] kvm: pic: non byte read [ 246.936329][ T5701] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 247.127736][ T990] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 247.152757][ T990] em28xx 4-1:0.132: board has no eeprom [ 247.332009][ T990] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 247.376168][ T990] em28xx 4-1:0.132: analog set to bulk mode. [ 247.389178][ T24] em28xx 4-1:0.132: Registering V4L2 extension [ 247.606220][ T8356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.729830][ T8358] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 247.762366][ T5701] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 247.796749][ T5701] em28xx 1-1:0.132: board has no eeprom [ 247.798166][ T8358] kvm: pic: non byte read [ 247.820898][ T8358] kvm: pic: level sensitive irq not supported [ 247.821204][ T8358] kvm: pic: non byte read [ 247.833690][ T990] usb 4-1: USB disconnect, device number 26 [ 247.839768][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 247.858861][ T990] em28xx 4-1:0.132: Disconnecting em28xx [ 247.872063][ T5701] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 247.886164][ T5701] em28xx 1-1:0.132: analog set to bulk mode. [ 247.916412][ T5701] usb 1-1: USB disconnect, device number 16 [ 247.934291][ T5701] em28xx 1-1:0.132: Disconnecting em28xx [ 247.955802][ T24] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 247.967865][ T24] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 247.976134][ T24] em28xx 4-1:0.132: No AC97 audio processor [ 247.991108][ T24] usb 4-1: Decoder not found [ 248.013566][ T24] em28xx 4-1:0.132: failed to create media graph [ 248.021537][ T24] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 248.031794][ T24] em28xx 4-1:0.132: Remote control support is not available for this card. [ 248.050387][ T5716] em28xx 1-1:0.132: Registering V4L2 extension [ 248.195216][ T5716] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 248.208363][ T5716] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 248.219827][ T8367] fuse: Bad value for 'group_id' [ 248.224926][ T5716] em28xx 1-1:0.132: No AC97 audio processor [ 248.230916][ T8367] fuse: Bad value for 'group_id' [ 248.239195][ T5716] usb 1-1: Decoder not found [ 248.245573][ T5716] em28xx 1-1:0.132: failed to create media graph [ 248.252067][ T5716] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 248.260524][ T5716] em28xx 1-1:0.132: Remote control support is not available for this card. [ 248.270119][ T990] em28xx 4-1:0.132: Closing input extension [ 248.276276][ T5701] em28xx 1-1:0.132: Closing input extension [ 248.296429][ T990] em28xx 4-1:0.132: Freeing device [ 248.314214][ T5701] em28xx 1-1:0.132: Freeing device [ 249.522691][ T5701] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 249.651977][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 249.683922][ T5701] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.694361][ T5701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 249.705734][ T5701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.715861][ T5701] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 249.725156][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.733512][ T5716] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 249.747221][ T5701] usb 1-1: config 0 descriptor?? [ 249.821939][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 249.831031][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 249.844530][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 249.862153][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.885846][ T9] usb 4-1: config 0 descriptor?? [ 249.902747][ T5716] usb 2-1: Using ep0 maxpacket: 32 [ 249.913885][ T5716] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 249.922932][ T5716] usb 2-1: config 0 has no interface number 0 [ 249.929141][ T5716] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 249.942789][ T5716] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 249.952179][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.967942][ T5716] usb 2-1: Product: syz [ 249.977947][ T5716] usb 2-1: Manufacturer: syz [ 249.988012][ T5716] usb 2-1: SerialNumber: syz [ 250.017126][ T5716] usb 2-1: config 0 descriptor?? [ 250.029493][ T5716] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 250.039529][ T5716] em28xx 2-1:0.132: Video interface 132 found: [ 250.165687][ T8396] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8396 comm=syz.2.693 [ 250.246209][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.252621][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.300267][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 250.315480][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 250.325241][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 250.332442][ T9] usbhid 4-1:0.0: can't add hid device: -32 [ 250.338723][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 250.352682][ T9] usb 4-1: USB disconnect, device number 27 [ 250.361993][ T990] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 250.450607][ T5701] usbhid 1-1:0.0: can't add hid device: -71 [ 250.462109][ T5701] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 250.489439][ T5716] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 250.495952][ T5701] usb 1-1: USB disconnect, device number 17 [ 250.517821][ T30] audit: type=1400 audit(1778741811.138:360): avc: denied { ioctl } for pid=8403 comm="syz.2.696" path="socket:[25295]" dev="sockfs" ino=25295 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.523217][ T990] usb 5-1: Using ep0 maxpacket: 32 [ 250.547690][ T8404] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 250.558874][ T990] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.581942][ T990] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.593104][ T990] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.612438][ T990] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 250.645996][ T990] usb 5-1: config 0 interface 0 has no altsetting 0 [ 250.652662][ T990] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 250.661692][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.684336][ T990] usb 5-1: config 0 descriptor?? [ 250.734410][ T8403] mmap: syz.2.696 (8403): VmData 25837568 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 250.809867][ T30] audit: type=1400 audit(1778741811.428:361): avc: denied { setopt } for pid=8405 comm="syz.2.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 250.951695][ T990] usbhid 5-1:0.0: can't add hid device: -71 [ 250.966038][ T990] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 250.995618][ T990] usb 5-1: USB disconnect, device number 27 [ 251.077153][ T5716] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 251.095354][ T5716] em28xx 2-1:0.132: board has no eeprom [ 251.134173][ T8415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.162778][ T5716] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 251.170694][ T5716] em28xx 2-1:0.132: analog set to bulk mode. [ 251.179236][ T990] em28xx 2-1:0.132: Registering V4L2 extension [ 251.198849][ T5716] usb 2-1: USB disconnect, device number 23 [ 251.208061][ T5716] em28xx 2-1:0.132: Disconnecting em28xx [ 251.224421][ T8421] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 251.306694][ T990] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 251.314421][ T8421] kvm: pic: non byte read [ 251.327093][ T990] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 251.344967][ T990] em28xx 2-1:0.132: No AC97 audio processor [ 251.377792][ T990] usb 2-1: Decoder not found [ 251.389756][ T990] em28xx 2-1:0.132: failed to create media graph [ 251.396866][ T990] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 251.405688][ T990] em28xx 2-1:0.132: Remote control support is not available for this card. [ 251.414816][ T5716] em28xx 2-1:0.132: Closing input extension [ 251.428426][ T5716] em28xx 2-1:0.132: Freeing device [ 252.226059][ T8442] Cannot find add_set index 0 as target [ 252.390632][ T30] audit: type=1400 audit(1778741813.008:362): avc: denied { setopt } for pid=8448 comm="syz.2.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.444558][ T30] audit: type=1400 audit(1778741813.058:363): avc: denied { mount } for pid=8444 comm="syz.0.708" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 252.461642][ T8454] No memory to map [ 252.484162][ T30] audit: type=1400 audit(1778741813.078:364): avc: denied { map } for pid=8443 comm="syz.4.709" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 252.541107][ T30] audit: type=1400 audit(1778741813.138:365): avc: denied { getopt } for pid=8444 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 252.651971][ T5817] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 252.774138][ T8459] netlink: 'syz.1.713': attribute type 9 has an invalid length. [ 252.790186][ T8459] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.713'. [ 252.821925][ T5817] usb 3-1: Using ep0 maxpacket: 8 [ 252.828408][ T5817] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 252.836750][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.858019][ T5817] usb 3-1: config 0 has no interface number 0 [ 252.869576][ T5817] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 252.890571][ T5817] usb 3-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.925083][ T5817] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 252.940654][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.957763][ T30] audit: type=1400 audit(1778741813.578:366): avc: denied { connect } for pid=8460 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 252.959492][ T5817] usb 3-1: config 0 descriptor?? [ 253.076962][ T242] Bluetooth: hci5: Frame reassembly failed (-90) [ 253.103922][ T5817] ldusb 3-1:0.55: Interrupt in endpoint not found [ 254.082954][ T5716] usb 3-1: USB disconnect, device number 23 [ 254.152797][ T30] audit: type=1400 audit(1778741814.608:367): avc: denied { append } for pid=8448 comm="syz.2.710" name="media2" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.341212][ T8467] FAULT_INJECTION: forcing a failure. [ 254.341212][ T8467] name failslab, interval 1, probability 0, space 0, times 1 [ 254.353981][ T8467] CPU: 0 UID: 0 PID: 8467 Comm: syz.0.715 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.354008][ T8467] Tainted: [L]=SOFTLOCKUP [ 254.354013][ T8467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 254.354022][ T8467] Call Trace: [ 254.354028][ T8467] [ 254.354033][ T8467] dump_stack_lvl+0x100/0x190 [ 254.354060][ T8467] should_fail_ex.cold+0x5/0xa [ 254.354084][ T8467] should_failslab+0xc2/0x120 [ 254.354103][ T8467] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 254.354129][ T8467] ? security_file_alloc+0x34/0x2c0 [ 254.354153][ T8467] ? trace_kmem_cache_alloc+0xd5/0x100 [ 254.354178][ T8467] security_file_alloc+0x34/0x2c0 [ 254.354203][ T8467] init_file+0x95/0x480 [ 254.354228][ T8467] alloc_empty_file+0x79/0x1c0 [ 254.354255][ T8467] path_openat+0xe8/0x31a0 [ 254.354276][ T8467] ? kasan_save_stack+0x3f/0x50 [ 254.354290][ T8467] ? kasan_save_stack+0x30/0x50 [ 254.354305][ T8467] ? kasan_save_track+0x14/0x30 [ 254.354319][ T8467] ? __kasan_slab_alloc+0x89/0x90 [ 254.354335][ T8467] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 254.354360][ T8467] ? do_getname+0x35/0x390 [ 254.354384][ T8467] ? do_sys_openat2+0xc5/0x1e0 [ 254.354414][ T8467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.354436][ T8467] ? __pfx_path_openat+0x10/0x10 [ 254.354468][ T8467] do_file_open+0x20e/0x430 [ 254.354492][ T8467] ? __pfx_do_file_open+0x10/0x10 [ 254.354533][ T8467] ? alloc_fd+0x476/0x790 [ 254.354558][ T8467] ? do_getname+0x191/0x390 [ 254.354587][ T8467] do_sys_openat2+0x10d/0x1e0 [ 254.354612][ T8467] ? __pfx_do_sys_openat2+0x10/0x10 [ 254.354635][ T8467] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 254.354667][ T8467] ? __fget_files+0x21f/0x3d0 [ 254.354693][ T8467] __x64_sys_openat+0x12d/0x210 [ 254.354719][ T8467] ? __pfx___x64_sys_openat+0x10/0x10 [ 254.354744][ T8467] ? ksys_write+0x1ac/0x250 [ 254.354767][ T8467] ? rcu_is_watching+0x12/0xc0 [ 254.354799][ T8467] do_syscall_64+0x10b/0xf80 [ 254.354822][ T8467] ? clear_bhb_loop+0x40/0x90 [ 254.354843][ T8467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.354861][ T8467] RIP: 0033:0x7f5c8179ce59 [ 254.354876][ T8467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.354893][ T8467] RSP: 002b:00007f5c825f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 254.354909][ T8467] RAX: ffffffffffffffda RBX: 00007f5c81a16090 RCX: 00007f5c8179ce59 [ 254.354920][ T8467] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 254.354931][ T8467] RBP: 00007f5c825f4090 R08: 0000000000000000 R09: 0000000000000000 [ 254.354940][ T8467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.354950][ T8467] R13: 00007f5c81a16128 R14: 00007f5c81a16090 R15: 00007ffe5ae5c868 [ 254.354974][ T8467] [ 254.880885][ T30] audit: type=1400 audit(1778741814.888:368): avc: denied { create } for pid=8465 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 255.153599][ T5617] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 255.164972][ T5613] Bluetooth: hci5: command 0xfc11 tx timeout [ 255.301266][ T8469] FAULT_INJECTION: forcing a failure. [ 255.301266][ T8469] name failslab, interval 1, probability 0, space 0, times 0 [ 255.366045][ T8469] CPU: 0 UID: 0 PID: 8469 Comm: syz.0.716 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.366077][ T8469] Tainted: [L]=SOFTLOCKUP [ 255.366083][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.366093][ T8469] Call Trace: [ 255.366099][ T8469] [ 255.366106][ T8469] dump_stack_lvl+0x100/0x190 [ 255.366133][ T8469] should_fail_ex.cold+0x5/0xa [ 255.366158][ T8469] should_failslab+0xc2/0x120 [ 255.366177][ T8469] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 255.366203][ T8469] ? skb_clone+0x190/0x400 [ 255.366225][ T8469] skb_clone+0x190/0x400 [ 255.366243][ T8469] netlink_deliver_tap+0xaed/0xcc0 [ 255.366272][ T8469] netlink_unicast+0x62b/0x850 [ 255.366299][ T8469] ? __pfx_netlink_unicast+0x10/0x10 [ 255.366330][ T8469] netlink_sendmsg+0x8b0/0xda0 [ 255.366357][ T8469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.366378][ T8469] ? __might_fault+0x50/0x140 [ 255.366413][ T8469] ____sys_sendmsg+0x9e1/0xb70 [ 255.366433][ T8469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.366458][ T8469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.366492][ T8469] ___sys_sendmsg+0x190/0x1e0 [ 255.366516][ T8469] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.366570][ T8469] __sys_sendmsg+0x170/0x220 [ 255.366589][ T8469] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.366618][ T8469] ? rcu_is_watching+0x12/0xc0 [ 255.366648][ T8469] do_syscall_64+0x10b/0xf80 [ 255.366671][ T8469] ? clear_bhb_loop+0x40/0x90 [ 255.366692][ T8469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.366710][ T8469] RIP: 0033:0x7f5c8179ce59 [ 255.366725][ T8469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.366741][ T8469] RSP: 002b:00007f5c82615028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.366759][ T8469] RAX: ffffffffffffffda RBX: 00007f5c81a15fa0 RCX: 00007f5c8179ce59 [ 255.366770][ T8469] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000006 [ 255.366781][ T8469] RBP: 00007f5c82615090 R08: 0000000000000000 R09: 0000000000000000 [ 255.366791][ T8469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.366800][ T8469] R13: 00007f5c81a16038 R14: 00007f5c81a15fa0 R15: 00007ffe5ae5c868 [ 255.366825][ T8469] [ 255.370683][ T8469] netlink: 'syz.0.716': attribute type 13 has an invalid length. [ 255.784205][ T8470] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 255.804656][ T8470] syzkaller0: entered promiscuous mode [ 255.810276][ T8470] syzkaller0: entered allmulticast mode [ 256.174376][ T30] audit: type=1400 audit(1778741816.798:369): avc: denied { setopt } for pid=8479 comm="syz.3.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.210689][ T30] audit: type=1400 audit(1778741816.828:370): avc: denied { read } for pid=8479 comm="syz.3.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.243254][ T8483] tmpfs: Unknown parameter 'nr_blo' [ 256.253461][ T30] audit: type=1400 audit(1778741816.868:371): avc: denied { create } for pid=8482 comm="syz.0.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 256.362207][ T990] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 256.384207][ T8488] mmap: syz.0.722 (8488) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 256.395373][ T8489] Cannot find add_set index 0 as target [ 256.643829][ T990] usb 5-1: unable to get BOS descriptor or descriptor too short [ 256.661414][ T990] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 62, changing to 7 [ 256.695953][ T990] usb 5-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 256.717355][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.736954][ T990] usb 5-1: Product: syz [ 256.748756][ T990] usb 5-1: Manufacturer: syz [ 256.762938][ T990] usb 5-1: SerialNumber: syz [ 257.025818][ T5716] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 257.262060][ T5716] usb 1-1: Using ep0 maxpacket: 32 [ 257.275428][ T5716] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 257.284296][ T5716] usb 1-1: config 0 has no interface number 0 [ 257.290474][ T5716] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 257.313232][ T990] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 257.330443][ T5716] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 257.342437][ T990] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 257.355399][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.377944][ T5716] usb 1-1: Product: syz [ 257.390084][ T5716] usb 1-1: Manufacturer: syz [ 257.402356][ T5716] usb 1-1: SerialNumber: syz [ 257.427661][ T5716] usb 1-1: config 0 descriptor?? [ 257.446646][ T5716] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 257.458057][ T990] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 257.478638][ T5716] em28xx 1-1:0.132: Video interface 132 found: [ 257.496450][ T990] usb 5-1: USB disconnect, device number 28 [ 257.533306][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.771944][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 257.824539][ T5817] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 257.930242][ T5716] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 257.971049][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 257.986471][ T9] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 258.001299][ T9] usb 3-1: config 0 has no interface number 0 [ 258.154854][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 258.160065][ T9] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.171703][ T5817] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 258.179959][ T5817] usb 2-1: config 0 has no interface number 0 [ 258.186220][ T5817] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.198608][ T9] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 258.208083][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.220348][ T9] usb 3-1: Product: syz [ 258.226399][ T9] usb 3-1: Manufacturer: syz [ 258.238007][ T9] usb 3-1: SerialNumber: syz [ 258.244315][ T5817] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 258.253876][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.265322][ T9] usb 3-1: config 0 descriptor?? [ 258.279291][ T9] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 258.290513][ T5817] usb 2-1: Product: syz [ 258.299208][ T5817] usb 2-1: Manufacturer: syz [ 258.306940][ T9] em28xx 3-1:0.132: Video interface 132 found: [ 258.313184][ T5817] usb 2-1: SerialNumber: syz [ 258.326177][ T5817] usb 2-1: config 0 descriptor?? [ 258.345618][ T5817] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 258.355414][ T5817] em28xx 2-1:0.132: Video interface 132 found: [ 258.617878][ T5716] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 258.677552][ T5716] em28xx 1-1:0.132: board has no eeprom [ 258.980750][ T9] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 258.981147][ T5716] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 259.002208][ T5716] em28xx 1-1:0.132: analog set to bulk mode. [ 259.008445][ T990] em28xx 1-1:0.132: Registering V4L2 extension [ 259.036833][ T5817] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 259.087862][ T5716] usb 1-1: USB disconnect, device number 18 [ 259.094017][ T990] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 259.104932][ T5716] em28xx 1-1:0.132: Disconnecting em28xx [ 259.190148][ T990] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 259.198775][ T990] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 259.209848][ T990] em28xx 1-1:0.132: No AC97 audio processor [ 259.227551][ T990] usb 1-1: Decoder not found [ 259.315768][ T990] em28xx 1-1:0.132: failed to create media graph [ 259.326053][ T990] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 259.362461][ T30] audit: type=1400 audit(1778741819.988:372): avc: denied { read write } for pid=8533 comm="syz.4.734" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 259.374089][ T990] em28xx 1-1:0.132: Remote control support is not available for this card. [ 259.398223][ T5716] em28xx 1-1:0.132: Closing input extension [ 259.405287][ T5716] ================================================================== [ 259.413348][ T5716] BUG: KASAN: slab-use-after-free in media_device_unregister+0x59d/0x610 [ 259.421760][ T5716] Read of size 8 at addr ffff888053be8210 by task kworker/1:5/5716 [ 259.429640][ T5716] [ 259.431988][ T5716] CPU: 1 UID: 0 PID: 5716 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.432016][ T5716] Tainted: [L]=SOFTLOCKUP [ 259.432023][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.432036][ T5716] Workqueue: usb_hub_wq hub_event [ 259.432067][ T5716] Call Trace: [ 259.432075][ T5716] [ 259.432083][ T5716] dump_stack_lvl+0x100/0x190 [ 259.432107][ T5716] print_report+0x13d/0x4b0 [ 259.432133][ T5716] ? __virt_addr_valid+0x239/0x430 [ 259.432158][ T5716] ? media_device_unregister+0x59d/0x610 [ 259.432178][ T5716] kasan_report+0xdf/0x1d0 [ 259.432199][ T5716] ? media_device_unregister+0x59d/0x610 [ 259.432221][ T5716] media_device_unregister+0x59d/0x610 [ 259.432242][ T5716] em28xx_unregister_media_device+0x4e/0xe0 [ 259.432278][ T5716] em28xx_release_resources+0x79/0x1b0 [ 259.432308][ T5716] em28xx_usb_disconnect.cold+0x17d/0x253 [ 259.432338][ T5716] usb_unbind_interface+0x1dd/0x9e0 [ 259.432369][ T5716] ? __pfx_usb_unbind_interface+0x10/0x10 [ 259.432399][ T5716] device_remove+0x12a/0x180 [ 259.432426][ T5716] device_release_driver_internal+0x44e/0x620 [ 259.432448][ T5716] bus_remove_device+0x2bc/0x560 [ 259.432475][ T5716] ? __pfx_bus_remove_device+0x10/0x10 [ 259.432500][ T5716] ? __pfx_device_remove_attrs+0x10/0x10 [ 259.432530][ T5716] device_del+0x376/0x9b0 [ 259.432558][ T5716] ? __pfx_device_del+0x10/0x10 [ 259.432584][ T5716] ? kobject_put+0xb9/0x640 [ 259.432615][ T5716] usb_disable_device+0x367/0x810 [ 259.432643][ T5716] usb_disconnect+0x2e2/0x9a0 [ 259.432671][ T5716] hub_event+0x1d0c/0x4af0 [ 259.432703][ T5716] ? __lock_acquire+0x4a5/0x2630 [ 259.432727][ T5716] ? do_raw_spin_unlock+0x145/0x1e0 [ 259.432754][ T5716] ? __pfx_hub_event+0x10/0x10 [ 259.432779][ T5716] ? assoc_array_gc+0xa0/0x15d0 [ 259.432804][ T5716] ? rcu_is_watching+0x12/0xc0 [ 259.432832][ T5716] process_one_work+0xa0e/0x1980 [ 259.432861][ T5716] ? __pfx_process_one_work+0x10/0x10 [ 259.432888][ T5716] ? __pfx_hub_event+0x10/0x10 [ 259.432915][ T5716] worker_thread+0x5ef/0xe50 [ 259.432942][ T5716] ? __pfx_worker_thread+0x10/0x10 [ 259.432966][ T5716] ? kthread+0x13a/0x450 [ 259.432986][ T5716] ? __pfx_worker_thread+0x10/0x10 [ 259.433009][ T5716] kthread+0x370/0x450 [ 259.433030][ T5716] ? __pfx_kthread+0x10/0x10 [ 259.433052][ T5716] ret_from_fork+0x72b/0xd50 [ 259.433076][ T5716] ? __pfx_ret_from_fork+0x10/0x10 [ 259.433100][ T5716] ? __switch_to+0x800/0x1100 [ 259.433126][ T5716] ? __pfx_kthread+0x10/0x10 [ 259.433149][ T5716] ret_from_fork_asm+0x1a/0x30 [ 259.433182][ T5716] [ 259.433188][ T5716] [ 259.682390][ T5716] Allocated by task 990: [ 259.686612][ T5716] kasan_save_stack+0x30/0x50 [ 259.691273][ T5716] kasan_save_track+0x14/0x30 [ 259.695934][ T5716] __kasan_kmalloc+0xaa/0xb0 [ 259.700509][ T5716] em28xx_v4l2_init.cold+0x94/0x3a40 [ 259.705780][ T5716] em28xx_init_extension+0x13a/0x200 [ 259.711048][ T5716] request_module_async+0x61/0x80 [ 259.716076][ T5716] process_one_work+0xa0e/0x1980 [ 259.720998][ T5716] worker_thread+0x5ef/0xe50 [ 259.725572][ T5716] kthread+0x370/0x450 [ 259.729621][ T5716] ret_from_fork+0x72b/0xd50 [ 259.734204][ T5716] ret_from_fork_asm+0x1a/0x30 [ 259.738975][ T5716] [ 259.741279][ T5716] Freed by task 990: [ 259.745160][ T5716] kasan_save_stack+0x30/0x50 [ 259.749813][ T5716] kasan_save_track+0x14/0x30 [ 259.754466][ T5716] kasan_save_free_info+0x3b/0x70 [ 259.759473][ T5716] __kasan_slab_free+0x5f/0x80 [ 259.764229][ T5716] kfree+0x223/0x6c0 [ 259.768124][ T5716] kref_put.isra.0+0x53/0x75 [ 259.772699][ T5716] em28xx_v4l2_init.cold+0x280/0x3a40 [ 259.778060][ T5716] em28xx_init_extension+0x13a/0x200 [ 259.783326][ T5716] request_module_async+0x61/0x80 [ 259.788348][ T5716] process_one_work+0xa0e/0x1980 [ 259.793271][ T5716] worker_thread+0x5ef/0xe50 [ 259.797845][ T5716] kthread+0x370/0x450 [ 259.801896][ T5716] ret_from_fork+0x72b/0xd50 [ 259.806467][ T5716] ret_from_fork_asm+0x1a/0x30 [ 259.811216][ T5716] [ 259.813517][ T5716] The buggy address belongs to the object at ffff888053be8000 [ 259.813517][ T5716] which belongs to the cache kmalloc-8k of size 8192 [ 259.827555][ T5716] The buggy address is located 528 bytes inside of [ 259.827555][ T5716] freed 8192-byte region [ffff888053be8000, ffff888053bea000) [ 259.841412][ T5716] [ 259.843727][ T5716] The buggy address belongs to the physical page: [ 259.850112][ T5716] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53be8 [ 259.858844][ T5716] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 259.867332][ T5716] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 259.874855][ T5716] page_type: f5(slab) [ 259.878815][ T5716] raw: 00fff00000000040 ffff88813fe35280 dead000000000122 0000000000000000 [ 259.887373][ T5716] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 259.895936][ T5716] head: 00fff00000000040 ffff88813fe35280 dead000000000122 0000000000000000 [ 259.904584][ T5716] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 259.913232][ T5716] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 259.921884][ T5716] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 259.930525][ T5716] page dumped because: kasan: bad access detected [ 259.936911][ T5716] page_owner tracks the page as allocated [ 259.942600][ T5716] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8494, tgid 8493 (syz.0.724), ts 258640056692, free_ts 257514456238 [ 259.963851][ T5716] post_alloc_hook+0x153/0x170 [ 259.968599][ T5716] get_page_from_freelist+0x11a6/0x33b0 [ 259.974149][ T5716] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 259.980038][ T5716] new_slab+0xa6/0x6c0 [ 259.984088][ T5716] refill_objects+0x277/0x420 [ 259.988751][ T5716] __pcs_replace_empty_main+0x375/0x650 [ 259.994284][ T5716] __kmalloc_noprof+0x688/0x850 [ 259.999121][ T5716] vhost_dev_set_owner+0x3b2/0xa30 [ 260.004208][ T5716] vhost_dev_ioctl+0x521/0xe20 [ 260.008954][ T5716] vhost_vsock_dev_ioctl+0x320/0xb60 [ 260.014218][ T5716] __x64_sys_ioctl+0x18e/0x210 [ 260.018967][ T5716] do_syscall_64+0x10b/0xf80 [ 260.023539][ T5716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.029411][ T5716] page last free pid 7467 tgid 7467 stack trace: [ 260.035711][ T5716] __free_frozen_pages+0x747/0x1040 [ 260.040894][ T5716] qlist_free_all+0x47/0xf0 [ 260.045382][ T5716] kasan_quarantine_reduce+0x1a0/0x1f0 [ 260.050842][ T5716] __kasan_slab_alloc+0x69/0x90 [ 260.055670][ T5716] __kmalloc_noprof+0x2b9/0x850 [ 260.060509][ T5716] tomoyo_realpath_from_path+0xb6/0x690 [ 260.066041][ T5716] tomoyo_check_open_permission+0x2af/0x3c0 [ 260.071915][ T5716] tomoyo_file_open+0x6b/0x90 [ 260.076568][ T5716] security_file_open+0xb5/0x1e0 [ 260.081494][ T5716] do_dentry_open+0x5aa/0x1660 [ 260.086234][ T5716] vfs_open+0x82/0x3f0 [ 260.090288][ T5716] path_openat+0x208c/0x31a0 [ 260.094858][ T5716] do_file_open+0x20e/0x430 [ 260.099340][ T5716] do_sys_openat2+0x10d/0x1e0 [ 260.103998][ T5716] __x64_sys_openat+0x12d/0x210 [ 260.108832][ T5716] do_syscall_64+0x10b/0xf80 [ 260.113406][ T5716] [ 260.115705][ T5716] Memory state around the buggy address: [ 260.121307][ T5716] ffff888053be8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.129346][ T5716] ffff888053be8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.137385][ T5716] >ffff888053be8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.145418][ T5716] ^ [ 260.149981][ T5716] ffff888053be8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.158025][ T5716] ffff888053be8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.166059][ T5716] ================================================================== [ 260.176849][ T30] audit: type=1400 audit(1778741820.018:373): avc: denied { open } for pid=8533 comm="syz.4.734" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 260.202471][ T9] em28xx 3-1:0.132: failed to read eeprom (err=-110) [ 260.217163][ T9] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 260.275451][ T30] audit: type=1400 audit(1778741820.858:374): avc: denied { write } for pid=8533 comm="syz.4.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 260.312853][ T5716] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 260.320076][ T5716] CPU: 1 UID: 0 PID: 5716 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.331015][ T5716] Tainted: [L]=SOFTLOCKUP [ 260.335337][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.345389][ T5716] Workqueue: usb_hub_wq hub_event [ 260.350424][ T5716] Call Trace: [ 260.353690][ T5716] [ 260.356617][ T5716] dump_stack_lvl+0x100/0x190 [ 260.361281][ T5716] vpanic+0x552/0x970 [ 260.365244][ T5716] ? __pfx_vpanic+0x10/0x10 [ 260.369732][ T5716] ? media_device_unregister+0x59d/0x610 [ 260.375351][ T5716] panic+0xd1/0xe0 [ 260.379048][ T5716] ? __pfx_panic+0x10/0x10 [ 260.383445][ T5716] ? media_device_unregister+0x59d/0x610 [ 260.389067][ T5716] ? preempt_schedule_common+0x42/0xc0 [ 260.394520][ T5716] check_panic_on_warn.cold+0x19/0x34 [ 260.399884][ T5716] end_report.part.0+0x3a/0x90 [ 260.404636][ T5716] kasan_report.cold+0xe/0x18 [ 260.409304][ T5716] ? media_device_unregister+0x59d/0x610 [ 260.414908][ T5716] media_device_unregister+0x59d/0x610 [ 260.420354][ T5716] em28xx_unregister_media_device+0x4e/0xe0 [ 260.426249][ T5716] em28xx_release_resources+0x79/0x1b0 [ 260.431708][ T5716] em28xx_usb_disconnect.cold+0x17d/0x253 [ 260.437429][ T5716] usb_unbind_interface+0x1dd/0x9e0 [ 260.442632][ T5716] ? __pfx_usb_unbind_interface+0x10/0x10 [ 260.448357][ T5716] device_remove+0x12a/0x180 [ 260.452946][ T5716] device_release_driver_internal+0x44e/0x620 [ 260.458992][ T5716] bus_remove_device+0x2bc/0x560 [ 260.463916][ T5716] ? __pfx_bus_remove_device+0x10/0x10 [ 260.469371][ T5716] ? __pfx_device_remove_attrs+0x10/0x10 [ 260.475000][ T5716] device_del+0x376/0x9b0 [ 260.479326][ T5716] ? __pfx_device_del+0x10/0x10 [ 260.484160][ T5716] ? kobject_put+0xb9/0x640 [ 260.488662][ T5716] usb_disable_device+0x367/0x810 [ 260.493680][ T5716] usb_disconnect+0x2e2/0x9a0 [ 260.498359][ T5716] hub_event+0x1d0c/0x4af0 [ 260.502762][ T5716] ? __lock_acquire+0x4a5/0x2630 [ 260.507674][ T5716] ? do_raw_spin_unlock+0x145/0x1e0 [ 260.512867][ T5716] ? __pfx_hub_event+0x10/0x10 [ 260.517615][ T5716] ? assoc_array_gc+0xa0/0x15d0 [ 260.522446][ T5716] ? rcu_is_watching+0x12/0xc0 [ 260.527206][ T5716] process_one_work+0xa0e/0x1980 [ 260.532123][ T5716] ? __pfx_process_one_work+0x10/0x10 [ 260.537480][ T5716] ? __pfx_hub_event+0x10/0x10 [ 260.542222][ T5716] worker_thread+0x5ef/0xe50 [ 260.546806][ T5716] ? __pfx_worker_thread+0x10/0x10 [ 260.551909][ T5716] ? kthread+0x13a/0x450 [ 260.556138][ T5716] ? __pfx_worker_thread+0x10/0x10 [ 260.561227][ T5716] kthread+0x370/0x450 [ 260.565275][ T5716] ? __pfx_kthread+0x10/0x10 [ 260.569855][ T5716] ret_from_fork+0x72b/0xd50 [ 260.574431][ T5716] ? __pfx_ret_from_fork+0x10/0x10 [ 260.579522][ T5716] ? __switch_to+0x800/0x1100 [ 260.584181][ T5716] ? __pfx_kthread+0x10/0x10 [ 260.588757][ T5716] ret_from_fork_asm+0x1a/0x30 [ 260.593504][ T5716] [ 260.596791][ T5716] Kernel Offset: disabled [ 260.601091][ T5716] Rebooting in 86400 seconds..