last executing test programs: 17.859104427s ago: executing program 0 (id=2559): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x810, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40c0080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0xfffffdfb) unshare(0x8040600) socket(0x22, 0x2, 0x4) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0xae44, 0xbf14) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000940)={0x60, 0x80, 0x0, 0x20, 0x0, 0x0, 0x8, 0x0, {}, {0x0, 0x1000}, {}, {0x4000}, 0x2, 0x100}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3e, 0xd0, 0xd, 0x40, 0xc98, 0x1140, 0xdbe9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x65, 0xe6}}]}}]}}, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x60, 0x1000) 14.374090809s ago: executing program 0 (id=2564): unshare(0x6a040000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffff9c, 0x0, 0x10141, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) unshare(0x6020400) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newqdisc={0x14c, 0x24, 0xbad689febb22c699, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "1b0d9e59b96aa56231d6b2733a884915292b46f1e0738572cac4714168804b555b57fabe9def50e59cd40fcb3bb5d8897e32fa2bef29cf699de9f218957ada1e5010f7c7fbeba418dbdce7fd0cdcfa2af5d0cfae8f523d47449a0f7994d2697f3547856336ec2e1dd70e7af4cd9ffd0c0214d0feed7b1f64d6c1a7cce402b4e305618c6b38e4476320e587a44c04aed0d6d000244c9cd2ac33d0c66725a421dd664508d9027aca0ba871e154650550212b7d3a92d5e8b65c2308ae3f889b95325718c12375d2525ac3b4f6d06cc08380c43aea9df0a1e9e619cf220639576c6516df4d054452efd0ff9d38f54935c48b1994da4840bdd4ecb2207e9f85bbc726"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x10000, 0x8, 0x9, 0x7, 0x15, 0x15}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000000)="a5ce", 0x2) r9 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r7, 0x0, r9, 0x0, 0x7fff, 0x6) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.477505367s ago: executing program 3 (id=2569): socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)={0xc0, 0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x100000000, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0x7}, {0xc}, 0x70bd29, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x769}], 0x1}}], 0x1, 0x11) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 10.933524792s ago: executing program 0 (id=2572): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x300, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0xa, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x1, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000380)={0x0, 'bond_slave_0\x00', {0x2}, 0xd}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x2, 0x4, 0x4c8, 0xffffffff, 0x0, 0x2fc, 0x2fc, 0xfeffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x20c, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0x7, 0x3f3], 0x48004, 0x9, 0x4, [@loopback, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @empty, @private2={0xfc, 0x2, '\x00', 0x2}, @loopback, @empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1b}, @private1, @private0, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}], 0xe}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0x0, 0x3, 0x2}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xf6ab}}}, {{@uncond, 0x0, 0xd0, 0x104, 0x0, {}, [@common=@srh={{0x2c}, {0x11, 0x98, 0x8, 0x3, 0x9, 0x820, 0x200}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x524) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000030000000000001"], 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f0000000240)={'vlan1\x00', 0x1}) mmap(&(0x7f00000cf000/0x1000)=nil, 0x1000, 0x8, 0x8013, r2, 0xee2e5000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) socket$inet_mptcp(0x2, 0x1, 0x106) move_pages(r0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) 10.155395038s ago: executing program 1 (id=2573): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) mq_open(0x0, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='\x00', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) 9.917239466s ago: executing program 1 (id=2574): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(r1, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}, r5}}, 0x48) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x100000, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @loopback, 0x8000005}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="4b8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 9.000238588s ago: executing program 2 (id=2575): socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)={0xc0, 0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x100000000, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0x7}, {0xc}, 0x70bd29, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x769}], 0x1}}], 0x1, 0x11) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 8.994957231s ago: executing program 4 (id=2576): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)=0x1f40) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) msync(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x4, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}, r4}}, 0x48) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x20000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x103) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4220, 0x26d2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0xc0c0) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 8.073650257s ago: executing program 3 (id=2577): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x40cc, 0x0, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="666402d2a691dec36af65e343d8214136e796daa83f9812d4c9412b09be86a459264fb55907b80445cb8c4bcb9421d534c715c77fd031197599d6d89ced0cffbe49150f556b965ee4fd4058150db39bb959bbbb8d1e7ee4f79f9cb4ca1f4927aa50a2ec5f6fa51ff51cc5d99a0dce4457be7cbcffbfda2128ce8e8957e87128bce64de4b8b4852559f618b9bb89daadfa43897b581627fa050bcd26eba670276f92d8bb722809dd521cfde85112187c0389c70de894bf701f1", @ANYRESDEC=r4, @ANYBLOB="2c726f30303030303030308b6b30303010303034303030302c757365725f69643d883ffb075364c5721c0cd0d59b3b3e13994a307294c259a4a636128ce4123d074dda42bb4cff5e47ffd645c61798b1fdc902cd609cd1fa22b7f7cd77cdb3b490d89604e47a55c8dd518c3e361b82e043d07011da2d0d654f0f0303f3ea7f2b80d799e80c2bb885e8552e479147d32cc7f00be134a4886d1a659811bd1a0d74c418926f58", @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00') syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}], 0x1, 0x0) 7.681794898s ago: executing program 1 (id=2578): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x810, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40c0080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0xfffffdfb) unshare(0x8040600) socket(0x22, 0x2, 0x4) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0xae44, 0xbf14) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000940)={0x60, 0x80, 0x0, 0x20, 0x0, 0x0, 0x8, 0x0, {}, {0x0, 0x1000}, {}, {0x4000}, 0x2, 0x100}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3e, 0xd0, 0xd, 0x40, 0xc98, 0x1140, 0xdbe9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x65, 0xe6}}]}}]}}, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x60, 0x1000) 7.505605403s ago: executing program 4 (id=2579): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0xf5, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505240600010524007f000d240f0104000000080000000006241a03000a052404010704ac18"], 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) writev(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) readv(r4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/156, 0x9c}], 0x1) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) epoll_create(0x3ff) ioctl$VIDIOC_S_STD(r3, 0xc0285629, &(0x7f00000001c0)=0x80008) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000a000000000005000b"], 0x44}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 6.954968835s ago: executing program 0 (id=2580): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x0, 0x9, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, &(0x7f0000000040)=0x5, 0x9, 0x2) madvise(&(0x7f0000bdc000/0x1000)=nil, 0x1000, 0xa) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c20a4d90780200"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="200e00203a22e30143718e3adc68b4"], 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000001c0)=""/46) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x22, 0x0, 0x0) r5 = semget$private(0x0, 0x0, 0x10) semctl$SEM_STAT_ANY(r5, 0x2, 0x14, &(0x7f0000000200)=""/209) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_ep_write(r2, 0x1, 0xd, &(0x7f0000000040)="33e2ecdb179cd6171018ed5ff0") gettid() 6.56361972s ago: executing program 3 (id=2581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02008000000100000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000380), 0xffffd6c0}, 0x38) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0, @ANYBLOB="598e8389f32246438ece71d797372d21e60e7b108b32b52f54b239bc16eda9df27f599cb226335f56cc7c1d7053e243ea91d1299a79f453a6bce524fe5bec9aadd1fb0adcf5e8fe1d303a504659af27f2e0d8b6623090135a515e4c642e82a73a2862abb1ea8", @ANYRESDEC=r4, @ANYRES8=r3, @ANYRES32=r4, @ANYRESOCT=0x0], 0x60) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev, 0x0, r3}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046}) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4d0, 0x31c, 0x18c, 0x203, 0x31c, 0x19030000, 0x408, 0x2e0, 0x2e0, 0x408, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x31c, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {0xc}, {0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r8}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a00000000000000000000001400050000000000000000000000000000000002"], 0x30}, 0x1, 0x11}, 0x0) io_submit(0x0, 0x3fffffffffffffe2, &(0x7f00000005c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x6, 0xffffffffffffffff, &(0x7f0000000180)="ae061ff3fae188434e41b1", 0xb, 0x5, 0x0, 0x2}]) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '^^-#\'!:]]+]:'}, {}, {0x20, '[%[{'}, {0x20, '-!%(*%+&/@}\\{%\x06%}}^'}, {}, {0x20, '#'}]}, 0x127) 6.162849976s ago: executing program 3 (id=2582): socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200), 0x0, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000200), &(0x7f0000000300)=[r7], &(0x7f0000000340)}) io_setup(0x58, &(0x7f0000000300)) write(r2, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socket$inet_smc(0x2b, 0x1, 0x0) io_setup(0xffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.43914492s ago: executing program 2 (id=2583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000380), 0xffffd6c0}, 0x38) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0, @ANYBLOB="598e8389f32246438ece71d797372d21e60e7b108b32b52f54b239bc16eda9df27f599cb226335f56cc7c1d7053e243ea91d1299a79f453a6bce524fe5bec9aadd1fb0adcf5e8fe1d303a504659af27f2e0d8b6623090135a515e4c642e82a73a2862abb1ea8", @ANYRESDEC=r4, @ANYRES8=r3, @ANYRES32=r4, @ANYRESOCT=0x0], 0x60) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r7}) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4d0, 0x31c, 0x18c, 0x203, 0x31c, 0x19030000, 0x408, 0x2e0, 0x2e0, 0x408, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x31c, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {0xc}, {0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r9}) 5.040506223s ago: executing program 2 (id=2584): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) mq_open(0x0, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={0x0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) 4.774572725s ago: executing program 2 (id=2585): openat$kvm(0xffffff9c, 0x0, 0x4a000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x4d, 0x0, "8ddbb51a3cfd954e41e8ccb2650fa60067fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71b43b828c7de258b6b9ca1fc52bcc83e2a016a00"}, 0xd8) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r2, 0x81) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8400", 0x28, 0x6, 0xff, @remote, @mcast2, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8afb72d8398dcbac145121cd4e97f5f2"}]}}}}}}}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000003c0)="6647ea885fb1802cdd0c783f90c631e834177ae9a40c5441453bc45ba4a92179e70317dab7011c8ffb1d26d4a2318029a3631fcb4ac2f12c861822d2a77db16a475fb63cdee8e6b29a547acd14cad36760771ca10edd81885982837b48e8ff173765cf93acc8229f7c0153c057956480c392fe99c6a323114952743d7e5978b90ce40cf0f89b7fdd7d0e7519645f6da4e1dfa2a67e10d09b5780bb68692d0ab3a6696dc891cae4d23b", 0xa9, 0x40040, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090224"], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, 0x0, 0x0) 4.449026333s ago: executing program 1 (id=2586): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f0000000040)="020000000d80ffff", 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) io_uring_setup(0x76e0, &(0x7f0000000340)={0x0, 0x4, 0x8, 0x4}) r2 = socket(0xa, 0x801, 0x0) getsockopt(r2, 0x29, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7814, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/27, 0x1b}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socket(0xa, 0xa, 0x46) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0, 0x12f4}, 0x1, 0x0, 0x0, 0x800}, 0x2004c008) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r5) recvmmsg$unix(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000600)=""/252, 0xfc}, {0x0}], 0x3}}], 0x1, 0x10000, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x8) 4.210376594s ago: executing program 4 (id=2587): socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)={0xc0, 0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x100000000, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0x7}, {0xc}, 0x70bd29, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x769}], 0x1}}], 0x1, 0x11) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 3.62937862s ago: executing program 0 (id=2588): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x2e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) recvmmsg(r2, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4076, 0xfec}, {&(0x7f0000000200)=""/161, 0xa1}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, 0x0, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 3.505718642s ago: executing program 1 (id=2589): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200), 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000140)={0x0, {0x1, 0x1, 0xb, 0x4, 0x5, 0x52}}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000180)={0x8, {0xff, 0xffffffff, 0x35800, 0x3ff}}) shutdown(r2, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) r4 = fsopen(&(0x7f0000000000)='befs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x48c4}, 0x20040091) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c"], 0x30}}, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="070800ff57ffba10000900", 0xb, 0x44000091, &(0x7f0000000100)={0x11, 0xf5, r6}, 0x14) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r8, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) close_range(r1, 0xffffffffffffffff, 0x0) 1.326323695s ago: executing program 3 (id=2591): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs(0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r5, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time={0x5, 0x1}, {0x7}, {}, @raw8={"3ad5e4aa05fd1f1646e53f27"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {}], 0x70) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000200)={{0x2, 0x1, 0xff7f, 0x2}, 'syz0\x00', 0x27}) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c431978", 0x4b, 0xc001, 0x0, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c000102030109022900010000000009040000000202010005020000"], 0x0) sendto$inet6(r1, 0x0, 0x0, 0x44004010, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 1.199253489s ago: executing program 0 (id=2592): socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)={0xc0, 0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0x23, 0x0, &(0x7f0000000280)) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x100000000, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0x7}, {0xc}, 0x70bd29, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x769}], 0x1}}], 0x1, 0x11) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 1.073805289s ago: executing program 2 (id=2593): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x11) 635.964922ms ago: executing program 4 (id=2594): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02008000000100000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000380), 0xffffd6c0}, 0x38) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0, @ANYBLOB="598e8389f32246438ece71d797372d21e60e7b108b32b52f54b239bc16eda9df27f599cb226335f56cc7c1d7053e243ea91d1299a79f453a6bce524fe5bec9aadd1fb0adcf5e8fe1d303a504659af27f2e0d8b6623090135a515e4c642e82a73a2862abb1ea8", @ANYRESDEC=r4, @ANYRES8=r3, @ANYRES32=r4, @ANYRESOCT=0x0], 0x60) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r6}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4d0, 0x31c, 0x18c, 0x203, 0x31c, 0x19030000, 0x408, 0x2e0, 0x2e0, 0x408, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x31c, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {0xc}, {0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r8}) 497.215398ms ago: executing program 4 (id=2595): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) mq_open(0x0, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={0x0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) 367.829024ms ago: executing program 4 (id=2596): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x282, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$alg(r3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r7, &(0x7f0000000180)={@void, @val={0x3, 0x1, 0x0, 0x404, 0x1, 0x7}, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@can={0xc, {{0x3, 0x1}, 0x0, 0x8487de434ff6dc5c, 0x0, 0x0, "644b6ce67218be73"}}}}}, 0x28) r8 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r8, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x20, 0x29, 0x3b, {@ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}], 0x20}, 0x40080) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r9 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89ff, &(0x7f0000000280)={'veth1_to_batadv\x00', 0x0}) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 244.416706ms ago: executing program 1 (id=2597): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x810, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40c0080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0xfffffdfb) unshare(0x8040600) socket(0x22, 0x2, 0x4) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0xae44, 0xbf14) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000940)={0x60, 0x80, 0x0, 0x20, 0x0, 0x0, 0x8, 0x0, {}, {0x0, 0x1000}, {}, {0x4000}, 0x2, 0x100}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3e, 0xd0, 0xd, 0x40, 0xc98, 0x1140, 0xdbe9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x65, 0xe6}}]}}]}}, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x60, 0x1000) 0s ago: executing program 2 (id=2598): userfaultfd(0x801) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000007000000000001"], 0x50) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x800) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r2 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000000)='sched\x00') r7 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000000500), &(0x7f0000000fc0)=0xfffffe6b) exit(0x2) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000240)="e869", 0x2}], 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x1, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x2def, 0x1a38, 0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f00000002c0)={r11, 0x6}, 0x8) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000000000), 0x80000000) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1003, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x7}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x2, 0x1c, 0x64, 0x0, 0x8, 0x11, 0x0, @local, @remote}, {0x4e21, 0x4e20, 0x8}}}}}, 0x0) kernel console output (not intermixed with test programs): usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.997569][ T5893] usb 3-1: config 0 descriptor?? [ 1052.034628][ T120] usb 2-1: config 0 descriptor?? [ 1052.099057][ T120] pcwd_usb: This driver only supports 1 device [ 1053.663806][T15502] gtp0: entered promiscuous mode [ 1053.678979][ T5893] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1053.688463][ T5893] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1053.696442][ T5893] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1053.704654][ T5893] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1053.727581][ T5893] usb 3-1: USB disconnect, device number 8 [ 1054.153087][ T5903] usb 2-1: USB disconnect, device number 10 [ 1054.425189][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.431647][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.972934][ T5903] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1055.341567][T15539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.345217][T15539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.513442][T15540] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1055.520076][T15540] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1055.537598][T15540] vhci_hcd vhci_hcd.0: Device attached [ 1055.769181][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 1055.814840][ T5893] usb 40-1: SetAddress Request (2) to port 0 [ 1055.821727][ T5893] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1055.860372][ T5903] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1055.887332][ T5903] usb 3-1: config 0 has no interface number 0 [ 1055.899189][ T5903] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1056.010785][ T5903] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1056.038842][T15551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2148'. [ 1056.053512][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.070234][ T5903] usb 3-1: Product: syz [ 1056.083138][ T5903] usb 3-1: Manufacturer: syz [ 1056.099251][ T5903] usb 3-1: SerialNumber: syz [ 1056.120607][ T5903] usb 3-1: config 0 descriptor?? [ 1056.133515][T15541] vhci_hcd: connection reset by peer [ 1056.139747][ T6524] vhci_hcd: stop threads [ 1056.157755][ T6524] vhci_hcd: release socket [ 1056.208497][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2154'. [ 1056.221201][ T6524] vhci_hcd: disconnect device [ 1056.233357][ T5903] smsc75xx v1.0.0 [ 1056.237091][ T5903] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1056.466556][ T5903] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 1056.723297][T11669] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1056.953350][T11669] usb 4-1: Using ep0 maxpacket: 16 [ 1057.029428][T11669] usb 4-1: config index 0 descriptor too short (expected 292, got 36) [ 1057.156777][T11669] usb 4-1: config 0 has too many interfaces: 106, using maximum allowed: 32 [ 1057.205226][T11669] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.242599][T11669] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 106 [ 1057.275997][T11669] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1057.321785][T11669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.407629][T11669] usb 4-1: config 0 descriptor?? [ 1057.640548][T11669] usb 4-1: USB disconnect, device number 24 [ 1058.298449][T15574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.313855][T15574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.955644][T11669] usb 3-1: USB disconnect, device number 9 [ 1059.614676][ T120] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1059.818849][ T120] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1059.828531][ T120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.859354][ T120] usb 3-1: config 0 descriptor?? [ 1059.906301][ T120] pcwd_usb: This driver only supports 1 device [ 1060.739502][T15597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2163'. [ 1060.893545][ T5893] usb 40-1: device descriptor read/8, error -110 [ 1060.933314][T15036] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1061.103374][T15036] usb 4-1: Using ep0 maxpacket: 32 [ 1061.207867][T15036] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.246587][T15036] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.263225][T15038] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1061.285232][T15036] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1061.340299][T15036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.354319][ T5893] usb usb40-port1: attempt power cycle [ 1061.411701][T15036] usb 4-1: config 0 descriptor?? [ 1061.453565][T15038] usb 2-1: Using ep0 maxpacket: 16 [ 1061.466023][T15038] usb 2-1: config 7 has an invalid interface number: 76 but max is 0 [ 1061.481582][T15038] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 1061.506699][T15038] usb 2-1: config 7 has no interface number 0 [ 1061.516496][T15038] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1061.528515][T15038] usb 2-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1061.549973][T15038] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1061.568243][T15038] usb 2-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1061.617708][T15038] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xF has an invalid bInterval 127, changing to 10 [ 1061.653327][T15038] usb 2-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 1061.680759][T15038] usb 2-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 1061.713170][T15038] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x6 has invalid maxpacket 50176, setting to 1024 [ 1061.775440][T15038] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1061.791832][T15038] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1061.822058][T15038] usb 2-1: config 7 interface 76 has no altsetting 0 [ 1061.839991][T15038] usb 2-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=b7.d3 [ 1061.850589][T15038] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.862866][T15038] usb 2-1: Product: 殄⋀å™è¢£í”–æŸä§Žâ½†ì¿‹ï²ŽçŒŒá¦œî¤¿ç¢™á¥’᫥䪲Გ찙蔈அ檼㑑ᳵ鰗ç·å’–憕沤㬫녣撞磻孩⋼쬱〗桬ᖒୡ쬂ጆ￥fȕ斕꼺鮃꺭瞒å¸ç®€ï¨ïš‹è½—í¡ [ 1061.884232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1061.954236][ T5893] usb usb40-port1: unable to enumerate USB device [ 1061.976944][T15038] usb 2-1: Manufacturer: èŒæŽžåƒ“ﱶ [ 1061.988929][T15038] usb 2-1: SerialNumber: 瑥ɑ稿ࡇ삆ⲇṲ撙ᘹ뮥蔀ì­ì¯é™ºé‹áŠ¼èƒŽì¿˜ãŒ«é›é¯Žç«­ï‚µè·–䖹᪊᳖ᥚ樂讕葱ã‡àº¦á¶‰åœ—䃲渹槗궞æ犱 [ 1062.274430][T15595] netlink: 'syz.1.2163': attribute type 3 has an invalid length. [ 1062.321947][T15038] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1062.333514][T15038] usb 2-1: invalid MIDI in EP 0 [ 1062.442420][T15038] snd-usb-audio 2-1:7.76: probe with driver snd-usb-audio failed with error -22 [ 1062.524794][T15038] usb 2-1: USB disconnect, device number 11 [ 1062.593164][ T5893] usb 3-1: USB disconnect, device number 10 [ 1062.663381][ T8340] udevd[8340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.76/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1062.864082][T15610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.876425][T15610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.215637][ T5893] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1063.317497][T15036] usbhid 4-1:0.0: can't add hid device: -71 [ 1063.326882][T15036] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1063.443422][T15036] usb 4-1: USB disconnect, device number 25 [ 1063.711529][ T5893] usb 3-1: config 0 has no interfaces? [ 1063.727791][ T5893] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1063.743666][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.751920][ T5893] usb 3-1: Product: syz [ 1063.756562][ T5893] usb 3-1: Manufacturer: syz [ 1063.761157][ T5893] usb 3-1: SerialNumber: syz [ 1063.790281][ T5893] usb 3-1: config 0 descriptor?? [ 1064.012180][T15624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.023067][T15624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.211973][T15612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.224324][T15612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.583503][T15036] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1064.753180][T15627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2167'. [ 1064.833709][T15036] usb 4-1: Using ep0 maxpacket: 16 [ 1065.773139][ T5893] usb 3-1: USB disconnect, device number 11 [ 1067.177975][T15647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1067.599676][T15036] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1067.682106][T15036] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1067.696595][T15036] usb 4-1: can't read configurations, error -71 [ 1068.075657][T15670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.077480][T15670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.601231][T15671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1070.204813][T15038] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1070.391997][T15038] usb 2-1: Using ep0 maxpacket: 16 [ 1070.401001][T15038] usb 2-1: config index 0 descriptor too short (expected 292, got 36) [ 1070.412935][T15038] usb 2-1: config 0 has too many interfaces: 106, using maximum allowed: 32 [ 1070.430052][T15038] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.753249][T15038] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 106 [ 1070.789485][T15038] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1071.418872][T15038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.429794][T15038] usb 2-1: config 0 descriptor?? [ 1071.548714][T15699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.549034][T15699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.242783][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2182'. [ 1073.059646][T15036] usb 2-1: USB disconnect, device number 12 [ 1075.432239][T15744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.443984][T15744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.913255][T15036] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1076.065302][T15036] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1076.089887][T15036] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1076.114796][T15036] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1076.130443][T15036] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1076.148117][T15036] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1076.195578][T15725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1076.275490][T15036] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1076.289505][T15036] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1076.298616][T15036] usb 4-1: Product: syz [ 1076.302980][T15036] usb 4-1: Manufacturer: syz [ 1076.535537][T15036] cdc_wdm 4-1:1.0: skipping garbage [ 1076.535556][T15036] cdc_wdm 4-1:1.0: skipping garbage [ 1076.616047][T15036] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1076.628513][T15036] cdc_wdm 4-1:1.0: Unknown control protocol [ 1076.822277][T15036] usb 4-1: USB disconnect, device number 28 [ 1076.953702][T15038] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1077.212372][T15038] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1077.222816][T15038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.301138][T15038] usb 3-1: config 0 descriptor?? [ 1077.331954][T15038] pcwd_usb: This driver only supports 1 device [ 1079.483596][T15038] usb 3-1: USB disconnect, device number 12 [ 1079.770454][T15771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'. [ 1081.070042][T11669] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1081.245841][T11669] usb 2-1: config 0 has no interfaces? [ 1081.268420][T11669] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1081.280338][T11669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.289484][T11669] usb 2-1: Product: syz [ 1081.299037][T11669] usb 2-1: Manufacturer: syz [ 1081.329250][T11669] usb 2-1: SerialNumber: syz [ 1081.435383][T11669] usb 2-1: config 0 descriptor?? [ 1081.583123][ T5903] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1081.863380][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 1082.143820][ T5903] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1082.181695][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2199'. [ 1082.233343][ T5903] usb 4-1: config 0 has no interface number 0 [ 1082.239566][ T5903] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1082.271800][ T5903] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1082.358783][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.398269][ T5903] usb 4-1: Product: syz [ 1082.433139][ T5903] usb 4-1: Manufacturer: syz [ 1082.615566][ T5903] usb 4-1: SerialNumber: syz [ 1082.665902][ T5903] usb 4-1: config 0 descriptor?? [ 1082.973495][ T5903] smsc75xx v1.0.0 [ 1082.977156][ T5903] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1083.020911][ T5903] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 1083.057431][T15809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.085830][T15809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.149004][T15809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.182954][T15809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.578465][ T120] usb 2-1: USB disconnect, device number 13 [ 1084.155315][ T5893] usb 4-1: USB disconnect, device number 29 [ 1084.303477][ T30] audit: type=1326 audit(1746045339.866:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.2.2205" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x0 [ 1084.546924][T15831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.556756][T15831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.593358][T11669] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1084.766843][T11669] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1084.779107][T11669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.850196][T11669] usb 2-1: config 0 descriptor?? [ 1084.972973][T11669] pcwd_usb: This driver only supports 1 device [ 1085.127104][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2210'. [ 1086.993219][ T120] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1087.148190][ T120] usb 4-1: config 0 has no interfaces? [ 1087.152768][ T120] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1087.152796][ T120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.152815][ T120] usb 4-1: Product: syz [ 1087.152826][ T120] usb 4-1: Manufacturer: syz [ 1087.152835][ T120] usb 4-1: SerialNumber: syz [ 1087.184356][ T120] usb 4-1: config 0 descriptor?? [ 1087.233850][T15849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'. [ 1087.321268][T15036] usb 2-1: USB disconnect, device number 14 [ 1087.495235][T15833] delete_channel: no stack [ 1088.149304][ T5893] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1088.346591][ T5893] usb 2-1: config 0 has no interfaces? [ 1088.415039][ T5893] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1088.427633][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.460491][ T5893] usb 2-1: Product: syz [ 1088.466800][ T5893] usb 2-1: Manufacturer: syz [ 1088.486155][ T5893] usb 2-1: SerialNumber: syz [ 1088.542085][ T5893] usb 2-1: config 0 descriptor?? [ 1088.616177][T15869] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1089.637208][T15036] usb 4-1: USB disconnect, device number 30 [ 1090.051370][T15879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.063568][T15879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.123245][T15879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.160944][T15879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.175939][T15038] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1090.521826][T15038] usb 4-1: config 0 has no interfaces? [ 1090.536279][T15038] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1090.545727][T15036] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1090.550874][T15038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.561836][T15038] usb 4-1: Product: syz [ 1090.569477][T15038] usb 4-1: Manufacturer: syz [ 1090.574639][T15038] usb 4-1: SerialNumber: syz [ 1090.591469][T15038] usb 4-1: config 0 descriptor?? [ 1090.732462][ T5893] usb 2-1: USB disconnect, device number 15 [ 1090.750767][T15036] usb 3-1: config 0 has no interfaces? [ 1090.786622][T15036] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1090.798903][T15036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.809337][T15036] usb 3-1: Product: syz [ 1090.931039][T15036] usb 3-1: Manufacturer: syz [ 1090.942668][T15036] usb 3-1: SerialNumber: syz [ 1090.975949][T15036] usb 3-1: config 0 descriptor?? [ 1091.183161][ T5893] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1091.412283][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 1091.521999][ T5893] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1091.522018][ T5893] usb 2-1: config 0 has no interface number 0 [ 1091.522035][ T5893] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1091.530791][ T5893] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1091.530810][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.530821][ T5893] usb 2-1: Product: syz [ 1091.530828][ T5893] usb 2-1: Manufacturer: syz [ 1091.530836][ T5893] usb 2-1: SerialNumber: syz [ 1091.532514][ T5893] usb 2-1: config 0 descriptor?? [ 1091.535173][ T5893] smsc75xx v1.0.0 [ 1091.535184][ T5893] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1091.535312][ T5893] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1091.901621][T15897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2222'. [ 1092.168716][T15899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.169298][T15899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.788682][ T5893] usb 4-1: USB disconnect, device number 31 [ 1093.013541][ T120] usb 3-1: USB disconnect, device number 13 [ 1093.283363][ T5893] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1093.463315][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 1093.489652][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.500858][ T5893] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1093.598222][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.614781][ T5893] usb 4-1: config 0 descriptor?? [ 1093.638709][ T5893] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1093.754341][T15038] usb 2-1: USB disconnect, device number 16 [ 1094.155249][T15916] usb usb8: usbfs: process 15916 (syz.4.2228) did not claim interface 0 before use [ 1094.218572][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2227'. [ 1095.172922][T15924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2229'. [ 1095.626712][T15934] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2231'. [ 1096.553384][T15038] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1096.597473][ T5903] usb 4-1: USB disconnect, device number 32 [ 1096.764498][T15038] usb 3-1: Using ep0 maxpacket: 32 [ 1096.771608][T15038] usb 3-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 1096.785244][T15038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.842430][T15947] fuse: Bad value for 'fd' [ 1097.106204][T15038] usb 3-1: config 0 descriptor?? [ 1097.229037][T15038] go7007 3-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 1097.742704][T15939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.760488][T15939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.856784][T15036] usb 3-1: USB disconnect, device number 14 [ 1098.390443][T15965] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1098.929420][T15036] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1099.138366][T15972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2240'. [ 1099.219573][T15036] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.249926][T15036] usb 3-1: config 1 has no interfaces? [ 1099.277288][T15036] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 1099.293920][T15036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.302436][T15036] usb 3-1: Product: syz [ 1099.307346][T15036] usb 3-1: Manufacturer: syz [ 1099.318307][T15036] usb 3-1: SerialNumber: syz [ 1099.583352][ T5903] usb 3-1: USB disconnect, device number 15 [ 1101.474150][T15989] bridge0: port 1(macvlan0) entered blocking state [ 1101.644734][T15998] netlink: 'syz.3.2246': attribute type 10 has an invalid length. [ 1101.663696][T15989] bridge0: port 1(macvlan0) entered disabled state [ 1101.670840][T15998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2246'. [ 1101.688218][T15989] macvlan0: entered allmulticast mode [ 1101.697061][T15989] bridge0: entered allmulticast mode [ 1102.029426][T15989] macvlan0: left allmulticast mode [ 1102.035262][T15989] bridge0: left allmulticast mode [ 1102.295171][T16013] fuse: Bad value for 'fd' [ 1102.410034][T15998] batadv0: entered promiscuous mode [ 1102.506197][T15998] batadv0: entered allmulticast mode [ 1102.532752][T15998] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1102.599116][T16002] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1102.601566][T16003] batman_adv: batadv0: Adding interface: dummy0 [ 1102.617684][T16003] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.646807][T16003] batman_adv: batadv0: Interface activated: dummy0 [ 1103.402854][T16029] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1103.413125][T15036] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1103.420545][T16029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2251'. [ 1103.470594][T11669] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1103.726577][T15036] usb 2-1: config 0 has no interfaces? [ 1103.833608][T11669] usb 4-1: Using ep0 maxpacket: 32 [ 1103.840913][T11669] usb 4-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 1103.850165][T11669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.860775][T11669] usb 4-1: config 0 descriptor?? [ 1103.873538][T15036] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1103.955787][T15036] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.049929][T11669] go7007 4-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 1104.061526][T15036] usb 2-1: Product: syz [ 1104.102769][T15036] usb 2-1: Manufacturer: syz [ 1104.109397][T15036] usb 2-1: SerialNumber: syz [ 1104.118831][T15036] usb 2-1: config 0 descriptor?? [ 1104.454056][T16021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.454349][T16021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.496349][T11669] usb 4-1: USB disconnect, device number 33 [ 1105.403937][ T5903] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1105.899197][T11669] usb 2-1: USB disconnect, device number 17 [ 1105.925570][T15038] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1105.983061][ T5903] usb 3-1: config 0 has no interfaces? [ 1106.039873][ T5903] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1106.121126][T16046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.141250][T16046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.199866][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.289056][ T5903] usb 3-1: Product: syz [ 1106.294753][ T5903] usb 3-1: Manufacturer: syz [ 1106.299452][ T5903] usb 3-1: SerialNumber: syz [ 1106.311430][T15038] usb 4-1: Using ep0 maxpacket: 16 [ 1106.406107][ T5903] usb 3-1: config 0 descriptor?? [ 1107.571600][T16072] fuse: Bad value for 'fd' [ 1108.163678][ T5903] usb 3-1: USB disconnect, device number 16 [ 1108.273199][T11669] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1108.339527][T16080] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1108.432230][T15038] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1108.441119][T15038] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1108.453100][T15038] usb 4-1: can't read configurations, error -71 [ 1108.506790][T11669] usb 2-1: config 0 has no interfaces? [ 1108.526259][T11669] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1108.535823][T11669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.554605][T11669] usb 2-1: Product: syz [ 1108.558919][T11669] usb 2-1: Manufacturer: syz [ 1108.567954][T11669] usb 2-1: SerialNumber: syz [ 1108.605827][T11669] usb 2-1: config 0 descriptor?? [ 1108.983341][T15038] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1109.174937][T15038] usb 4-1: config 0 has no interfaces? [ 1109.200262][T15038] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1109.333886][T15038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.417207][T15038] usb 4-1: Product: syz [ 1109.479840][T15038] usb 4-1: Manufacturer: syz [ 1109.517699][T15038] usb 4-1: SerialNumber: syz [ 1109.589847][T15038] usb 4-1: config 0 descriptor?? [ 1110.371977][T16105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.382441][T15036] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1110.405585][T16105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.734447][T15036] usb 3-1: Using ep0 maxpacket: 32 [ 1110.742233][T15036] usb 3-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 1110.753500][T15036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.775325][T15036] usb 3-1: config 0 descriptor?? [ 1110.788669][T15036] go7007 3-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 1110.989225][T16100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.000989][T16100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.037483][T15036] usb 3-1: USB disconnect, device number 17 [ 1111.297980][T15036] usb 2-1: USB disconnect, device number 18 [ 1111.347712][T16107] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2267'. [ 1111.911079][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 1112.041785][T15038] usb 4-1: USB disconnect, device number 35 [ 1112.564964][T16111] misc userio: The device must be registered before sending interrupts [ 1113.343376][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2269'. [ 1113.480643][T16130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.498766][T16130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.998422][T16145] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1115.573270][T15036] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1115.681309][T16152] xt_policy: too many policy elements [ 1115.745784][T15036] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1115.757341][T15036] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.766162][T15036] usb 4-1: Product: syz [ 1115.782821][T15036] usb 4-1: Manufacturer: syz [ 1115.798895][T15036] usb 4-1: SerialNumber: syz [ 1115.837354][T15036] usb 4-1: config 0 descriptor?? [ 1115.857527][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.863977][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.112217][T15036] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1116.303153][ T5893] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1116.453242][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 1116.460066][ T5893] usb 3-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 1116.469965][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.494291][ T5893] usb 3-1: config 0 descriptor?? [ 1116.529405][ T5893] go7007 3-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 1116.739519][T16157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.758810][T16157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.861721][ T5893] usb 3-1: USB disconnect, device number 18 [ 1117.943122][T15038] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1118.333193][T15038] usb 3-1: Using ep0 maxpacket: 16 [ 1118.349133][T15038] usb 3-1: config index 0 descriptor too short (expected 292, got 36) [ 1118.357496][T15038] usb 3-1: config 0 has too many interfaces: 106, using maximum allowed: 32 [ 1118.366527][T15038] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.378036][T15038] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 106 [ 1118.437814][T15038] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1118.576705][T15038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.689277][T15038] usb 3-1: config 0 descriptor?? [ 1118.729768][T15036] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1118.746513][T15036] usb 4-1: USB disconnect, device number 36 [ 1119.311967][T16180] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2284'. [ 1119.973559][ T30] audit: type=1800 audit(1746045375.546:1598): pid=16185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2294" name="nullb0" dev="devtmpfs" ino=4365 res=0 errno=0 [ 1120.583275][ T5903] usb 3-1: USB disconnect, device number 19 [ 1121.148608][ T5903] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1121.713189][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 1122.075600][ T5903] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1122.084940][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1122.146014][ T5903] usb 3-1: Product: syz [ 1122.181208][ T5903] usb 3-1: Manufacturer: syz [ 1122.193462][ T5903] usb 3-1: SerialNumber: syz [ 1122.210626][T16210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2286'. [ 1122.393800][ T5903] usb 3-1: config 0 descriptor?? [ 1122.617838][T16198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.632861][T16198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.703361][T15030] usb 3-1: USB disconnect, device number 20 [ 1123.570323][ T5903] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1123.934989][ T5903] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.945411][ T5903] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1123.963872][ T5903] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1123.982689][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.006618][ T5903] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1124.128669][ T5903] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1124.138989][T11844] udevd[11844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1124.502816][T16239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2296'. [ 1124.558849][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2296'. [ 1124.654472][T16239] geneve0: left promiscuous mode [ 1124.691879][T16239] team0: Port device geneve0 removed [ 1125.523166][ T5903] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1125.623540][ T120] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1125.694404][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 1125.756386][T16254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.773662][T16254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.813763][ T5903] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1125.825626][ T5903] usb 3-1: config 0 has no interface number 0 [ 1125.841873][ T5903] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1125.875221][ T120] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1125.884436][ T120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.988647][ T120] usb 4-1: config 0 descriptor?? [ 1126.003134][ T5903] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1126.027361][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.058626][ T120] pcwd_usb: This driver only supports 1 device [ 1126.083297][ T5903] usb 3-1: Product: syz [ 1126.126064][ T5903] usb 3-1: Manufacturer: syz [ 1126.139139][ T120] usb 2-1: USB disconnect, device number 19 [ 1126.156916][ T5903] usb 3-1: SerialNumber: syz [ 1126.228414][ T5903] usb 3-1: config 0 descriptor?? [ 1126.261903][ T5903] smsc75xx v1.0.0 [ 1126.271691][ T5903] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1126.351427][ T5903] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 1126.607693][T11669] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1126.794803][T11669] usb 2-1: Using ep0 maxpacket: 16 [ 1126.841977][T11669] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1126.850723][T11669] usb 2-1: config 0 has no interface number 0 [ 1127.144829][T11669] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1127.158404][T11669] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 1127.279046][T11669] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1127.288306][T11669] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1127.297341][T11669] usb 2-1: Product: syz [ 1127.303870][T11669] usb 2-1: SerialNumber: syz [ 1127.320501][T11669] usb 2-1: config 0 descriptor?? [ 1127.346174][T11669] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 1127.370522][T11669] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input46 [ 1127.547975][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1127.843150][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'. [ 1127.867974][ T5903] usb 3-1: USB disconnect, device number 21 [ 1127.868066][ T5893] usb 4-1: USB disconnect, device number 37 [ 1129.353392][T16270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2303'. [ 1129.633912][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1129.635125][ T120] usb 2-1: USB disconnect, device number 20 [ 1129.640908][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1129.670521][ T120] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1129.684727][T16263] ALSA: mixer_oss: invalid OSS volume '' [ 1130.807797][T16302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.839006][T16302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.853468][T16302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.862338][T16302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.924680][T16304] fuse: Unknown parameter 'default_permissions00000000000000' [ 1130.938709][T16304] syz.2.2311 (16304) used obsolete PPPIOCDETACH ioctl [ 1131.633494][ T120] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1131.653132][ T5903] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1131.795924][ T120] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1131.823344][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 1131.830111][ T120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.854622][T16319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1131.902710][ T120] usb 4-1: config 0 descriptor?? [ 1131.951779][ T120] pcwd_usb: This driver only supports 1 device [ 1132.066281][T16321] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2315'. [ 1132.267810][T16323] bridge0: port 1(netdevsim0) entered blocking state [ 1132.293947][T16323] bridge0: port 1(netdevsim0) entered disabled state [ 1132.306400][T16323] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1132.973276][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1133.013108][T11669] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1133.183652][T11669] usb 3-1: Using ep0 maxpacket: 16 [ 1133.322352][T11669] usb 3-1: config index 0 descriptor too short (expected 292, got 36) [ 1133.337437][T11669] usb 3-1: config 0 has too many interfaces: 106, using maximum allowed: 32 [ 1133.360988][T11669] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.422716][T11669] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 106 [ 1133.449688][T11669] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1133.484103][T11669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.512828][T11669] usb 3-1: config 0 descriptor?? [ 1134.356524][ T120] usb 4-1: USB disconnect, device number 38 [ 1134.615905][ T5903] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1134.629615][ T5903] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1134.661768][ T5903] usb 2-1: can't read configurations, error -71 [ 1135.533236][T11669] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1135.847322][T11669] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1135.856683][T11669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.912267][T15036] usb 3-1: USB disconnect, device number 22 [ 1135.947791][T11669] usb 4-1: config 0 descriptor?? [ 1135.995594][T11669] pcwd_usb: This driver only supports 1 device [ 1136.031279][T16354] input: syz0 as /devices/virtual/input/input47 [ 1136.095909][T16354] hub 9-0:1.0: USB hub found [ 1136.106124][T16354] hub 9-0:1.0: 1 port detected [ 1136.818886][ T120] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1137.214824][ T120] usb 2-1: Using ep0 maxpacket: 32 [ 1137.229313][ T120] usb 2-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 1137.241709][ T120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.269346][ T120] usb 2-1: config 0 descriptor?? [ 1137.277176][ T120] go7007 2-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 1137.481733][T16362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.503430][T16362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.554880][ T5903] usb 2-1: USB disconnect, device number 23 [ 1137.696129][T16369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1137.857232][T16374] xt_connbytes: Forcing CT accounting to be enabled [ 1137.865150][T16374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1137.909696][ T120] usb 4-1: USB disconnect, device number 39 [ 1137.932870][T16373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2327'. [ 1138.744689][ T30] audit: type=1800 audit(1746045394.306:1599): pid=16389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2328" name="nullb0" dev="devtmpfs" ino=4365 res=0 errno=0 [ 1139.050177][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2332'. [ 1139.064841][T16394] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1139.129670][T11669] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1139.262781][T16397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.289308][T16397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.305836][T11669] usb 3-1: Using ep0 maxpacket: 16 [ 1141.703968][ T120] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1141.874005][ T120] usb 4-1: Using ep0 maxpacket: 32 [ 1141.919791][ T120] usb 4-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 1141.935767][ T120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.962428][ T120] usb 4-1: config 0 descriptor?? [ 1141.980033][ T120] go7007 4-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 1142.110203][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2340'. [ 1142.208226][T16417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.254329][T16417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.350958][T11669] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1142.383136][ T120] usb 4-1: USB disconnect, device number 40 [ 1142.392023][T11669] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1142.407287][T11669] usb 3-1: can't read configurations, error -71 [ 1143.968386][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2346'. [ 1144.078356][T16445] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1144.096122][ T5903] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1144.243167][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 1144.550880][T11669] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1144.707982][T16462] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1144.739603][ T5903] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1144.750068][T11669] usb 3-1: config 0 has no interfaces? [ 1144.750212][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1144.771898][T11669] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1144.790495][T11669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.800019][ T5903] usb 4-1: Product: syz [ 1144.908105][T11669] usb 3-1: Product: syz [ 1144.912313][T11669] usb 3-1: Manufacturer: syz [ 1144.927381][T11669] usb 3-1: SerialNumber: syz [ 1144.982278][T11669] usb 3-1: config 0 descriptor?? [ 1145.114379][ T5903] usb 4-1: Manufacturer: syz [ 1145.452704][ T5903] usb 4-1: SerialNumber: syz [ 1145.480888][ T5903] usb 4-1: config 0 descriptor?? [ 1145.914107][T16472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.933471][T16472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.021713][T16474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2352'. [ 1146.861280][T16484] netlink: 'syz.4.2356': attribute type 39 has an invalid length. [ 1146.923721][T11669] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1147.086221][T11669] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.099793][ T5903] usb 4-1: USB disconnect, device number 41 [ 1147.103082][T11669] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1147.137732][T11669] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1147.166304][T11669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.193257][T11669] usb 2-1: config 0 descriptor?? [ 1147.212143][T11669] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1147.228010][T11669] dvb-usb: bulk message failed: -22 (3/0) [ 1147.242233][T11669] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1147.260752][T11669] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1147.357880][T11669] usb 2-1: media controller created [ 1147.379506][T11669] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1147.407031][T16481] dvb-usb: bulk message failed: -22 (2/0) [ 1147.453918][T11669] dvb-usb: bulk message failed: -22 (6/0) [ 1147.461029][T11669] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1147.484979][T11669] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input49 [ 1147.544980][T16493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1147.584550][T16493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2355'. [ 1147.600307][T16493] xfrm1: entered promiscuous mode [ 1147.610628][T11669] dvb-usb: schedule remote query interval to 150 msecs. [ 1147.620196][T16493] xfrm1: entered allmulticast mode [ 1147.628344][T11669] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1147.659044][T11669] usb 2-1: USB disconnect, device number 24 [ 1147.828512][T15036] usb 3-1: USB disconnect, device number 25 [ 1147.862939][T11669] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1148.075135][T16501] tipc: Enabling of bearer rejected, failed to enable media [ 1148.232317][T16503] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2357'. [ 1148.256300][T16504] CIFS: VFS: Malformed UNC in devname [ 1149.328280][T16518] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2362'. [ 1149.470834][T16518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2362'. [ 1149.742933][T16529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2365'. [ 1150.273140][T11669] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1150.607619][T16544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.655594][T16544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.668516][T11669] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.732904][T11669] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1150.802568][T11669] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1150.835794][T16544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.849804][T16544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.950312][T11669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.992626][T11669] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1151.137121][T11669] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1151.564254][T15030] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1151.725112][T15030] usb 4-1: Using ep0 maxpacket: 16 [ 1151.733654][T15030] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1151.741956][T15030] usb 4-1: config 0 has no interface number 0 [ 1151.756280][T15030] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1151.775057][T15030] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 1151.861637][T15030] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1151.871529][T15030] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1151.881829][T15030] usb 4-1: Product: syz [ 1151.887789][T15030] usb 4-1: SerialNumber: syz [ 1151.926065][T15030] usb 4-1: config 0 descriptor?? [ 1151.960877][T15030] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 1151.983741][T15030] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input50 [ 1152.192570][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1152.343650][T16554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2370'. [ 1152.357762][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2370'. [ 1152.378160][T16554] bond0: (slave bridge0): Releasing backup interface [ 1152.397680][T16554] batadv0: left promiscuous mode [ 1152.402952][T16554] bridge0: port 3(batadv0) entered disabled state [ 1152.455098][T16554] bridge_slave_0: left promiscuous mode [ 1152.467937][T16554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.491988][T16554] bridge_slave_1: left promiscuous mode [ 1152.515722][T16554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.555918][T16554] bond0: (slave bond_slave_0): Releasing backup interface [ 1152.596787][T16554] bond0: (slave bond_slave_1): Releasing backup interface [ 1152.630022][T16554] team0: Port device team_slave_0 removed [ 1152.651445][T16554] team0: Port device team_slave_1 removed [ 1152.678694][T16554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1152.710408][T16554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1152.745809][T16554] geneve0: left allmulticast mode [ 1152.768812][T16554] team0: Port device geneve0 removed [ 1152.784637][T16554] bond0: (slave netdevsim0): Releasing backup interface [ 1152.798987][T16554] bond0: (slave wlan1): Releasing backup interface [ 1152.811302][T16554] bond1: (slave gretap1): Releasing backup interface [ 1152.820760][T16554] bond2: left promiscuous mode [ 1152.826366][T16554] bridge0: port 4(bond2) entered disabled state [ 1152.862586][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.869753][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.876904][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.886314][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.893648][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.902860][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.910977][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.918331][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.925528][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.932693][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.950329][T15030] usb 4-1: USB disconnect, device number 42 [ 1152.956390][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1153.007091][T16560] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2371'. [ 1153.031206][T15030] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1153.136499][T15018] usb 3-1: USB disconnect, device number 26 [ 1153.170966][T16548] ALSA: mixer_oss: invalid OSS volume '' [ 1153.933947][T16584] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2378'. [ 1153.943114][T16584] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2378'. [ 1154.690010][ T120] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1154.964263][ T120] usb 2-1: config 0 has no interfaces? [ 1154.981610][ T120] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1154.996987][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.016169][ T120] usb 2-1: Product: syz [ 1155.027747][ T120] usb 2-1: Manufacturer: syz [ 1155.037634][ T120] usb 2-1: SerialNumber: syz [ 1155.063950][ T120] usb 2-1: config 0 descriptor?? [ 1155.123084][T15018] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1155.725340][T15018] usb 4-1: config 0 has no interfaces? [ 1155.797480][T15018] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1155.846639][T15018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.871572][T11669] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1155.891996][T15018] usb 4-1: Product: syz [ 1155.930242][T15018] usb 4-1: Manufacturer: syz [ 1155.949346][T15018] usb 4-1: SerialNumber: syz [ 1155.970243][T15018] usb 4-1: config 0 descriptor?? [ 1156.017156][T16609] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2384'. [ 1156.026523][T16609] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2384'. [ 1156.205163][T11669] usb 3-1: Using ep0 maxpacket: 16 [ 1156.245145][T11669] usb 3-1: config index 0 descriptor too short (expected 292, got 36) [ 1156.253590][T11669] usb 3-1: config 0 has too many interfaces: 106, using maximum allowed: 32 [ 1156.262255][T11669] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.313985][T11669] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 106 [ 1156.328724][T11669] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1156.344928][T11669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.648483][T11669] usb 3-1: config 0 descriptor?? [ 1157.180228][T16611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2385'. [ 1157.246598][ T120] usb 2-1: USB disconnect, device number 25 [ 1157.714413][T16626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.723305][T16626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.764702][ T120] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1158.003116][ T120] usb 2-1: Using ep0 maxpacket: 8 [ 1158.011807][ T120] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1158.021371][ T120] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1158.035845][ T120] usb 2-1: Product: syz [ 1158.046120][ T120] usb 2-1: Manufacturer: syz [ 1158.059278][ T120] usb 2-1: SerialNumber: syz [ 1158.082905][ T120] usb 2-1: config 0 descriptor?? [ 1158.279609][T11669] usb 3-1: USB disconnect, device number 27 [ 1158.403280][T16634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1158.418327][T16634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1158.775187][T11669] usb 4-1: USB disconnect, device number 43 [ 1160.197041][T16647] input: syz0 as /devices/virtual/input/input51 [ 1160.290089][T16647] hub 9-0:1.0: USB hub found [ 1160.303131][T16647] hub 9-0:1.0: 1 port detected [ 1160.575881][T11669] usb 2-1: USB disconnect, device number 26 [ 1161.197491][T16663] pimreg3: entered allmulticast mode [ 1162.625016][ T120] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1162.903650][ T120] usb 4-1: Using ep0 maxpacket: 16 [ 1162.986500][ T120] usb 4-1: config index 0 descriptor too short (expected 292, got 36) [ 1163.001579][ T120] usb 4-1: config 0 has too many interfaces: 106, using maximum allowed: 32 [ 1163.160181][ T120] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.210831][ T120] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 106 [ 1163.233062][T11669] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1163.277975][ T120] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1163.360530][ T120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.393278][T16689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2404'. [ 1163.409706][T11669] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1163.419005][T11669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.433145][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2404'. [ 1163.449352][T11669] usb 3-1: config 0 descriptor?? [ 1163.467610][T11669] pcwd_usb: This driver only supports 1 device [ 1163.494127][ T120] usb 4-1: config 0 descriptor?? [ 1163.511087][T16689] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1163.530745][T16689] bridge0: port 1(netdevsim0) entered disabled state [ 1163.781714][T16693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.794527][T16693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.862699][T16695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.872546][T16695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.341582][T11669] usb 4-1: USB disconnect, device number 44 [ 1165.963385][T16714] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2408'. [ 1166.171023][T15030] usb 3-1: USB disconnect, device number 28 [ 1166.207142][T16719] bridge0: port 1(netdevsim0) entered blocking state [ 1166.241343][T16719] bridge0: port 1(netdevsim0) entered disabled state [ 1166.253584][ T120] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1166.490527][T16719] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1166.499961][T16719] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1166.643135][ T120] usb 2-1: Using ep0 maxpacket: 8 [ 1166.682286][ T120] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.718339][ T120] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1166.807824][ T120] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1166.838343][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.869480][ T120] usb 2-1: Product: syz [ 1166.921955][ T120] usb 2-1: Manufacturer: syz [ 1166.950672][ T120] usb 2-1: SerialNumber: syz [ 1166.997944][ T120] usb 2-1: config 0 descriptor?? [ 1167.014967][T15030] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1167.401200][T15030] usb 3-1: config 0 has no interfaces? [ 1167.631791][T16739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2416'. [ 1167.642903][T16739] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2416'. [ 1168.289580][T15030] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1168.298871][T15030] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.336251][T15030] usb 3-1: Product: syz [ 1168.340460][T15030] usb 3-1: Manufacturer: syz [ 1168.375830][T15030] usb 3-1: SerialNumber: syz [ 1168.399650][T15030] usb 3-1: config 0 descriptor?? [ 1168.612089][T16750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.621103][T16750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.693808][T16727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.705305][T16727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.039702][T15030] usb 2-1: USB disconnect, device number 27 [ 1170.073298][T15038] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1170.158781][T15030] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1170.273250][T15038] usb 4-1: Using ep0 maxpacket: 16 [ 1170.296428][T11669] usb 3-1: USB disconnect, device number 29 [ 1170.373516][T15030] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1170.386760][T15030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.508148][T15030] usb 2-1: config 0 descriptor?? [ 1170.553874][T15030] pcwd_usb: This driver only supports 1 device [ 1171.863074][T11669] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1172.013078][T11669] usb 3-1: Using ep0 maxpacket: 8 [ 1172.022343][T11669] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1172.031939][T11669] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1172.191359][T11669] usb 3-1: Product: syz [ 1172.196150][T11669] usb 3-1: Manufacturer: syz [ 1172.201974][T11669] usb 3-1: SerialNumber: syz [ 1172.217795][T11669] usb 3-1: config 0 descriptor?? [ 1172.433139][T15038] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1172.458840][T15038] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1172.573738][T16782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.586609][T16780] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2427'. [ 1172.643513][T16782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.117969][T16784] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1173.209710][T15038] usb 4-1: can't read configurations, error -71 [ 1173.216913][T15030] usb 2-1: USB disconnect, device number 28 [ 1173.663547][T16798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.675837][T16798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.263052][T15038] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1174.299913][T16810] sch_tbf: burst 8787 is lower than device lo mtu (65550) ! [ 1174.452993][T15038] usb 4-1: Using ep0 maxpacket: 8 [ 1174.460081][T15038] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.718893][T15038] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1174.788489][T15038] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1174.797704][T15038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.811921][T15038] usb 4-1: Product: syz [ 1174.826172][ T9225] usb 3-1: USB disconnect, device number 30 [ 1174.838120][T15038] usb 4-1: Manufacturer: syz [ 1174.846280][T15038] usb 4-1: SerialNumber: syz [ 1174.888497][T15038] usb 4-1: config 0 descriptor?? [ 1177.046418][T15036] usb 4-1: USB disconnect, device number 46 [ 1177.297513][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.304104][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.317233][T16841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2438'. [ 1177.356584][T16841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2438'. [ 1177.480077][T16843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'. [ 1178.041655][T16850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.055320][T16850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.068999][T16850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.094251][T16850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.428293][T16850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.428601][T16850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.843242][T15036] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1179.453080][T16874] loop2: detected capacity change from 0 to 7 [ 1179.469684][T16874] Dev loop2: unable to read RDB block 7 [ 1179.475761][T16874] loop2: AHDI p2 [ 1179.480904][T16874] loop2: partition table partially beyond EOD, truncated [ 1179.501236][T15036] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1179.518384][T15036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.814051][T15036] usb 4-1: config 0 descriptor?? [ 1179.816220][ T5202] Dev loop2: unable to read RDB block 7 [ 1179.867171][T15036] pcwd_usb: This driver only supports 1 device [ 1179.873013][ T5202] loop2: AHDI p2 [ 1179.881641][ T5202] loop2: partition table partially beyond EOD, truncated [ 1179.995548][T16876] netlink: 'syz.2.2444': attribute type 10 has an invalid length. [ 1180.196041][T16876] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2444'. [ 1180.247772][T16876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.257638][T16876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.277879][T16876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.298126][T16876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.452208][T16876] geneve0: entered promiscuous mode [ 1180.461904][T16876] team0: Port device geneve0 added [ 1181.415342][T15038] usb 4-1: USB disconnect, device number 47 [ 1181.429489][T16896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.429811][T16896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.918656][T15038] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1182.097023][T15038] usb 4-1: Using ep0 maxpacket: 8 [ 1182.124783][T15038] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1182.135988][T15038] usb 4-1: config 0 has no interface number 0 [ 1182.142094][T15038] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1182.383089][T15036] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1182.500702][T15038] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1182.567317][T15036] usb 2-1: config 0 has no interfaces? [ 1182.618380][T15036] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1182.653221][T15036] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.659018][T15038] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1182.767692][T15036] usb 2-1: Product: syz [ 1182.823206][T15036] usb 2-1: Manufacturer: syz [ 1182.828074][T15036] usb 2-1: SerialNumber: syz [ 1182.843944][T15036] usb 2-1: config 0 descriptor?? [ 1183.073113][T15038] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1183.555490][T15038] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.583857][T15038] usb 4-1: config 0 descriptor?? [ 1183.595732][T15038] ldusb 4-1:0.55: Interrupt in endpoint not found [ 1183.807923][T16907] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2452'. [ 1183.853775][T15030] usb 4-1: USB disconnect, device number 48 [ 1184.587824][T15036] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1184.770804][T16923] usb usb7: usbfs: process 16923 (syz.0.2454) did not claim interface 0 before use [ 1184.957181][T11669] usb 2-1: USB disconnect, device number 29 [ 1185.117310][T15036] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1185.213480][T15018] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1185.245234][T15036] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 1185.269573][T15036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.301837][T15036] usb 3-1: Product: syz [ 1185.317755][T15036] usb 3-1: Manufacturer: syz [ 1185.333412][T15036] usb 3-1: SerialNumber: syz [ 1185.539461][T15018] usb 4-1: Using ep0 maxpacket: 16 [ 1185.604281][T15036] usb 3-1: config 0 descriptor?? [ 1185.636563][T15018] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1185.647185][T15018] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1185.694566][T15036] dvb-usb: found a 'DTV-DVB UDTT7049' in warm state. [ 1185.717460][T15036] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1185.756604][T15036] dvbdev: DVB: registering new adapter (DTV-DVB UDTT7049) [ 1185.874375][T15036] usb 3-1: media controller created [ 1185.915295][T16938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2459'. [ 1186.040740][T16938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2459'. [ 1186.040827][T16938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2459'. [ 1186.213809][T15018] usb 4-1: string descriptor 0 read error: -22 [ 1186.226305][T15018] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1186.251690][T15018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.448500][T15036] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1186.533119][T11669] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1187.064786][T11669] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1187.141838][T11669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.157730][T11669] usb 2-1: config 0 descriptor?? [ 1187.259923][T11669] pcwd_usb: This driver only supports 1 device [ 1187.391799][T15036] dvb-usb: no frontend was attached by 'DTV-DVB UDTT7049' [ 1187.533170][T15036] rc_core: IR keymap rc-twinhan1027 not found [ 1187.561595][T15036] Registered IR keymap rc-empty [ 1187.574653][T15036] rc rc0: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1187.612725][T15036] input: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input52 [ 1187.694262][T16953] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1187.760703][T15036] dvb-usb: schedule remote query interval to 150 msecs. [ 1187.782278][T15036] dvb-usb: DTV-DVB UDTT7049 successfully initialized and connected. [ 1187.790609][T16953] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1187.809736][T15036] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1187.826835][T16953] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1187.836329][T16953] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1187.850008][T15036] usb 3-1: USB disconnect, device number 31 [ 1187.943675][T11669] m920x_read = error: -19 [ 1187.949627][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1188.125162][T15036] m920x_read = error: -19 [ 1188.130782][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1188.293442][T15036] m920x_read = error: -19 [ 1188.297853][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1188.540930][T11669] m920x_read = error: -19 [ 1188.548749][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1188.600331][T11669] usb 4-1: USB disconnect, device number 49 [ 1188.713149][T15036] m920x_read = error: -19 [ 1188.717875][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1188.883458][T15036] m920x_read = error: -19 [ 1188.887845][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1189.037159][T15036] usb 2-1: USB disconnect, device number 30 [ 1189.103083][T11669] m920x_read = error: -19 [ 1189.107479][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1189.323557][T11669] m920x_read = error: -19 [ 1189.327951][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1189.533330][T11669] m920x_read = error: -19 [ 1189.541248][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1189.763600][T11669] m920x_read = error: -19 [ 1189.788292][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1190.085966][T15036] m920x_read = error: -19 [ 1190.325126][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1190.457584][ T30] audit: type=1800 audit(1746045446.036:1600): pid=16988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2467" name="SYSV798dd824" dev="tmpfs" ino=0 res=0 errno=0 [ 1190.492796][T16989] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2466'. [ 1190.523119][T16989] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2466'. [ 1190.619585][T15036] m920x_read = error: -19 [ 1190.631697][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1191.034329][T15036] m920x_read = error: -19 [ 1191.042830][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1191.228782][T15036] m920x_read = error: -19 [ 1191.432032][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1191.593941][T17000] usb usb7: usbfs: process 17000 (syz.2.2468) did not claim interface 0 before use [ 1191.649289][T15036] m920x_read = error: -19 [ 1191.655850][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1191.843163][T15036] m920x_read = error: -19 [ 1191.897502][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1192.193288][T15036] m920x_read = error: -19 [ 1192.197647][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1192.265114][T11669] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1192.383280][T15036] m920x_read = error: -19 [ 1192.387777][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1192.544053][T11669] usb 2-1: Using ep0 maxpacket: 8 [ 1192.556256][T11669] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1192.604132][T11669] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1192.760519][T11669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.773431][T15036] m920x_read = error: -19 [ 1192.777810][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1192.799421][T11669] usb 2-1: Product: syz [ 1192.864917][T11669] usb 2-1: Manufacturer: syz [ 1192.894102][T15018] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1192.918814][T17012] loop2: detected capacity change from 0 to 7 [ 1192.940976][T17012] Dev loop2: unable to read RDB block 7 [ 1192.948724][T11669] usb 2-1: SerialNumber: syz [ 1192.965922][T11669] usb 2-1: config 0 descriptor?? [ 1192.978583][T17012] loop2: unable to read partition table [ 1193.011759][T17012] loop2: partition table beyond EOD, truncated [ 1193.027139][T11669] m920x_read = error: -19 [ 1193.237205][T17012] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1193.300887][T15018] usb 3-1: config 0 has no interfaces? [ 1193.311109][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1193.334215][T17016] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2473'. [ 1193.353549][T17016] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2473'. [ 1193.365004][T15018] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1193.380502][T15018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.390060][T15018] usb 3-1: Product: syz [ 1193.425652][T15018] usb 3-1: Manufacturer: syz [ 1193.438998][T15018] usb 3-1: SerialNumber: syz [ 1193.465156][T15018] usb 3-1: config 0 descriptor?? [ 1193.503092][T15018] m920x_read = error: -19 [ 1193.523315][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1193.703413][T15018] m920x_read = error: -19 [ 1193.708236][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1194.020982][T15018] m920x_read = error: -19 [ 1194.025794][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1194.303229][T17026] netlink: 'syz.0.2475': attribute type 10 has an invalid length. [ 1194.312075][T17026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2475'. [ 1194.325126][T17026] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.336093][T17026] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.345925][T17026] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.357308][T17026] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.373578][T11669] m920x_read = error: -19 [ 1194.378094][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1194.500028][T11669] usb 2-1: USB disconnect, device number 31 [ 1194.543349][T15036] m920x_read = error: -19 [ 1194.547734][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1194.788720][T11669] m920x_read = error: -19 [ 1194.795555][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1194.903527][T17026] geneve0: entered promiscuous mode [ 1194.909780][T17026] team0: Port device geneve0 added [ 1195.044184][T11669] m920x_read = error: -19 [ 1195.048594][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1195.326876][T11669] m920x_read = error: -19 [ 1195.337986][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1195.454586][T11669] usb 3-1: USB disconnect, device number 32 [ 1195.547745][T15036] m920x_read = error: -19 [ 1195.622206][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1195.803516][T15036] m920x_read = error: -19 [ 1195.808052][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1195.963056][T11669] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1195.983410][T15036] m920x_read = error: -19 [ 1195.987849][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1196.123078][T11669] usb 3-1: device descriptor read/64, error -71 [ 1196.213096][T15036] m920x_read = error: -19 [ 1196.217904][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1196.403975][T15018] m920x_read = error: -19 [ 1196.408391][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1196.418438][T11669] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1196.644170][T15018] m920x_read = error: -19 [ 1196.648564][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1196.783055][T15036] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1196.790804][T11669] usb 3-1: device descriptor read/64, error -71 [ 1196.833504][T15018] m920x_read = error: -19 [ 1196.837950][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1196.913318][T11669] usb usb3-port1: attempt power cycle [ 1196.963178][T15036] usb 2-1: Using ep0 maxpacket: 16 [ 1197.130441][T15018] m920x_read = error: -19 [ 1197.135064][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1197.303170][T15018] m920x_read = error: -19 [ 1197.307588][T11669] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1197.319103][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1197.356799][T11669] usb 3-1: device descriptor read/8, error -71 [ 1197.517632][T15018] m920x_read = error: -19 [ 1197.522093][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1197.633344][T11669] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1197.677032][T11669] usb 3-1: device descriptor read/8, error -71 [ 1197.714841][T15018] m920x_read = error: -19 [ 1197.720784][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1197.823927][T11669] usb usb3-port1: unable to enumerate USB device [ 1197.903175][T11669] m920x_read = error: -19 [ 1197.924427][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1198.163212][T11669] m920x_read = error: -19 [ 1198.167723][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1198.363390][T11669] m920x_read = error: -19 [ 1198.367743][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1198.457292][T17074] input: syz0 as /devices/virtual/input/input53 [ 1198.512838][T17074] hub 9-0:1.0: USB hub found [ 1198.573528][T11669] m920x_read = error: -19 [ 1198.577981][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1198.616546][T17075] --map-set only usable from mangle table [ 1198.647410][T17074] hub 9-0:1.0: 1 port detected [ 1198.895324][T11669] m920x_read = error: -19 [ 1198.899713][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1199.083486][T11669] m920x_read = error: -19 [ 1199.088087][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1199.283167][T11669] m920x_read = error: -19 [ 1199.287620][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1199.303328][T17081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2486'. [ 1199.312411][T17081] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2486'. [ 1199.463740][T15036] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1199.503904][T15036] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1199.545181][T15036] usb 2-1: can't read configurations, error -71 [ 1199.599338][T11669] m920x_read = error: -19 [ 1199.607433][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1199.835743][T11669] m920x_read = error: -19 [ 1199.840268][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1200.095015][T15036] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1200.203334][T11669] m920x_read = error: -19 [ 1200.207783][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1200.398096][T15036] usb 2-1: Using ep0 maxpacket: 8 [ 1200.440346][T15036] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1200.468554][T15036] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1200.602497][T15036] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.661117][T15036] usb 2-1: Product: syz [ 1200.666348][T11669] m920x_read = error: -19 [ 1200.670721][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1200.699130][T15036] usb 2-1: Manufacturer: syz [ 1200.711911][T15036] usb 2-1: SerialNumber: syz [ 1201.003372][T11669] m920x_read = error: -19 [ 1201.007780][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1201.064211][T15036] usb 2-1: config 0 descriptor?? [ 1201.233140][T15036] m920x_read = error: -19 [ 1201.237651][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1201.403851][T11669] m920x_read = error: -19 [ 1201.408313][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1201.553309][T15036] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1201.605433][T11669] m920x_read = error: -19 [ 1201.610004][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1201.683216][T15036] usb 4-1: device descriptor read/64, error -71 [ 1201.817729][T11669] m920x_read = error: -19 [ 1201.827143][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1201.963158][T15036] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1201.993398][T11669] m920x_read = error: -19 [ 1201.997790][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1202.152126][T15036] usb 4-1: device descriptor read/64, error -71 [ 1202.164913][T15018] m920x_read = error: -19 [ 1202.169316][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1202.282200][T15036] usb usb4-port1: attempt power cycle [ 1202.343266][T15018] m920x_read = error: -19 [ 1202.347643][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1202.530289][T15018] m920x_read = error: -19 [ 1202.536253][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1202.569614][T15038] usb 2-1: USB disconnect, device number 33 [ 1202.693125][T17133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.702291][T17133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.730169][T15018] m920x_read = error: -19 [ 1202.734816][T15036] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1202.742462][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1202.782750][T15036] usb 4-1: device descriptor read/8, error -71 [ 1202.783164][ T9225] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1202.933614][T15018] m920x_read = error: -19 [ 1202.938087][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1203.023277][T15036] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1203.053630][T15036] usb 4-1: device descriptor read/8, error -71 [ 1203.103303][T15018] m920x_read = error: -19 [ 1203.110905][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1203.167339][T15036] usb usb4-port1: unable to enumerate USB device [ 1203.223023][ T9225] usb 3-1: Using ep0 maxpacket: 16 [ 1203.303473][T15036] m920x_read = error: -19 [ 1203.307864][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1203.783364][T15036] m920x_read = error: -19 [ 1203.788271][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1204.012034][T15036] m920x_read = error: -19 [ 1204.020072][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1204.160606][T17153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2504'. [ 1204.257374][T15036] m920x_read = error: -19 [ 1204.261827][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1204.513075][T15036] m920x_read = error: -19 [ 1204.519497][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1204.715962][T15036] m920x_read = error: -19 [ 1204.750655][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1204.789020][T17158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2505'. [ 1204.798325][T17158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2505'. [ 1204.821638][T17158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2505'. [ 1204.963322][T15036] m920x_read = error: -19 [ 1204.968986][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1205.155490][T15036] m920x_read = error: -19 [ 1205.165444][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1205.589762][ T9225] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1205.600012][ T9225] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1205.613476][ T9225] usb 3-1: can't read configurations, error -71 [ 1205.783040][T15036] m920x_read = error: -19 [ 1205.853695][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1206.013317][T15036] m920x_read = error: -19 [ 1206.017675][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1206.223165][T15036] m920x_read = error: -19 [ 1206.228748][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1206.443134][T15036] m920x_read = error: -19 [ 1206.447640][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1207.000695][T15036] m920x_read = error: -19 [ 1207.190848][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1207.343493][T17182] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2509'. [ 1207.353930][T17182] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2509'. [ 1207.363219][T11669] m920x_read = error: -19 [ 1207.367684][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1207.533395][T11669] m920x_read = error: -19 [ 1207.537878][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1207.915019][T17184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2507'. [ 1208.022225][T17186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.031126][T17186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.093198][T11669] m920x_read = error: -19 [ 1208.097584][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1208.145369][T17187] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2512'. [ 1208.263306][T11669] m920x_read = error: -19 [ 1208.267854][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1208.433734][T11669] m920x_read = error: -19 [ 1208.439790][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1208.543294][T17189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2511'. [ 1208.688862][T11669] m920x_read = error: -19 [ 1208.708547][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1208.883598][T11669] m920x_read = error: -19 [ 1208.887977][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1208.994807][T17200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2516'. [ 1209.053341][T11669] m920x_read = error: -19 [ 1209.063217][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1209.223238][T11669] m920x_read = error: -19 [ 1209.227673][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1209.393318][T11669] m920x_read = error: -19 [ 1209.397917][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1209.602098][T11669] m920x_read = error: -19 [ 1209.635688][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1209.833120][T15036] m920x_read = error: -19 [ 1209.837553][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1210.003364][T15036] m920x_read = error: -19 [ 1210.007870][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1210.173057][T15036] m920x_read = error: -19 [ 1210.177418][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1210.343096][T15036] m920x_read = error: -19 [ 1210.347458][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1210.513638][T15036] m920x_read = error: -19 [ 1210.518541][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1210.718562][T15036] m920x_read = error: -19 [ 1210.733642][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1211.175330][T11669] m920x_read = error: -19 [ 1211.179721][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1211.256145][T15036] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1211.492277][T11669] m920x_read = error: -19 [ 1211.498304][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1211.529766][T15036] usb 3-1: config 0 has no interfaces? [ 1211.538315][T15036] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1211.551713][T15036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.569964][T15036] usb 3-1: Product: syz [ 1211.577395][T15036] usb 3-1: Manufacturer: syz [ 1211.582076][T15036] usb 3-1: SerialNumber: syz [ 1211.643875][T15036] usb 3-1: config 0 descriptor?? [ 1211.663082][T15036] m920x_read = error: -19 [ 1211.667492][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1211.701575][T17231] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1211.953264][T15036] m920x_read = error: -19 [ 1211.957629][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1212.303185][T15036] m920x_read = error: -19 [ 1212.307584][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1212.503391][T15036] m920x_read = error: -19 [ 1212.527051][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1212.877740][T15036] m920x_read = error: -19 [ 1212.967369][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1213.003889][T17218] team0: Device gtp1 is of different type [ 1213.203092][T15036] m920x_read = error: -19 [ 1213.218842][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1213.393550][T15036] m920x_read = error: -19 [ 1213.398092][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1213.563272][T15036] m920x_read = error: -19 [ 1213.572797][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1213.719272][T17257] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2525'. [ 1213.728472][T17257] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2525'. [ 1213.796104][T15036] m920x_read = error: -19 [ 1213.807403][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1214.158040][T15036] m920x_read = error: -19 [ 1214.163152][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1214.179926][T17264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2529'. [ 1214.423525][T15036] m920x_read = error: -19 [ 1214.423572][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1214.555660][ T9225] usb 3-1: USB disconnect, device number 39 [ 1214.590981][T15036] m920x_read = error: -19 [ 1214.591008][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1214.803436][T11669] m920x_read = error: -19 [ 1214.807852][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1214.983901][T15018] m920x_read = error: -19 [ 1214.991147][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1215.153542][T11669] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1215.244647][T15018] m920x_read = error: -19 [ 1215.249046][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1215.518313][T15018] m920x_read = error: -19 [ 1215.522713][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1215.683180][T15018] m920x_read = error: -19 [ 1215.687582][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1215.763173][T11669] usb 4-1: Using ep0 maxpacket: 8 [ 1215.880721][T11669] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1215.889943][T11669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.900102][T11669] usb 4-1: Product: syz [ 1215.908424][T11669] usb 4-1: Manufacturer: syz [ 1215.913393][T11669] usb 4-1: SerialNumber: syz [ 1216.173336][T15018] m920x_read = error: -19 [ 1216.185830][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1216.351526][T11669] usb 4-1: config 0 descriptor?? [ 1216.523227][T15018] m920x_read = error: -19 [ 1216.527706][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1216.684097][T17286] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1216.744182][T15036] m920x_read = error: -19 [ 1216.753315][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1216.913320][T11669] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1216.933217][T15036] m920x_read = error: -19 [ 1216.937641][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1217.203209][T11669] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1217.334187][T11669] m920x_read = error: -19 [ 1217.338589][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1217.373882][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2546'. [ 1217.427922][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2546'. [ 1217.450619][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2546'. [ 1217.563440][T11669] m920x_read = error: -19 [ 1217.567905][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1217.733145][T11669] m920x_read = error: -19 [ 1217.737562][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1218.033350][T11669] m920x_read = error: -19 [ 1218.037746][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1218.203349][T15018] m920x_read = error: -19 [ 1218.207923][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1218.246145][ T9225] usb 4-1: USB disconnect, device number 54 [ 1218.343294][T11669] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1218.383331][T15018] m920x_read = error: -19 [ 1218.387693][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1218.506051][T11669] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.516909][T11669] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1218.533014][T11669] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1218.553147][T15018] m920x_read = error: -19 [ 1218.573596][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1218.604797][T11669] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1218.623103][T11669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.641393][T11669] usb 3-1: Product: syz [ 1218.651523][T11669] usb 3-1: Manufacturer: syz [ 1218.661658][T11669] usb 3-1: SerialNumber: syz [ 1218.722922][ T30] audit: type=1326 audit(1746045474.296:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1218.743109][T15018] m920x_read = error: -19 [ 1218.750612][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1218.781721][T17324] warning: `syz.3.2542' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1218.873019][ T30] audit: type=1326 audit(1746045474.296:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1218.913826][T15018] m920x_read = error: -19 [ 1218.918190][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1219.022108][ T30] audit: type=1326 audit(1746045474.346:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1219.083238][T15018] m920x_read = error: -19 [ 1219.087691][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1219.263403][ T30] audit: type=1326 audit(1746045474.346:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1219.293143][T15018] m920x_read = error: -19 [ 1219.297555][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1219.433626][ T30] audit: type=1326 audit(1746045474.346:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1219.533650][T15018] m920x_read = error: -19 [ 1219.543368][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1219.637892][ T30] audit: type=1326 audit(1746045474.346:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1219.660584][ T30] audit: type=1326 audit(1746045474.346:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1219.683213][ T30] audit: type=1326 audit(1746045474.346:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1219.741060][T15018] m920x_read = error: -19 [ 1219.746568][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1219.746568][ T30] audit: type=1326 audit(1746045474.346:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1219.777356][ T30] audit: type=1326 audit(1746045474.346:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1219.903348][T15018] m920x_read = error: -19 [ 1219.907725][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1220.075794][T15018] m920x_read = error: -19 [ 1220.082241][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1220.313116][T15018] m920x_read = error: -19 [ 1220.317513][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1220.583146][T15018] m920x_read = error: -19 [ 1220.594779][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1220.663229][T15036] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1220.773651][T15018] m920x_read = error: -19 [ 1220.779764][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1221.186677][T15018] m920x_read = error: -19 [ 1221.202432][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1221.317731][T15036] usb 4-1: config 0 has no interfaces? [ 1221.328494][T15036] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1221.338100][T15036] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.346973][T15036] usb 4-1: Product: syz [ 1221.358766][T15036] usb 4-1: Manufacturer: syz [ 1221.366967][T15036] usb 4-1: SerialNumber: syz [ 1221.383159][T15018] m920x_read = error: -19 [ 1221.387596][T15018] dvb-usb: error -19 while querying for an remote control event. [ 1221.395959][T15036] usb 4-1: config 0 descriptor?? [ 1221.563529][T15036] m920x_read = error: -19 [ 1221.574369][T11669] usb 3-1: USB disconnect, device number 40 [ 1221.593154][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1221.624025][T17348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.638040][T17348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.759279][T15036] m920x_read = error: -19 [ 1221.764241][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1221.954563][T15036] m920x_read = error: -19 [ 1221.969070][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1222.213679][T17359] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1222.226376][T15036] m920x_read = error: -19 [ 1222.230700][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1222.373215][T15038] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1222.425063][T15036] m920x_read = error: -19 [ 1222.433208][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1222.613401][T15036] m920x_read = error: -19 [ 1222.628235][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1222.870919][T15036] m920x_read = error: -19 [ 1222.875496][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1222.923023][T15038] usb 2-1: Using ep0 maxpacket: 16 [ 1222.973718][T15038] usb 2-1: config index 0 descriptor too short (expected 292, got 36) [ 1222.981937][T15038] usb 2-1: config 0 has too many interfaces: 106, using maximum allowed: 32 [ 1223.030402][T15038] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.043114][T11669] m920x_read = error: -19 [ 1223.048790][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1223.162033][T15038] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 106 [ 1223.171338][T15038] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1223.180647][T15038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.207543][T15038] usb 2-1: config 0 descriptor?? [ 1223.383405][T11669] m920x_read = error: -19 [ 1223.507913][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1223.703206][T11669] m920x_read = error: -19 [ 1223.783204][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1224.003253][T15036] m920x_read = error: -19 [ 1224.007749][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1224.343491][T11669] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1224.376495][T15043] usb 4-1: USB disconnect, device number 55 [ 1224.495174][T17386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1224.523564][T11669] usb 3-1: Using ep0 maxpacket: 16 [ 1224.712772][T15043] m920x_read = error: -19 [ 1224.718550][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1224.729283][T11669] usb 3-1: config index 0 descriptor too short (expected 69, got 36) [ 1224.741154][T11669] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.769244][T11669] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 1224.779659][T11669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.792105][T11669] usb 3-1: Product: syz [ 1224.802655][T11669] usb 3-1: Manufacturer: syz [ 1224.923375][T15043] m920x_read = error: -19 [ 1224.927744][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1224.971779][T17386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.016619][T11669] usb 3-1: SerialNumber: syz [ 1225.115564][T11669] usb 3-1: config 0 descriptor?? [ 1225.136872][T11669] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1225.158555][T15043] usb 2-1: USB disconnect, device number 34 [ 1225.165666][T15036] m920x_read = error: -19 [ 1225.170253][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1225.347152][T15036] m920x_read = error: -19 [ 1225.351644][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1225.533400][T15043] m920x_read = error: -19 [ 1225.583340][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1225.817857][T15036] m920x_read = error: -19 [ 1225.860748][T15036] dvb-usb: error -19 while querying for an remote control event. [ 1225.878559][T11669] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 1225.971197][T11669] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1226.013441][T15043] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1226.123213][T11669] m920x_read = error: -19 [ 1226.127842][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1226.187294][T15043] usb 2-1: config 0 has no interfaces? [ 1226.221054][T15043] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1226.230323][T15043] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.290953][T15043] usb 2-1: Product: syz [ 1226.299031][T15043] usb 2-1: Manufacturer: syz [ 1226.309266][T15043] usb 2-1: SerialNumber: syz [ 1226.485775][T11669] m920x_read = error: -19 [ 1226.490163][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1226.607928][T15043] usb 2-1: config 0 descriptor?? [ 1226.773213][T15043] m920x_read = error: -19 [ 1226.777742][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1226.943170][T15043] m920x_read = error: -19 [ 1226.947568][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1227.051270][T17404] syzkaller1: entered promiscuous mode [ 1227.060680][T17404] syzkaller1: entered allmulticast mode [ 1227.124873][T15043] m920x_read = error: -19 [ 1227.132343][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1227.223072][T15030] usb 3-1: USB disconnect, device number 41 [ 1227.450110][T15043] m920x_read = error: -19 [ 1227.482860][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1227.653722][T11669] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1227.693476][ T5893] m920x_read = error: -19 [ 1227.698163][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1227.819932][T11669] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1227.851166][T11669] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1227.873266][T15043] m920x_read = error: -19 [ 1227.880932][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1227.963182][T11669] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1227.972605][T11669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.027562][T17408] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1228.140252][T15043] m920x_read = error: -19 [ 1228.149398][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1228.179467][T11669] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1228.333741][T11669] m920x_read = error: -19 [ 1228.338272][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1228.347691][T17417] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2562'. [ 1228.364245][T17417] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2562'. [ 1228.543882][T11669] m920x_read = error: -19 [ 1228.548440][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1228.713465][T11669] m920x_read = error: -19 [ 1228.717956][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1228.950007][T15043] m920x_read = error: -19 [ 1228.955028][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1229.119745][T15043] m920x_read = error: -19 [ 1229.150560][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1229.363197][T15043] m920x_read = error: -19 [ 1229.403153][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1229.567941][T15043] m920x_read = error: -19 [ 1229.572382][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1229.803560][T15043] m920x_read = error: -19 [ 1229.807953][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1229.881006][T15043] usb 2-1: USB disconnect, device number 35 [ 1229.973390][T11669] m920x_read = error: -19 [ 1229.977821][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1230.153411][T11669] m920x_read = error: -19 [ 1230.157800][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1230.233726][T15043] usb 4-1: USB disconnect, device number 56 [ 1230.641824][T15043] m920x_read = error: -19 [ 1230.671806][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1230.801788][T17436] ptrace attach of "./syz-executor exec"[17438] was attempted by "./syz-executor exec"[17436] [ 1230.843276][T15043] m920x_read = error: -19 [ 1230.851500][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1231.033456][T11669] m920x_read = error: -19 [ 1231.041734][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1231.213458][T11669] m920x_read = error: -19 [ 1231.217815][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1231.283164][T15043] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1231.424670][T11669] m920x_read = error: -19 [ 1231.430540][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1231.553222][T15043] usb 3-1: Using ep0 maxpacket: 16 [ 1231.567103][T15043] usb 3-1: config index 0 descriptor too short (expected 292, got 36) [ 1231.577282][T15043] usb 3-1: config 0 has too many interfaces: 106, using maximum allowed: 32 [ 1231.593196][ T5893] m920x_read = error: -19 [ 1231.597651][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1231.629947][T15043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.640710][T15043] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 106 [ 1231.650237][T15043] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1231.660844][T15043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.694935][T15043] usb 3-1: config 0 descriptor?? [ 1231.783419][T15043] m920x_read = error: -19 [ 1231.787954][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1231.983534][T15043] m920x_read = error: -19 [ 1231.988168][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1232.191200][ T5893] m920x_read = error: -19 [ 1232.195805][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1232.463095][T15043] m920x_read = error: -19 [ 1232.467661][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1232.889230][T15043] m920x_read = error: -19 [ 1232.893955][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1232.991816][T17463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2569'. [ 1233.063131][T15043] m920x_read = error: -19 [ 1233.067519][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1233.253394][ T5893] m920x_read = error: -19 [ 1233.259862][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1233.433466][ T5893] m920x_read = error: -19 [ 1233.440417][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1233.853642][ T5893] m920x_read = error: -19 [ 1233.858053][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1234.033384][ T5893] m920x_read = error: -19 [ 1234.037769][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1234.079611][T17474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2574'. [ 1234.088934][T17474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2574'. [ 1234.100901][T17474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2574'. [ 1234.289689][ T9225] usb 3-1: USB disconnect, device number 42 [ 1234.315446][ T5893] m920x_read = error: -19 [ 1234.319829][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1234.455875][T17477] --map-set only usable from mangle table [ 1234.750953][ T5893] m920x_read = error: -19 [ 1235.117925][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1235.293114][ T5893] m920x_read = error: -19 [ 1235.297518][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1235.494937][ T5893] m920x_read = error: -19 [ 1235.499309][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1235.555755][T17486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2577'. [ 1235.583123][T17486] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2577'. [ 1235.693320][ T5893] m920x_read = error: -19 [ 1235.697779][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1235.922806][ T5893] m920x_read = error: -19 [ 1235.931646][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1236.080961][T17498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.229783][ T5893] m920x_read = error: -19 [ 1236.253559][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1236.292108][T17498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.300335][ T9225] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1236.522006][T17503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2575'. [ 1236.556983][ T5893] m920x_read = error: -19 [ 1236.563048][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1236.633230][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1236.633247][ T30] audit: type=1326 audit(1746045492.176:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.4.2579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1236.723210][ T5893] m920x_read = error: -19 [ 1236.744180][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1236.895132][ T30] audit: type=1326 audit(1746045492.176:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.4.2579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1236.977166][ T9225] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1236.991267][ T9225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.999572][ T5893] m920x_read = error: -19 [ 1237.006563][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1237.050852][ T30] audit: type=1326 audit(1746045492.176:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.4.2579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1237.072824][ C0] vkms_vblank_simulate: vblank timer overrun [ 1237.098918][ T9225] usb 2-1: config 0 descriptor?? [ 1237.140937][ T9225] pcwd_usb: This driver only supports 1 device [ 1237.173301][ T5893] m920x_read = error: -19 [ 1237.207758][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1237.403068][ T30] audit: type=1326 audit(1746045492.176:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.4.2579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1237.573257][ T5893] m920x_read = error: -19 [ 1237.592134][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1237.730014][T15038] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1237.741222][ T30] audit: type=1326 audit(1746045492.176:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.4.2579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1237.763822][ T5893] m920x_read = error: -19 [ 1237.782736][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1237.804873][ T30] audit: type=1326 audit(1746045492.176:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.4.2579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1238.003297][ T5893] m920x_read = error: -19 [ 1238.007898][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1238.157593][ T30] audit: type=1326 audit(1746045492.176:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.4.2579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1238.187315][T11669] m920x_read = error: -19 [ 1238.197098][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1238.197137][T15038] usb 4-1: config 0 has no interfaces? [ 1238.221886][ T30] audit: type=1326 audit(1746045492.176:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.4.2579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1238.248236][T15038] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1238.259608][T15038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.286798][T15038] usb 4-1: Product: syz [ 1238.300598][T15038] usb 4-1: Manufacturer: syz [ 1238.337097][ T30] audit: type=1326 audit(1746045492.176:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.4.2579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1238.369681][T15038] usb 4-1: SerialNumber: syz [ 1238.373768][T11669] m920x_read = error: -19 [ 1238.382232][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1238.409076][T15038] usb 4-1: config 0 descriptor?? [ 1238.481369][ T30] audit: type=1326 audit(1746045492.176:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.4.2579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1238.664236][ T5893] m920x_read = error: -19 [ 1238.740930][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.748209][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.758292][ T9225] usb 2-1: USB disconnect, device number 36 [ 1238.777711][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1239.163036][T15038] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1239.164658][T11669] m920x_read = error: -19 [ 1239.184998][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1239.453550][ T5893] m920x_read = error: -19 [ 1239.458335][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1239.523158][T15038] usb 3-1: Using ep0 maxpacket: 16 [ 1239.635664][ T5893] m920x_read = error: -19 [ 1239.680998][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1239.815730][T15038] usb 3-1: config index 0 descriptor too short (expected 292, got 36) [ 1239.840280][T15038] usb 3-1: config 0 has too many interfaces: 106, using maximum allowed: 32 [ 1239.903216][ T5893] m920x_read = error: -19 [ 1239.903220][T15038] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.907752][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1239.943423][T15038] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 106 [ 1239.993676][T15038] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1240.023000][T15038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.072047][T15038] usb 3-1: config 0 descriptor?? [ 1240.243192][T11669] m920x_read = error: -19 [ 1240.247721][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1240.422770][T15030] usb 4-1: USB disconnect, device number 57 [ 1240.423108][T11669] m920x_read = error: -19 [ 1240.451324][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1240.573122][ T5893] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1240.574341][T17545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2587'. [ 1240.635469][T11669] m920x_read = error: -19 [ 1240.639951][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1240.827718][T11669] m920x_read = error: -19 [ 1240.832256][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1240.851963][ T5893] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1240.864615][ T5893] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1240.891017][ T5893] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1240.932778][ T5893] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1240.962622][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.102740][T11669] m920x_read = error: -19 [ 1241.116017][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1241.140087][T17552] loop2: detected capacity change from 0 to 7 [ 1241.254997][T17552] Dev loop2: unable to read RDB block 7 [ 1241.277354][T17552] loop2: unable to read partition table [ 1241.283920][T17552] loop2: partition table beyond EOD, truncated [ 1241.295221][ T5893] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1241.306690][T17552] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1241.323692][T15043] m920x_read = error: -19 [ 1241.330336][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1241.493326][T17540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.503623][T17540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.563189][T15043] m920x_read = error: -19 [ 1241.571631][T15043] dvb-usb: error -19 while querying for an remote control event. [ 1241.764883][ T5893] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1241.993522][ T5893] m920x_read = error: -19 [ 1241.997952][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1242.185530][ T5893] usb 3-1: USB disconnect, device number 43 [ 1242.193085][T11669] m920x_read = error: -19 [ 1242.197495][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1242.381099][T11669] m920x_read = error: -19 [ 1242.393284][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1242.564769][ T5893] m920x_read = error: -19 [ 1242.569149][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1242.663080][ T9225] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1242.743083][ T5893] m920x_read = error: -19 [ 1242.747592][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1242.876328][ T9225] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1242.894201][ T9225] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.913788][ T5893] m920x_read = error: -19 [ 1242.918255][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1243.029887][ T9225] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1243.040392][ T5893] usb 2-1: USB disconnect, device number 37 [ 1243.083231][T11669] m920x_read = error: -19 [ 1243.087610][T11669] dvb-usb: error -19 while querying for an remote control event. [ 1243.263217][ T5893] m920x_read = error: -19 [ 1243.267753][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1243.312988][ T9225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.321037][ T9225] usb 4-1: Product: syz [ 1243.388624][ T9225] usb 4-1: Manufacturer: syz [ 1243.408875][ T9225] usb 4-1: SerialNumber: syz [ 1243.420712][ T9225] usb 4-1: config 0 descriptor?? [ 1243.519377][ T5893] m920x_read = error: -19 [ 1243.533432][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1243.566611][ T9225] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 1243.582097][T17581] [ 1243.584458][T17581] ===================================================== [ 1243.591361][T17581] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1243.598800][T17581] 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 Not tainted [ 1243.605882][T17581] ----------------------------------------------------- [ 1243.612783][T17581] syz.2.2598/17581 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1243.620476][T17581] ffff8880320927f8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1243.629155][T17581] [ 1243.629155][T17581] and this task is already holding: [ 1243.636498][T17581] ffff88805a47e028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1243.646223][T17581] which would create a new lock dependency: [ 1243.652087][T17581] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1243.660155][T17581] [ 1243.660155][T17581] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1243.669578][T17581] (&client->buffer_lock){..-.}-{3:3} [ 1243.669595][T17581] [ 1243.669595][T17581] ... which became SOFTIRQ-irq-safe at: [ 1243.682614][T17581] lock_acquire+0x120/0x360 [ 1243.687191][T17581] _raw_spin_lock+0x2e/0x40 [ 1243.691759][T17581] evdev_pass_values+0xb9/0xbd0 [ 1243.696676][T17581] evdev_events+0x1e6/0x340 [ 1243.701244][T17581] input_pass_values+0x285/0x890 [ 1243.706247][T17581] input_event_dispose+0x3e5/0x6b0 [ 1243.711418][T17581] input_inject_event+0x1fe/0x320 [ 1243.716504][T17581] kd_sound_helper+0x19f/0x210 [ 1243.721330][T17581] input_handler_for_each_handle+0xfe/0x1c0 [ 1243.727286][T17581] call_timer_fn+0x17b/0x5f0 [ 1243.731939][T17581] __run_timer_base+0x61a/0x860 [ 1243.736857][T17581] run_timer_softirq+0xb7/0x180 [ 1243.741776][T17581] handle_softirqs+0x283/0x870 [ 1243.746608][T17581] __irq_exit_rcu+0xca/0x1f0 [ 1243.751258][T17581] irq_exit_rcu+0x9/0x30 [ 1243.755561][T17581] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1243.761255][T17581] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1243.767300][T17581] try_to_unmap_one+0x2f01/0x3640 [ 1243.772389][T17581] __rmap_walk_file+0x464/0x620 [ 1243.777303][T17581] try_to_unmap+0x168/0x220 [ 1243.781868][T17581] shrink_folio_list+0x227b/0x4e90 [ 1243.787047][T17581] reclaim_folio_list+0xe8/0x4f0 [ 1243.792047][T17581] reclaim_pages+0x49a/0x5b0 [ 1243.796698][T17581] madvise_cold_or_pageout_pte_range+0x199e/0x1d20 [ 1243.803266][T17581] walk_pgd_range+0xc7f/0x1790 [ 1243.808106][T17581] __walk_page_range+0x14c/0x710 [ 1243.813126][T17581] walk_page_range_mm+0x42d/0x620 [ 1243.818224][T17581] madvise_do_behavior+0x2898/0x3500 [ 1243.823577][T17581] __ia32_sys_madvise+0x10c/0x150 [ 1243.828667][T17581] __do_fast_syscall_32+0xb4/0x110 [ 1243.833151][T15030] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1243.833843][T17581] do_fast_syscall_32+0x34/0x80 [ 1243.846312][T17581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1243.852720][T17581] [ 1243.852720][T17581] to a SOFTIRQ-irq-unsafe lock: [ 1243.859717][T17581] (tasklist_lock){.+.+}-{3:3} [ 1243.859734][T17581] [ 1243.859734][T17581] ... which became SOFTIRQ-irq-unsafe at: [ 1243.872352][T17581] ... [ 1243.872366][T17581] lock_acquire+0x120/0x360 [ 1243.879541][T17581] _raw_read_lock+0x36/0x50 [ 1243.884143][T17581] __do_wait+0xde/0x740 [ 1243.888389][T17581] do_wait+0x1f8/0x520 [ 1243.892544][T17581] kernel_wait+0xab/0x170 [ 1243.896961][T17581] call_usermodehelper_exec_work+0xbe/0x230 [ 1243.902935][T17581] process_scheduled_works+0xadb/0x17a0 [ 1243.908571][T17581] worker_thread+0x8a0/0xda0 [ 1243.913234][T17581] kthread+0x70e/0x8a0 [ 1243.917367][T17581] ret_from_fork+0x4b/0x80 [ 1243.921850][T17581] ret_from_fork_asm+0x1a/0x30 [ 1243.926682][T17581] [ 1243.926682][T17581] other info that might help us debug this: [ 1243.926682][T17581] [ 1243.936895][T17581] Chain exists of: [ 1243.936895][T17581] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1243.936895][T17581] [ 1243.949993][T17581] Possible interrupt unsafe locking scenario: [ 1243.949993][T17581] [ 1243.958289][T17581] CPU0 CPU1 [ 1243.963636][T17581] ---- ---- [ 1243.968985][T17581] lock(tasklist_lock); [ 1243.973207][T17581] local_irq_disable(); [ 1243.979947][T17581] lock(&client->buffer_lock); [ 1243.987310][T17581] lock(&new->fa_lock); [ 1243.994059][T17581] [ 1243.997497][T17581] lock(&client->buffer_lock); [ 1244.002513][T17581] [ 1244.002513][T17581] *** DEADLOCK *** [ 1244.002513][T17581] [ 1244.010646][T17581] 7 locks held by syz.2.2598/17581: [ 1244.015827][T17581] #0: ffff888146fb7118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1244.024948][T17581] #1: ffff888147ee2230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 1244.035024][T17581] #2: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 1244.044688][T17581] #3: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1244.054275][T17581] #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1244.063409][T17581] #5: ffff88805a47e028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1244.073574][T17581] #6: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1244.082604][T17581] [ 1244.082604][T17581] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1244.093006][T17581] -> (&client->buffer_lock){..-.}-{3:3} { [ 1244.098745][T17581] IN-SOFTIRQ-W at: [ 1244.102703][T17581] lock_acquire+0x120/0x360 [ 1244.108868][T17581] _raw_spin_lock+0x2e/0x40 [ 1244.115005][T17581] evdev_pass_values+0xb9/0xbd0 [ 1244.121498][T17581] evdev_events+0x1e6/0x340 [ 1244.127634][T17581] input_pass_values+0x285/0x890 [ 1244.134218][T17581] input_event_dispose+0x3e5/0x6b0 [ 1244.140975][T17581] input_inject_event+0x1fe/0x320 [ 1244.147631][T17581] kd_sound_helper+0x19f/0x210 [ 1244.154024][T17581] input_handler_for_each_handle+0xfe/0x1c0 [ 1244.161556][T17581] call_timer_fn+0x17b/0x5f0 [ 1244.167788][T17581] __run_timer_base+0x61a/0x860 [ 1244.174281][T17581] run_timer_softirq+0xb7/0x180 [ 1244.180776][T17581] handle_softirqs+0x283/0x870 [ 1244.187198][T17581] __irq_exit_rcu+0xca/0x1f0 [ 1244.193427][T17581] irq_exit_rcu+0x9/0x30 [ 1244.199306][T17581] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1244.206590][T17581] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1244.214214][T17581] try_to_unmap_one+0x2f01/0x3640 [ 1244.220867][T17581] __rmap_walk_file+0x464/0x620 [ 1244.227355][T17581] try_to_unmap+0x168/0x220 [ 1244.233505][T17581] shrink_folio_list+0x227b/0x4e90 [ 1244.240258][T17581] reclaim_folio_list+0xe8/0x4f0 [ 1244.246828][T17581] reclaim_pages+0x49a/0x5b0 [ 1244.253048][T17581] madvise_cold_or_pageout_pte_range+0x199e/0x1d20 [ 1244.261179][T17581] walk_pgd_range+0xc7f/0x1790 [ 1244.267575][T17581] __walk_page_range+0x14c/0x710 [ 1244.274168][T17581] walk_page_range_mm+0x42d/0x620 [ 1244.280834][T17581] madvise_do_behavior+0x2898/0x3500 [ 1244.287758][T17581] __ia32_sys_madvise+0x10c/0x150 [ 1244.294440][T17581] __do_fast_syscall_32+0xb4/0x110 [ 1244.301197][T17581] do_fast_syscall_32+0x34/0x80 [ 1244.307680][T17581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1244.315643][T17581] INITIAL USE at: [ 1244.319527][T17581] lock_acquire+0x120/0x360 [ 1244.325598][T17581] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1244.332350][T17581] evdev_ioctl_handler+0x1969/0x1f10 [ 1244.339193][T17581] __ia32_compat_sys_ioctl+0x551/0x840 [ 1244.346208][T17581] __do_fast_syscall_32+0xb4/0x110 [ 1244.352868][T17581] do_fast_syscall_32+0x34/0x80 [ 1244.359262][T17581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1244.367141][T17581] } [ 1244.369640][T17581] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1244.377792][T17581] [ 1244.377792][T17581] the dependencies between the lock to be acquired [ 1244.377802][T17581] and SOFTIRQ-irq-unsafe lock: [ 1244.391290][T17581] -> (tasklist_lock){.+.+}-{3:3} { [ 1244.396591][T17581] HARDIRQ-ON-R at: [ 1244.400739][T17581] lock_acquire+0x120/0x360 [ 1244.407236][T17581] _raw_read_lock+0x36/0x50 [ 1244.413739][T17581] __do_wait+0xde/0x740 [ 1244.419883][T17581] do_wait+0x1f8/0x520 [ 1244.425937][T17581] kernel_wait+0xab/0x170 [ 1244.432250][T17581] call_usermodehelper_exec_work+0xbe/0x230 [ 1244.440148][T17581] process_scheduled_works+0xadb/0x17a0 [ 1244.447694][T17581] worker_thread+0x8a0/0xda0 [ 1244.454268][T17581] kthread+0x70e/0x8a0 [ 1244.460317][T17581] ret_from_fork+0x4b/0x80 [ 1244.466711][T17581] ret_from_fork_asm+0x1a/0x30 [ 1244.473456][T17581] SOFTIRQ-ON-R at: [ 1244.477601][T17581] lock_acquire+0x120/0x360 [ 1244.484114][T17581] _raw_read_lock+0x36/0x50 [ 1244.490605][T17581] __do_wait+0xde/0x740 [ 1244.496763][T17581] do_wait+0x1f8/0x520 [ 1244.502825][T17581] kernel_wait+0xab/0x170 [ 1244.509148][T17581] call_usermodehelper_exec_work+0xbe/0x230 [ 1244.517019][T17581] process_scheduled_works+0xadb/0x17a0 [ 1244.524552][T17581] worker_thread+0x8a0/0xda0 [ 1244.531114][T17581] kthread+0x70e/0x8a0 [ 1244.537167][T17581] ret_from_fork+0x4b/0x80 [ 1244.543568][T17581] ret_from_fork_asm+0x1a/0x30 [ 1244.550319][T17581] INITIAL USE at: [ 1244.554383][T17581] lock_acquire+0x120/0x360 [ 1244.560814][T17581] _raw_write_lock_irq+0xa2/0xf0 [ 1244.567643][T17581] copy_process+0x21d5/0x3b80 [ 1244.574239][T17581] kernel_clone+0x21e/0x870 [ 1244.580670][T17581] user_mode_thread+0xdd/0x140 [ 1244.587348][T17581] rest_init+0x23/0x300 [ 1244.593423][T17581] start_kernel+0x470/0x4f0 [ 1244.599844][T17581] x86_64_start_reservations+0x2a/0x30 [ 1244.607209][T17581] x86_64_start_kernel+0x66/0x70 [ 1244.614049][T17581] common_startup_64+0x13e/0x147 [ 1244.620878][T17581] INITIAL READ USE at: [ 1244.625361][T17581] lock_acquire+0x120/0x360 [ 1244.632192][T17581] _raw_read_lock+0x36/0x50 [ 1244.639123][T17581] __do_wait+0xde/0x740 [ 1244.645626][T17581] do_wait+0x1f8/0x520 [ 1244.652045][T17581] kernel_wait+0xab/0x170 [ 1244.658712][T17581] call_usermodehelper_exec_work+0xbe/0x230 [ 1244.666949][T17581] process_scheduled_works+0xadb/0x17a0 [ 1244.674833][T17581] worker_thread+0x8a0/0xda0 [ 1244.681761][T17581] kthread+0x70e/0x8a0 [ 1244.688177][T17581] ret_from_fork+0x4b/0x80 [ 1244.694933][T17581] ret_from_fork_asm+0x1a/0x30 [ 1244.702022][T17581] } [ 1244.704678][T17581] ... key at: [] tasklist_lock+0x18/0x40 [ 1244.712652][T17581] ... acquired at: [ 1244.716622][T17581] lock_acquire+0x120/0x360 [ 1244.721300][T17581] _raw_read_lock+0x36/0x50 [ 1244.725961][T17581] send_sigio+0x101/0x370 [ 1244.730451][T17581] kill_fasync+0x24d/0x4d0 [ 1244.735028][T17581] lease_break_callback+0x26/0x30 [ 1244.740211][T17581] __break_lease+0x6a2/0x1620 [ 1244.745071][T17581] vfs_truncate+0x428/0x520 [ 1244.749756][T17581] do_sys_truncate+0xdb/0x190 [ 1244.754617][T17581] __ia32_compat_sys_truncate+0x5b/0x70 [ 1244.760347][T17581] __do_fast_syscall_32+0xb4/0x110 [ 1244.765626][T17581] do_fast_syscall_32+0x34/0x80 [ 1244.770640][T17581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1244.777145][T17581] [ 1244.779460][T17581] -> (&f_owner->lock){....}-{3:3} { [ 1244.784755][T17581] INITIAL USE at: [ 1244.788728][T17581] lock_acquire+0x120/0x360 [ 1244.794960][T17581] _raw_write_lock_irq+0xa2/0xf0 [ 1244.801625][T17581] __f_setown+0x67/0x370 [ 1244.807609][T17581] generic_setlease+0xd5d/0x1240 [ 1244.814287][T17581] fcntl_setlease+0x3a2/0x4c0 [ 1244.820681][T17581] do_fcntl+0x6a0/0x1910 [ 1244.826652][T17581] do_compat_fcntl64+0x484/0x720 [ 1244.833316][T17581] __do_fast_syscall_32+0xb4/0x110 [ 1244.840172][T17581] do_fast_syscall_32+0x34/0x80 [ 1244.846761][T17581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1244.854819][T17581] INITIAL READ USE at: [ 1244.859233][T17581] lock_acquire+0x120/0x360 [ 1244.865902][T17581] _raw_read_lock_irqsave+0xaf/0x100 [ 1244.873341][T17581] send_sigio+0x38/0x370 [ 1244.879743][T17581] kill_fasync+0x24d/0x4d0 [ 1244.886339][T17581] lease_break_callback+0x26/0x30 [ 1244.893524][T17581] __break_lease+0x6a2/0x1620 [ 1244.900354][T17581] vfs_truncate+0x428/0x520 [ 1244.907007][T17581] do_sys_truncate+0xdb/0x190 [ 1244.913848][T17581] __ia32_compat_sys_truncate+0x5b/0x70 [ 1244.921554][T17581] __do_fast_syscall_32+0xb4/0x110 [ 1244.928834][T17581] do_fast_syscall_32+0x34/0x80 [ 1244.935837][T17581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1244.944321][T17581] } [ 1244.946895][T17581] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1244.955816][T17581] ... acquired at: [ 1244.959692][T17581] lock_acquire+0x120/0x360 [ 1244.964358][T17581] _raw_read_lock_irqsave+0xaf/0x100 [ 1244.969805][T17581] send_sigio+0x38/0x370 [ 1244.974208][T17581] kill_fasync+0x24d/0x4d0 [ 1244.978797][T17581] lease_break_callback+0x26/0x30 [ 1244.983987][T17581] __break_lease+0x6a2/0x1620 [ 1244.988827][T17581] vfs_truncate+0x428/0x520 [ 1244.993492][T17581] do_sys_truncate+0xdb/0x190 [ 1244.998329][T17581] __ia32_compat_sys_truncate+0x5b/0x70 [ 1245.004032][T17581] __do_fast_syscall_32+0xb4/0x110 [ 1245.009309][T17581] do_fast_syscall_32+0x34/0x80 [ 1245.014331][T17581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1245.020820][T17581] [ 1245.023138][T17581] -> (&new->fa_lock){....}-{3:3} { [ 1245.028245][T17581] INITIAL USE at: [ 1245.032123][T17581] lock_acquire+0x120/0x360 [ 1245.038183][T17581] _raw_write_lock_irq+0xa2/0xf0 [ 1245.044673][T17581] fasync_remove_entry+0xf1/0x1c0 [ 1245.051268][T17581] lease_modify+0x1ca/0x3c0 [ 1245.057327][T17581] locks_remove_file+0x4bf/0xea0 [ 1245.063818][T17581] __fput+0x3ab/0xa70 [ 1245.069363][T17581] task_work_run+0x1d1/0x260 [ 1245.075518][T17581] resume_user_mode_work+0x5e/0x80 [ 1245.082196][T17581] syscall_exit_to_user_mode+0x9a/0x120 [ 1245.089317][T17581] __do_fast_syscall_32+0xc1/0x110 [ 1245.095986][T17581] do_fast_syscall_32+0x34/0x80 [ 1245.102395][T17581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1245.110269][T17581] INITIAL READ USE at: [ 1245.114583][T17581] lock_acquire+0x120/0x360 [ 1245.121072][T17581] _raw_read_lock_irqsave+0xaf/0x100 [ 1245.128331][T17581] kill_fasync+0x199/0x4d0 [ 1245.134742][T17581] lease_break_callback+0x26/0x30 [ 1245.141751][T17581] __break_lease+0x6a2/0x1620 [ 1245.148435][T17581] vfs_truncate+0x428/0x520 [ 1245.154930][T17581] do_sys_truncate+0xdb/0x190 [ 1245.161590][T17581] __ia32_compat_sys_truncate+0x5b/0x70 [ 1245.169115][T17581] __do_fast_syscall_32+0xb4/0x110 [ 1245.176206][T17581] do_fast_syscall_32+0x34/0x80 [ 1245.183038][T17581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1245.191363][T17581] } [ 1245.193858][T17581] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1245.202536][T17581] ... acquired at: [ 1245.206333][T17581] lock_acquire+0x120/0x360 [ 1245.210998][T17581] _raw_read_lock_irqsave+0xaf/0x100 [ 1245.216444][T17581] kill_fasync+0x199/0x4d0 [ 1245.221030][T17581] evdev_pass_values+0x627/0xbd0 [ 1245.226151][T17581] evdev_events+0x1e6/0x340 [ 1245.230829][T17581] input_pass_values+0x285/0x890 [ 1245.235929][T17581] input_event_dispose+0x330/0x6b0 [ 1245.241194][T17581] input_inject_event+0x1fe/0x320 [ 1245.246380][T17581] evdev_write+0x2fc/0x480 [ 1245.250961][T17581] vfs_write+0x27b/0xa90 [ 1245.255359][T17581] ksys_write+0x145/0x250 [ 1245.259837][T17581] __do_fast_syscall_32+0xb4/0x110 [ 1245.265103][T17581] do_fast_syscall_32+0x34/0x80 [ 1245.270123][T17581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1245.276609][T17581] [ 1245.278923][T17581] [ 1245.278923][T17581] stack backtrace: [ 1245.284799][T17581] CPU: 0 UID: 0 PID: 17581 Comm: syz.2.2598 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1245.284813][T17581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1245.284820][T17581] Call Trace: [ 1245.284825][T17581] [ 1245.284831][T17581] dump_stack_lvl+0x189/0x250 [ 1245.284848][T17581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1245.284869][T17581] ? __pfx__printk+0x10/0x10 [ 1245.284891][T17581] validate_chain+0x1f05/0x2140 [ 1245.284917][T17581] __lock_acquire+0xaac/0xd20 [ 1245.284937][T17581] ? kill_fasync+0x199/0x4d0 [ 1245.284951][T17581] lock_acquire+0x120/0x360 [ 1245.284962][T17581] ? kill_fasync+0x199/0x4d0 [ 1245.284975][T17581] ? __lock_acquire+0xaac/0xd20 [ 1245.284988][T17581] _raw_read_lock_irqsave+0xaf/0x100 [ 1245.285001][T17581] ? kill_fasync+0x199/0x4d0 [ 1245.285023][T17581] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1245.285040][T17581] ? do_raw_spin_lock+0x121/0x290 [ 1245.285062][T17581] kill_fasync+0x199/0x4d0 [ 1245.285082][T17581] ? kill_fasync+0x53/0x4d0 [ 1245.285095][T17581] evdev_pass_values+0x627/0xbd0 [ 1245.285109][T17581] ? evdev_pass_values+0x601/0xbd0 [ 1245.285123][T17581] evdev_events+0x1e6/0x340 [ 1245.285134][T17581] ? evdev_events+0x79/0x340 [ 1245.285149][T17581] ? input_pass_values+0x8d/0x890 [ 1245.285169][T17581] input_pass_values+0x285/0x890 [ 1245.285193][T17581] ? input_handle_event+0x70c/0xf30 [ 1245.285212][T17581] input_event_dispose+0x330/0x6b0 [ 1245.285228][T17581] input_inject_event+0x1fe/0x320 [ 1245.285238][T17581] ? input_inject_event+0xbc/0x320 [ 1245.285249][T17581] evdev_write+0x2fc/0x480 [ 1245.285262][T17581] ? __pfx_evdev_write+0x10/0x10 [ 1245.285275][T17581] ? bpf_lsm_file_permission+0x9/0x20 [ 1245.285287][T17581] ? security_file_permission+0x75/0x290 [ 1245.285311][T17581] ? rw_verify_area+0x258/0x650 [ 1245.285329][T17581] ? __pfx_evdev_write+0x10/0x10 [ 1245.285351][T17581] vfs_write+0x27b/0xa90 [ 1245.285371][T17581] ? __pfx_vfs_write+0x10/0x10 [ 1245.285381][T17581] ? __fget_files+0x2a/0x420 [ 1245.285393][T17581] ? __fget_files+0x2a/0x420 [ 1245.285403][T17581] ? __fget_files+0x3a0/0x420 [ 1245.285414][T17581] ? __fget_files+0x2a/0x420 [ 1245.285426][T17581] ksys_write+0x145/0x250 [ 1245.285439][T17581] ? rcu_is_watching+0x15/0xb0 [ 1245.285463][T17581] ? __pfx_ksys_write+0x10/0x10 [ 1245.285481][T17581] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1245.285503][T17581] ? lockdep_hardirqs_on+0x9c/0x150 [ 1245.285517][T17581] __do_fast_syscall_32+0xb4/0x110 [ 1245.285529][T17581] ? lockdep_hardirqs_on+0x9c/0x150 [ 1245.285539][T17581] do_fast_syscall_32+0x34/0x80 [ 1245.285550][T17581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1245.285561][T17581] RIP: 0023:0xf7fb3539 [ 1245.285571][T17581] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1245.285583][T17581] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1245.285602][T17581] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1245.285615][T17581] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000 [ 1245.285626][T17581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1245.285637][T17581] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1245.285649][T17581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1245.285662][T17581] [ 1245.614247][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.623348][ T5893] m920x_read = error: -19 [ 1245.627694][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1245.684603][ T9225] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 1245.991959][ T5893] m920x_read = error: -19 [ 1246.006166][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1246.021921][ T120] usb 4-1: USB disconnect, device number 58 [ 1246.171883][T15030] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1246.181064][T15030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.190057][T15030] usb 2-1: config 0 descriptor?? [ 1246.203411][ T5893] m920x_read = error: -19 [ 1246.207795][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1246.268064][T15030] usb 2-1: can't set config #0, error -71 [ 1246.280752][T15030] usb 2-1: USB disconnect, device number 38 [ 1246.433082][ T5893] m920x_read = error: -19 [ 1246.437457][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1246.604874][ T5893] m920x_read = error: -19 [ 1246.609266][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1246.783156][ T5893] m920x_read = error: -19 [ 1246.787564][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1246.953056][ T5893] m920x_read = error: -19 [ 1246.957432][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1247.124980][ T5893] m920x_read = error: -19 [ 1247.129380][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1247.293239][ T5893] m920x_read = error: -19 [ 1247.297607][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1247.473073][ T5893] m920x_read = error: -19 [ 1247.477471][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1247.643333][ T5893] m920x_read = error: -19 [ 1247.647697][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1247.813133][ T5893] m920x_read = error: -19 [ 1247.817500][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1247.983275][ T5893] m920x_read = error: -19 [ 1247.987734][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1248.153027][ T5893] m920x_read = error: -19 [ 1248.157400][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1248.323253][ T5893] m920x_read = error: -19 [ 1248.327643][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1248.503094][ T5893] m920x_read = error: -19 [ 1248.507471][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1248.683335][ T5893] m920x_read = error: -19 [ 1248.687730][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1248.853440][ T5893] m920x_read = error: -19 [ 1248.857815][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1249.023234][ T5893] m920x_read = error: -19 [ 1249.027726][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1249.193048][ T5893] m920x_read = error: -19 [ 1249.197406][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1249.364026][ T5893] m920x_read = error: -19 [ 1249.368460][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1249.533698][ T5893] m920x_read = error: -19 [ 1249.538077][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1249.703479][ T5893] m920x_read = error: -19 [ 1249.707928][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1249.883032][ T5893] m920x_read = error: -19 [ 1249.887441][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1250.053028][ T5893] m920x_read = error: -19 [ 1250.057386][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1250.223324][ T5893] m920x_read = error: -19 [ 1250.227730][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1250.393035][ T5893] m920x_read = error: -19 [ 1250.397397][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1250.563450][ T5893] m920x_read = error: -19 [ 1250.567919][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1250.736988][ T5893] m920x_read = error: -19 [ 1250.741355][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1250.913367][ T5893] m920x_read = error: -19 [ 1250.917767][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1251.083143][ T5893] m920x_read = error: -19 [ 1251.087535][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1251.264227][ T5893] m920x_read = error: -19 [ 1251.268613][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1251.433189][ T5893] m920x_read = error: -19 [ 1251.437579][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1251.603095][ T5893] m920x_read = error: -19 [ 1251.607571][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1251.773530][ T5893] m920x_read = error: -19 [ 1251.777914][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1251.943058][ T5893] m920x_read = error: -19 [ 1251.947440][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1252.114467][ T5893] m920x_read = error: -19 [ 1252.118822][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1252.283201][ T5893] m920x_read = error: -19 [ 1252.287562][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1252.453075][ T5893] m920x_read = error: -19 [ 1252.457531][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1252.623066][ T5893] m920x_read = error: -19 [ 1252.627419][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1252.793543][ T5893] m920x_read = error: -19 [ 1252.797937][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1252.963023][ T5893] m920x_read = error: -19 [ 1252.967396][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1253.133273][ T5893] m920x_read = error: -19 [ 1253.137733][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1253.303484][ T5893] m920x_read = error: -19 [ 1253.307846][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 1253.473195][ T5893] m920x_read = error: -19 [ 1253.477565][ T5893] dvb-usb: error -19 while querying for an remote control event.