last executing test programs: 15.582749156s ago: executing program 0 (id=395): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=@flushpolicy={0x104, 0x1d, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@algo_crypt={0xf2, 0x2, {{'ctr-cast6-avx\x00'}, 0x550, "19adf4db0bf5c06e5a030e026c3a9fa37b6aead3b62802ee891fc6c9c1cfe545319b6cb193da5b9442c4980b0dcd1bbc181e883572fb80ab15f9901dddcd1af5be6bd31090aa924e587556ed5ce98708a6bb287736c515a765fa04ef993035a03e489660877afa87d4fa6e2102c9418db5b45cf05e3d955fb37998673e1add0501145f473217588a766b56a28efa130612d14c97178e1a45b5e954c8320f160abaa40d09edb902d3c12a"}}]}, 0x104}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x6, 0x8000, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x67, 0x0, 0x7f, 0x2f, 0x0, @broadcast, @local, {[@noop]}}}}}) sendmmsg(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000540)=@ll={0x11, 0x19, r1, 0x1, 0x4}, 0x80, 0x0}}], 0x1, 0x4088) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 15.279486625s ago: executing program 0 (id=396): syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r3, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r7, &(0x7f0000000340), 0x2000011a) splice(r7, 0x0, r6, 0x0, 0x4ff9c, 0x0) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000000180)={0x6, 0x200, 0x8d, 0x800, 0xb, 0x9}) ioctl$SG_IO(r5, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000001200)="0dd7f97978bd", 0x0, 0x6, 0x10000, 0x1, 0x0}) write$dsp(r4, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000280)) 15.168547792s ago: executing program 1 (id=398): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000240), 0x2, 0x2) socket$inet6(0xa, 0x80002, 0x6) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x80100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x2, {0x2, 0x1, 0x0, 0x1, 0x5}, 0x4}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070296d1ca000905060200020d0006090582020002000110fa92ffd372813b5df3559f97913dd5b23f267e2b0633b5dac75475bdf80e15847acb02be9bf5775ef7299e74b80bedf349f7f39c9ca9152955eec1e94de080c7a5f9abad01a30852"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) 11.430053922s ago: executing program 2 (id=402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14}}, 0x9c}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000800) r2 = syz_open_dev$vbi(&(0x7f0000001340), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000013c0)=@fd={0x7, 0xe, 0x4, 0x2000, 0x27, {0x77359400}, {0x1, 0xc, 0x0, 0xb2, 0x5, 0xf7, "230b6991"}, 0x7ff, 0x4, {}, 0x2}) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x4008880) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x1b, 0x80, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0x1}}, 0x48) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0x1c) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000100)=0xa, 0x4) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x800008d, 0x0) 11.358570974s ago: executing program 0 (id=403): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000001c0)={0x0, 'vlan1\x00', {0x1}, 0x7f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = syz_usb_connect$hid(0x3, 0x35, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56e, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x3, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x0, 0x0, 0x4, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xc4, 0x3}}]}}}]}}]}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffb, 0x51, &(0x7f0000000300)=""/81, 0x40f00, 0x43, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0x1, 0x400, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 11.19688217s ago: executing program 1 (id=404): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 11.008889114s ago: executing program 1 (id=405): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0xb000000d}) dup3(r3, r2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r7, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 10.642590444s ago: executing program 2 (id=406): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) r2 = socket$unix(0x1, 0x1, 0x0) cachestat(r2, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) r5 = fsopen(&(0x7f0000000340)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000380)='port', &(0x7f0000000140)='f\x97-i\xcf_Z=\x03b\xa6\xa70', 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') socket(0x10, 0x3, 0x0) r6 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) r7 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) close(r7) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r8, 0x402c542d, 0x0) 10.517186894s ago: executing program 4 (id=407): add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="43b7f928160725b2b55a77b6af28283989cfe21f55763b2a6f613665e448c43a76f791dd4bf4f59d670ae2d45c961e54bd47280e6a3c1be18ee55feb3c60cbb8909621a7ba61154d0398af0320583cb3bb1decec86a6a834049544a25f13d6f4ab39ccec4b4fd2070a325cb2ac2808640e7b77c4e0cb6c6f46b8e85c686874", 0x7f, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000140), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0x0) r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r3 = io_uring_setup(0x3eab, &(0x7f0000000480)={0x0, 0x2002, 0x200, 0x3, 0x286}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_0\x00', 0x0}) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$peeksig(0x4209, r5, &(0x7f0000000440)={0x5}, &(0x7f0000000fc0)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x0, 0x44, 0x0, 0x0, 0x1}, 0x28) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000800)={'syztnl2\x00', r4, 0x40, 0x8, 0x1, 0xb9d, {{0x2b, 0x4, 0x2, 0x9, 0xac, 0x65, 0x0, 0x1, 0x8c3435c5387b7005, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0xb, 0xa1, [@dev={0xac, 0x14, 0x14, 0x2b}, @local]}, @cipso={0x86, 0x64, 0xfffffffffffffffc, [{0x2, 0x12, "03f90c84dbc936b5812e695bef3c9cd7"}, {0x1, 0x8, "15b0496e7096"}, {0x6, 0x11, "a13e072d76d5efcbe50d2391a67109"}, {0x5, 0x12, "1ef0fbc81e9cffcb346bd8046d5fd924"}, {0x2, 0x6, "75679605"}, {0x0, 0x12, "0000000000000000000000bf37000000"}, {0x5, 0x9, "666ce22c6317a2"}]}, @timestamp={0x44, 0xc, 0x2e, 0x0, 0xb, [0x46, 0x0]}, @rr={0x7, 0x1b, 0xcd, [@loopback, @multicast1, @multicast2, @broadcast, @remote, @multicast1]}]}}}}}) 10.284172462s ago: executing program 3 (id=409): io_setup(0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x40, 0x8001, 0x0, 0x9, 0x80, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x3, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) unshare(0x200) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x1) io_setup(0x222, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.008415451s ago: executing program 4 (id=410): socket$inet6_sctp(0xa, 0x801, 0x84) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r0 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r1, 0xc0606610, &(0x7f0000000040)=0x60) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r2, 0x0, &(0x7f0000002140)) ioctl$FS_IOC_RESVSP(r0, 0x80086601, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', r6, 0x10, 0x80, 0xdd7, 0x2, {{0xa, 0x4, 0x1, 0x9, 0x28, 0x66, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0xd, 0x3, 0x9, [{@multicast1, 0x2}]}, @rr={0x7, 0x7, 0xe0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) 9.615917734s ago: executing program 4 (id=411): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x200040d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004004}, 0x80) r4 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r6, 0x0, 0x1) 8.813158704s ago: executing program 3 (id=412): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x9, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x122) lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9}, {0x9, 0xfff}]}, 0x18, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)={0x9, 0xfff, 0xfffffff2, 0xffffffff, 0x2, 0x5f}) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04", 0xb) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0', [], 0xa, "7cb384767a9c24d4e161d839da9f73cad6061bbbd9541b47baa608a07d9a27b10d1a06d4fb197114de0ae700d7bd1f3f4e6abafe528b6ada0453031274da4891e78504463e04f429492b0ca1d97344d880fae7f097d34a9a5fcd5468b896f44b36acf76a80a82af1de4fd6aeaf9bd66546b65062629b1e24f0ae37d8cd51006596c597a2721081f5f87e08"}, 0xe9) r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xf, 0x60100) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x800000001fe, 0x82) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x11, 0x2004, 0x0, 0x400004, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=""/85, &(0x7f00000002c0)=""/187, &(0x7f0000000380)=""/126, 0x40000}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 8.812010156s ago: executing program 1 (id=413): syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r3, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r7, &(0x7f0000000340), 0x2000011a) splice(r7, 0x0, r6, 0x0, 0x4ff9c, 0x0) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000000180)={0x6, 0x200, 0x8d, 0x800, 0xb, 0x9}) ioctl$SG_IO(r5, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000001200)="0dd7f97978bd", 0x0, 0x6, 0x10000, 0x1, 0x0}) write$dsp(r4, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000280)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 8.062160078s ago: executing program 2 (id=414): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x200040d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004004}, 0x80) r4 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r6, 0x0, 0x1) 6.415687656s ago: executing program 3 (id=415): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x8, 0x10000, 0xf051}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r5, 0x1}}, 0x10) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000500)={0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff2, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x10, 0x1, 0x0, 0x0, {{0x88, 0x9, 0x40}, [@TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 6.365068785s ago: executing program 0 (id=416): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x5, 0xd9, 0xffdffe0000000001, 0xfa11, 0xfffffffa}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040fff80000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001001500080005002500000000000800"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008"], 0x124}}, 0x0) 6.139881038s ago: executing program 4 (id=417): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, 0x0, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r4 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, 0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) 5.483480527s ago: executing program 1 (id=418): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x8, 0x10000, 0xf051}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r5, 0x1}}, 0x10) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000500)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff2, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x10, 0x1, 0x0, 0x0, {{0x88, 0x9, 0x40}, [@TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 4.680183274s ago: executing program 2 (id=419): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040), 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c, r5, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x3c}}, 0x4000) connect$tipc(r3, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 4.208854761s ago: executing program 0 (id=420): socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0x24) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000100)={0x21}) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 4.192983501s ago: executing program 3 (id=421): prctl$PR_SET_IO_FLUSHER(0x34, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)={0x6, 0x0, [{0x890, 0x0, 0x2}, {0x9ab, 0x0, 0x1}, {0x313, 0x0, 0x7}, {0xa16, 0x0, 0xe4f5}, {0xb16, 0x0, 0xfffffffffffffffb}, {0x4fd, 0x0, 0xfffffffffffffffb}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x368, 0x1e, 0x109, 0x100, 0x0, {}, [{0x140, 0x1, [@m_ctinfo={0x90, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x64, 0x6, "0bc408e4219bf6823f1b2fa51f5db228cd1d0ed0fd90f572632d4f4351a96b89fa261b46a121e28acbf8d7337a88a5d70e296d0dd8f82da5ec4a702068ab96c075f39365fc28af90f4ecaeb5b4c7b140206bee61483439c84113841a2d6c9f86"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xac, 0x20, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x80000000}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @TCA_IFE_TYPE={0x6, 0x5, 0xffff}]}, {0x50, 0x6, "35026dd8fc7fcd97acd1f806de68c98b06d9539c66619cafe2c0c542579e547558cd697e12e6371dc21ec0c23b529d0d7a16f2956c7d618bba458a1c30a2e86f3ded4506de7ea6c499c407ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, {0xf4, 0x1, [@m_skbmod={0x7c, 0x17, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8001}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0xfffffff5, 0x7, 0x21a5908e}, 0x400000005}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x74, 0x11, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x3, 0x3, 0x9, 0x6}}]}, {0x2e, 0x6, "97046b0812add595dec2f696ee011227dbe7b83df359e10fb1674356d0bbb8e58ebb14744f1756456bd0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}]}, {0x120, 0x1, [@m_connmark={0x11c, 0x17, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x200, 0x1, 0x7, 0x5}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200000, 0x2, 0x4, 0x100, 0x9}, 0x4}}]}, {0xb4, 0x6, "9c0663ab5c836e1391f89043030182ba65173e9c449b97cc9460faae360d3464a0730fa96d0f7deb5f720ad4e2c5c34964fe0c24072db789abfe8e47d727bf6cc31e79d43a060515f2fde0f701e3ab6b917c09ea5fe4620344de417ae8ecfe2aa88a0a7f805c32d0c2c6e24340429007536d317d889426605d6aa261aa20f303ad7b9e31c10d544b9bff881d37925180a63a835d6151442aa593d33277c5743a61b6d39f0c4330ead540ff0016f34d49"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x368}, 0x1, 0x2b1e}, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r4 = io_uring_setup(0xe60, &(0x7f0000000000)={0x0, 0x6b7b, 0x1000, 0x0, 0x1bd}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000003080), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 2.614582584s ago: executing program 1 (id=422): syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r3, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r7, &(0x7f0000000340), 0x2000011a) splice(r7, 0x0, r6, 0x0, 0x4ff9c, 0x0) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000000180)={0x6, 0x200, 0x8d, 0x800, 0xb, 0x9}) ioctl$SG_IO(r5, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000001200)="0dd7f97978bd", 0x0, 0x6, 0x10000, 0x1, 0x0}) write$dsp(r4, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000280)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 2.236421054s ago: executing program 4 (id=423): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r2, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$int_in(r3, 0x5421, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) close(r3) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)={0x14, r5, 0x339, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20044001}, 0xc860) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xef1955720cc6dc20}, 0x4001) 958.098489ms ago: executing program 0 (id=424): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=000000000', @ANYBLOB=',g', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="2400000016000d190a762d7f08", 0xd}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff", 0x17}], 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) fadvise64(r5, 0x400, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400", @ANYRES32, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 812.340725ms ago: executing program 2 (id=425): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=@flushpolicy={0x104, 0x1d, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@algo_crypt={0xf2, 0x2, {{'ctr-cast6-avx\x00'}, 0x550, "19adf4db0bf5c06e5a030e026c3a9fa37b6aead3b62802ee891fc6c9c1cfe545319b6cb193da5b9442c4980b0dcd1bbc181e883572fb80ab15f9901dddcd1af5be6bd31090aa924e587556ed5ce98708a6bb287736c515a765fa04ef993035a03e489660877afa87d4fa6e2102c9418db5b45cf05e3d955fb37998673e1add0501145f473217588a766b56a28efa130612d14c97178e1a45b5e954c8320f160abaa40d09edb902d3c12a"}}]}, 0x104}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x6, 0x8000, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x67, 0x0, 0x7f, 0x2f, 0x0, @broadcast, @local, {[@noop]}}}}}) sendmmsg(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000540)=@ll={0x11, 0x19, r1, 0x1, 0x4}, 0x80, 0x0}}], 0x1, 0x4088) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 789.269409ms ago: executing program 3 (id=426): add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="43b7f928160725b2b55a77b6af28283989cfe21f55763b2a6f613665e448c43a76f791dd4bf4f59d670ae2d45c961e54bd47280e6a3c1be18ee55feb3c60cbb8909621a7ba61154d0398af0320583cb3bb1decec86a6a834049544a25f13d6f4ab39ccec4b4fd2070a325cb2ac2808640e7b77c4e0cb6c6f46b8e85c6868746afc2732", 0x83, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000140), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0x0) r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r3 = io_uring_setup(0x3eab, &(0x7f0000000480)={0x0, 0x2002, 0x200, 0x3, 0x286}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_0\x00', 0x0}) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$peeksig(0x4209, r5, &(0x7f0000000440)={0x5}, &(0x7f0000000fc0)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x0, 0x44, 0x0, 0x0, 0x1}, 0x28) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000800)={'syztnl2\x00', r4, 0x40, 0x8, 0x1, 0xb9d, {{0x2b, 0x4, 0x2, 0x9, 0xac, 0x65, 0x0, 0x1, 0x8c3435c5387b7005, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0xb, 0xa1, [@dev={0xac, 0x14, 0x14, 0x2b}, @local]}, @cipso={0x86, 0x64, 0xfffffffffffffffc, [{0x2, 0x12, "03f90c84dbc936b5812e695bef3c9cd7"}, {0x1, 0x8, "15b0496e7096"}, {0x6, 0x11, "a13e072d76d5efcbe50d2391a67109"}, {0x5, 0x12, "1ef0fbc81e9cffcb346bd8046d5fd924"}, {0x2, 0x6, "75679605"}, {0x0, 0x12, "0000000000000000000000bf37000000"}, {0x5, 0x9, "666ce22c6317a2"}]}, @timestamp={0x44, 0xc, 0x2e, 0x0, 0xb, [0x46, 0x0]}, @rr={0x7, 0x1b, 0xcd, [@loopback, @multicast1, @multicast2, @broadcast, @remote, @multicast1]}]}}}}}) 427.560673ms ago: executing program 2 (id=427): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x8, 0x10000, 0xf051}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r5, 0x1}}, 0x10) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000500)={0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff2, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x10, 0x1, 0x0, 0x0, {{0x88, 0x9, 0x40}, [@TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 423.736735ms ago: executing program 4 (id=428): syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r3, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r7, &(0x7f0000000340), 0x2000011a) splice(r7, 0x0, r6, 0x0, 0x4ff9c, 0x0) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000000180)={0x6, 0x200, 0x8d, 0x800, 0xb, 0x9}) ioctl$SG_IO(r5, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000001200)="0dd7f97978bd", 0x0, 0x6, 0x10000, 0x1, 0x0}) write$dsp(r4, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000280)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 0s ago: executing program 3 (id=429): clock_getres(0x2, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8085}, 0x4000) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x18800018}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="c7e401e61c297b74ec3bf4", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf250b0000000c00068008000100020000001c000580070001006962000007000100696200000700010069620000280001800c00028008000100080000001700010069623a76657468315f746f5f62726964676500006400058008000100756470003c00028008000300ffffff7f08000200000000000800030001000000080001000400000008000100"], 0xc8}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000200)={&(0x7f0000001480)=[{0x9, 0x8001, 0x0, 0x0}, {0x8, 0x11, 0x0, 0x0}], 0x2}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00']) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000011c0), 0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000300)) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) socket$caif_stream(0x25, 0x1, 0x0) getdents64(r5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) kernel console output (not intermixed with test programs): 0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5059acb9 code=0x7ffc0000 [ 107.142923][ T30] audit: type=1326 audit(1768908823.297:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5059acb9 code=0x7ffc0000 [ 107.168162][ T30] audit: type=1326 audit(1768908823.297:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5059acb9 code=0x7ffc0000 [ 107.279138][ T5921] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 107.310606][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.361952][ T30] audit: type=1326 audit(1768908823.297:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f0e5059acb9 code=0x7ffc0000 [ 107.385381][ T5921] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 107.408841][ T5921] usb 3-1: media controller created [ 107.563971][ T30] audit: type=1326 audit(1768908823.297:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5059acb9 code=0x7ffc0000 [ 107.685823][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.184277][ T5921] DVB: Unable to find symbol dib7000p_attach() [ 109.299979][ T5921] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 109.514148][ T5921] rc_core: IR keymap rc-dib0700-rc5 not found [ 109.589052][ T5921] Registered IR keymap rc-empty [ 109.609894][ T5921] dvb-usb: could not initialize remote control. [ 109.696508][ T5921] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 110.020606][ T5921] usb 3-1: USB disconnect, device number 2 [ 110.093587][ T5921] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 110.189639][ T6055] hub 1-0:1.0: USB hub found [ 110.197323][ T6055] hub 1-0:1.0: 1 port detected [ 112.820596][ T6073] capability: warning: `syz.2.31' uses deprecated v2 capabilities in a way that may be insecure [ 114.539150][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.717042][ T39] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 114.729166][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.745277][ T39] usb 1-1: Product: syz [ 114.754639][ T39] usb 1-1: Manufacturer: syz [ 114.760131][ T39] usb 1-1: SerialNumber: syz [ 114.784463][ T39] hub 1-1:24.0: bad descriptor, ignoring hub [ 114.811391][ T39] hub 1-1:24.0: probe with driver hub failed with error -5 [ 115.108603][ T39] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 115.287566][ T6096] loop7: detected capacity change from 0 to 7 [ 115.473090][ T39] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.489448][ T39] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 115.498000][ T39] usb 1-1: media controller created [ 115.521910][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.731461][ T6096] Dev loop7: unable to read RDB block 7 [ 115.779067][ T6096] loop7: unable to read partition table [ 115.836048][ T6096] loop7: partition table beyond EOD, truncated [ 115.842354][ T6096] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 115.929839][ T39] DVB: Unable to find symbol dib7000p_attach() [ 115.943868][ T39] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 116.111712][ T39] rc_core: IR keymap rc-dib0700-rc5 not found [ 116.117850][ T39] Registered IR keymap rc-empty [ 116.162721][ T39] dvb-usb: could not initialize remote control. [ 116.167800][ T5200] Dev loop7: unable to read RDB block 7 [ 116.169392][ T39] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 116.280765][ T5200] loop7: unable to read partition table [ 116.286737][ T5200] loop7: partition table beyond EOD, truncated [ 116.945841][ T6108] veth1_to_batadv: entered promiscuous mode [ 117.763398][ T39] usb 1-1: USB disconnect, device number 2 [ 117.921078][ T39] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 118.077893][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 118.858479][ T6131] netlink: 'syz.3.42': attribute type 2 has an invalid length. [ 121.237921][ T6146] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 121.304033][ T6146] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 121.486558][ T6150] hub 9-0:1.0: USB hub found [ 121.518608][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.48'. [ 121.559412][ T6150] hub 9-0:1.0: 1 port detected [ 121.657727][ T6151] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 121.797127][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 121.915647][ T6156] erspan0: entered promiscuous mode [ 122.717493][ T6162] netlink: 36 bytes leftover after parsing attributes in process `syz.4.50'. [ 124.982108][ T6183] netlink: 'syz.1.53': attribute type 4 has an invalid length. [ 124.999680][ T6183] netlink: 'syz.1.53': attribute type 4 has an invalid length. [ 125.396028][ T6191] vlan2: entered promiscuous mode [ 125.432302][ T6191] bridge0: entered promiscuous mode [ 125.457035][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 125.590126][ T6194] bridge_slave_1: left allmulticast mode [ 125.595953][ T6194] bridge_slave_1: left promiscuous mode [ 125.686857][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.861742][ T6194] bridge_slave_0: left allmulticast mode [ 125.867546][ T6194] bridge_slave_0: left promiscuous mode [ 125.876612][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.839039][ T5921] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 127.979101][ T39] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.192956][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.205396][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.364596][ T5921] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 128.388107][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.424606][ T5921] usb 4-1: config 0 descriptor?? [ 128.444816][ T39] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 128.621913][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.647007][ T39] usb 1-1: Product: syz [ 128.675893][ T39] usb 1-1: Manufacturer: syz [ 128.692962][ T39] usb 1-1: SerialNumber: syz [ 128.725035][ T39] hub 1-1:24.0: bad descriptor, ignoring hub [ 128.733225][ T39] hub 1-1:24.0: probe with driver hub failed with error -5 [ 129.016215][ T39] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 129.074578][ T39] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.129948][ T6224] Zero length message leads to an empty skb [ 129.138670][ T6224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.192181][ T6224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.327006][ T39] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 129.361779][ T39] usb 1-1: media controller created [ 129.409587][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.621382][ T39] DVB: Unable to find symbol dib7000p_attach() [ 129.630918][ T39] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 129.962679][ T39] rc_core: IR keymap rc-dib0700-rc5 not found [ 129.995188][ T39] Registered IR keymap rc-empty [ 130.013555][ T39] dvb-usb: could not initialize remote control. [ 130.053531][ T39] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 130.517820][ T39] usb 1-1: USB disconnect, device number 3 [ 130.692638][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.890619][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 130.900261][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 130.910317][ T10] usb 2-1: can't read configurations, error -61 [ 130.964796][ T39] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 131.880729][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.119015][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 132.128835][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 132.412033][ T6242] program syz.2.65 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.458091][ T10] usb 2-1: can't read configurations, error -61 [ 132.500793][ T10] usb usb2-port1: attempt power cycle [ 133.046886][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.198628][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 133.894600][ T5921] usbhid 4-1:0.0: can't add hid device: -32 [ 133.915557][ T5921] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 134.127061][ T5921] usb 4-1: USB disconnect, device number 2 [ 134.529058][ T6251] netlink: 60 bytes leftover after parsing attributes in process `syz.0.66'. [ 134.539292][ T6251] unsupported nlmsg_type 40 [ 134.639072][ T5921] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.858616][ T6260] netlink: 80 bytes leftover after parsing attributes in process `syz.4.68'. [ 134.875597][ T6260] netlink: 40 bytes leftover after parsing attributes in process `syz.4.68'. [ 134.884969][ T6260] netlink: 40 bytes leftover after parsing attributes in process `syz.4.68'. [ 135.049096][ T5921] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 135.059117][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.080914][ T5921] usb 4-1: Product: syz [ 135.085288][ T5921] usb 4-1: Manufacturer: syz [ 135.105105][ T5921] usb 4-1: SerialNumber: syz [ 135.167583][ T6264] netlink: 'syz.2.69': attribute type 4 has an invalid length. [ 135.186908][ T6264] netlink: 'syz.2.69': attribute type 4 has an invalid length. [ 135.270836][ T5921] hub 4-1:24.0: bad descriptor, ignoring hub [ 135.276998][ T5921] hub 4-1:24.0: probe with driver hub failed with error -5 [ 135.439212][ T5921] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 135.635854][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.712533][ T5921] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 135.835683][ T5921] usb 4-1: media controller created [ 136.058550][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.384541][ T5921] DVB: Unable to find symbol dib7000p_attach() [ 136.404655][ T5921] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 136.495995][ T10] usb 2-1: device descriptor read/all, error -71 [ 136.729064][ T5921] rc_core: IR keymap rc-dib0700-rc5 not found [ 136.752509][ T5921] Registered IR keymap rc-empty [ 136.844763][ T5921] dvb-usb: could not initialize remote control. [ 136.868311][ T5921] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 136.902432][ T5921] usb 4-1: USB disconnect, device number 3 [ 137.030842][ T5921] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 137.424112][ T5921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.640317][ T5921] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.246863][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.253917][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.980738][ T6317] netlink: 'syz.4.79': attribute type 6 has an invalid length. [ 140.999018][ T6317] netlink: 'syz.4.79': attribute type 7 has an invalid length. [ 141.007537][ T6317] netlink: 'syz.4.79': attribute type 8 has an invalid length. [ 141.189043][ T5921] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 141.368548][ T5921] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 141.378793][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.131852][ T5921] usb 1-1: Product: syz [ 142.140158][ T5921] usb 1-1: Manufacturer: syz [ 142.144835][ T5921] usb 1-1: SerialNumber: syz [ 142.165376][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 142.243831][ T5921] hub 1-1:24.0: bad descriptor, ignoring hub [ 142.253174][ T5921] hub 1-1:24.0: probe with driver hub failed with error -5 [ 142.488883][ T5921] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 142.522820][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.552007][ T10] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 142.569634][ T5921] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 142.621663][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 142.634824][ T5921] usb 1-1: media controller created [ 142.693916][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.833948][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.869549][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.927292][ T10] usb 5-1: config 0 descriptor?? [ 142.951484][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 143.248085][ T5921] DVB: Unable to find symbol dib7000p_attach() [ 143.319562][ T5921] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 143.640145][ T5921] rc_core: IR keymap rc-dib0700-rc5 not found [ 143.798735][ T6339] netlink: 80 bytes leftover after parsing attributes in process `syz.1.82'. [ 143.810555][ T6339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.82'. [ 143.819539][ T6339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.82'. [ 144.050928][ T5921] Registered IR keymap rc-empty [ 144.065560][ T5921] dvb-usb: could not initialize remote control. [ 144.119686][ T5921] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 144.218514][ T5921] usb 1-1: USB disconnect, device number 4 [ 144.647255][ T5921] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 145.365464][ T5921] usb 5-1: USB disconnect, device number 2 [ 145.814178][ T6367] loop7: detected capacity change from 0 to 7 [ 146.311601][ T6367] Dev loop7: unable to read RDB block 7 [ 146.351126][ T6367] loop7: unable to read partition table [ 146.362262][ T6367] loop7: partition table beyond EOD, truncated [ 146.413875][ T6367] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 147.153427][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.163328][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.178621][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.188283][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.196471][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.206066][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.215530][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.225233][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.243024][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.252834][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.263218][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.272923][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.282208][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.291807][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.299845][ T5200] ldm_validate_partition_table(): Disk read failed. [ 147.309014][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.318730][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.328104][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.338071][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.346540][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.356187][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.366777][ T5200] Dev loop7: unable to read RDB block 0 [ 147.380679][ T5200] loop7: unable to read partition table [ 147.405102][ T5200] loop7: partition table beyond EOD, truncated [ 150.695910][ T6428] loop6: detected capacity change from 0 to 524288000 [ 150.859168][ T5931] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 151.011994][ T6431] netlink: 388 bytes leftover after parsing attributes in process `syz.2.94'. [ 151.184534][ T5931] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 151.299415][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.327213][ T5931] usb 4-1: Product: syz [ 151.360664][ T5931] usb 4-1: Manufacturer: syz [ 151.401730][ T5931] usb 4-1: SerialNumber: syz [ 151.423560][ T5931] hub 4-1:24.0: bad descriptor, ignoring hub [ 151.449108][ T5931] hub 4-1:24.0: probe with driver hub failed with error -5 [ 151.637702][ T5931] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 151.702310][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 151.794647][ T5931] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 151.894848][ T5931] usb 4-1: media controller created [ 152.529889][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.254667][ T6428] bond1: option ad_user_port_key: invalid value (25187) [ 153.269976][ T6428] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 153.280563][ T5931] DVB: Unable to find symbol dib7000p_attach() [ 153.286820][ T5931] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 154.453472][ T6447] netlink: 72 bytes leftover after parsing attributes in process `syz.0.97'. [ 154.466914][ T6447] netlink: 64 bytes leftover after parsing attributes in process `syz.0.97'. [ 154.665817][ T6428] bond1 (unregistering): Released all slaves [ 154.840331][ T5931] rc_core: IR keymap rc-dib0700-rc5 not found [ 154.913326][ T5931] Registered IR keymap rc-empty [ 154.930987][ T5931] dvb-usb: could not initialize remote control. [ 154.969217][ T5931] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 155.076310][ T5931] usb 4-1: USB disconnect, device number 4 [ 155.118219][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 155.285846][ T6462] netlink: 80 bytes leftover after parsing attributes in process `syz.3.99'. [ 155.296461][ T6462] netlink: 40 bytes leftover after parsing attributes in process `syz.3.99'. [ 155.309004][ T6462] netlink: 40 bytes leftover after parsing attributes in process `syz.3.99'. [ 155.463376][ T5931] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 157.569078][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 157.569100][ T30] audit: type=1326 audit(1768908874.777:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 157.673336][ T30] audit: type=1326 audit(1768908874.787:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 157.816180][ T30] audit: type=1326 audit(1768908874.787:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 157.848616][ T30] audit: type=1326 audit(1768908874.787:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 157.854144][ T6498] usb usb8: usbfs: process 6498 (syz.1.105) did not claim interface 0 before use [ 157.886470][ T30] audit: type=1326 audit(1768908874.787:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 157.911573][ T30] audit: type=1326 audit(1768908874.787:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6918f5b58e code=0x7ffc0000 [ 158.064728][ T30] audit: type=1326 audit(1768908874.787:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 158.247396][ T30] audit: type=1326 audit(1768908874.787:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 158.569460][ T30] audit: type=1326 audit(1768908874.787:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 158.698456][ T30] audit: type=1326 audit(1768908874.797:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 159.419151][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 159.629016][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 159.646187][ T6523] ptrace attach of "./syz-executor exec"[5846] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ        @  €  8   € \x09  þÿÿú ÿÿÿÿ"[6523] [ 159.742801][ T39] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.809109][ T39] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 159.842488][ T39] usb 3-1: config 0 interface 0 has no altsetting 0 [ 159.853914][ T39] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 159.863323][ T39] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 159.873263][ T39] usb 3-1: Product: syz [ 159.877460][ T39] usb 3-1: Manufacturer: syz [ 159.894430][ T39] usb 3-1: SerialNumber: syz [ 159.923395][ T39] usb 3-1: config 0 descriptor?? [ 160.206744][ T912] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 160.389115][ T912] usb 2-1: Using ep0 maxpacket: 16 [ 160.500943][ T912] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 160.521520][ T912] usb 2-1: config 0 has no interface number 0 [ 161.183973][ T912] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=cd.0f [ 161.193455][ T912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.209269][ T39] gs_usb 3-1:0.0: Couldn't get device config: (err=-110) [ 161.216330][ T39] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 161.224777][ T912] usb 2-1: Product: syz [ 161.236964][ T912] usb 2-1: Manufacturer: syz [ 161.326436][ T912] usb 2-1: SerialNumber: syz [ 161.350278][ T39] usb 3-1: USB disconnect, device number 3 [ 161.363299][ T912] usb 2-1: config 0 descriptor?? [ 161.400786][ T912] usb 2-1: active config #0 != 1 ?? [ 162.259485][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 163.166731][ T6561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.114'. [ 163.180087][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.188464][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.484762][ T6568] netlink: 'syz.3.115': attribute type 6 has an invalid length. [ 163.493072][ T6568] netlink: 'syz.3.115': attribute type 7 has an invalid length. [ 163.514962][ T6568] netlink: 'syz.3.115': attribute type 8 has an invalid length. [ 163.849236][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 164.043359][ T10] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 164.092350][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 164.134736][ T5908] usb 2-1: USB disconnect, device number 7 [ 164.141098][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.189766][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.228735][ T10] usb 4-1: config 0 descriptor?? [ 164.259916][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 164.689159][ T39] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 164.857789][ T39] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 164.892837][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.921409][ T39] usb 3-1: Product: syz [ 164.946123][ T39] usb 3-1: Manufacturer: syz [ 164.965155][ T39] usb 3-1: SerialNumber: syz [ 165.006841][ T39] hub 3-1:24.0: bad descriptor, ignoring hub [ 165.055238][ T39] hub 3-1:24.0: probe with driver hub failed with error -5 [ 165.215084][ T39] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 165.236673][ T39] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 165.289343][ T5908] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 165.301919][ T39] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 165.312869][ T39] usb 3-1: media controller created [ 165.328704][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.543928][ T5908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.567521][ T39] DVB: Unable to find symbol dib7000p_attach() [ 165.585241][ T5908] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 165.625221][ T5908] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 165.634874][ T39] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 165.660442][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.786325][ T5908] usb 5-1: config 0 descriptor?? [ 165.807422][ T5908] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 165.828405][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 165.847935][ T5908] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 165.893826][ T5908] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 165.914877][ T5908] usb 5-1: media controller created [ 166.085576][ T39] rc_core: IR keymap rc-dib0700-rc5 not found [ 166.092635][ T39] Registered IR keymap rc-empty [ 166.098264][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.152684][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 166.211141][ T5908] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 166.246611][ T5908] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 166.284536][ T39] dvb-usb: could not initialize remote control. [ 166.293872][ T39] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 166.415729][ T5908] dvb-usb: schedule remote query interval to 150 msecs. [ 166.431909][ T5908] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 166.450891][ T5908] usb 5-1: USB disconnect, device number 3 [ 166.709780][ T5908] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 166.924875][ T39] usb 3-1: USB disconnect, device number 4 [ 167.066048][ T39] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 167.262514][ T5916] usb 4-1: USB disconnect, device number 5 [ 167.883881][ T39] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 168.050253][ T5916] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 168.237124][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 168.431818][ T5916] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 168.441611][ T5916] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 168.452373][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 168.489104][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 168.499765][ T39] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 168.508791][ T39] usb 5-1: config 0 has no interface number 0 [ 168.582862][ T39] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 168.596191][ T39] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 168.608162][ T39] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 168.629104][ T39] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 168.660920][ T39] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.668839][ T5916] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 168.763576][ T39] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 168.776391][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.798851][ T39] usb 5-1: Product: syz [ 168.809127][ T39] usb 5-1: Manufacturer: syz [ 168.813781][ T39] usb 5-1: SerialNumber: syz [ 168.837797][ T39] usb 5-1: config 0 descriptor?? [ 168.851234][ T5916] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 168.870690][ T39] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input14 [ 168.947162][ T5916] usb 4-1: Product: syz [ 168.955270][ T5916] usb 4-1: Manufacturer: syz [ 168.967543][ T5916] usb 4-1: SerialNumber: syz [ 168.985405][ T5916] usb 4-1: config 0 descriptor?? [ 170.258013][ T6627] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 170.260652][ T5916] gs_usb 4-1:0.0: Couldn't get device config: (err=-110) [ 170.264790][ T6627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.323346][ T5916] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 170.346285][ T6632] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 170.352079][ T6627] vhci_hcd vhci_hcd.0: Device attached [ 170.352938][ T6632] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.401513][ T5916] usb 4-1: USB disconnect, device number 6 [ 170.465965][ T6627] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 170.472721][ T6627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.579029][ T5901] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 170.599031][ T6627] vhci_hcd vhci_hcd.0: Device attached [ 170.626752][ T6632] vhci_hcd vhci_hcd.0: Device attached [ 170.635405][ T6635] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 170.642035][ T6635] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 170.673213][ T6627] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(15) [ 170.679874][ T6627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.688375][ T6635] vhci_hcd vhci_hcd.0: Device attached [ 170.701031][ T6627] vhci_hcd vhci_hcd.0: Device attached [ 170.723424][ T6627] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 170.730106][ T6627] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 170.779705][ T6632] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.820745][ T6632] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.825539][ T6627] vhci_hcd vhci_hcd.0: Device attached [ 170.869187][ T6632] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(27) [ 170.875852][ T6632] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.935191][ T6627] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.939811][ T6632] vhci_hcd vhci_hcd.0: Device attached [ 171.040737][ T39] usb 5-1: USB disconnect, device number 4 [ 171.149977][ T6645] vhci_hcd: connection closed [ 171.150770][ T6643] vhci_hcd: connection closed [ 171.156328][ T6639] vhci_hcd: connection closed [ 171.161638][ T6641] vhci_hcd: connection closed [ 171.166544][ T6637] vhci_hcd: connection closed [ 171.171850][ T6633] vhci_hcd: connection closed [ 171.176755][ T6628] vhci_hcd: connection reset by peer [ 171.209591][ T1140] vhci_hcd vhci_hcd.0: stop threads [ 171.261305][ T1140] vhci_hcd vhci_hcd.0: release socket [ 171.294115][ T1140] vhci_hcd vhci_hcd.0: disconnect device [ 171.325275][ T1140] vhci_hcd vhci_hcd.0: stop threads [ 171.354951][ T6652] netlink: 'syz.3.129': attribute type 4 has an invalid length. [ 171.370414][ T1140] vhci_hcd vhci_hcd.0: release socket [ 171.439111][ T1140] vhci_hcd vhci_hcd.0: disconnect device [ 171.454929][ T1140] vhci_hcd vhci_hcd.0: stop threads [ 171.461588][ T1140] vhci_hcd vhci_hcd.0: release socket [ 171.488823][ T6652] netlink: 'syz.3.129': attribute type 4 has an invalid length. [ 171.509081][ T1140] vhci_hcd vhci_hcd.0: disconnect device [ 171.529495][ T1140] vhci_hcd vhci_hcd.0: stop threads [ 171.565901][ T1140] vhci_hcd vhci_hcd.0: release socket [ 171.576039][ T1140] vhci_hcd vhci_hcd.0: disconnect device [ 171.739928][ T1140] vhci_hcd vhci_hcd.0: stop threads [ 171.786966][ T1140] vhci_hcd vhci_hcd.0: release socket [ 171.819753][ T1140] vhci_hcd vhci_hcd.0: disconnect device [ 171.856984][ T1140] vhci_hcd vhci_hcd.0: stop threads [ 171.886004][ T1140] vhci_hcd vhci_hcd.0: release socket [ 171.906118][ T1140] vhci_hcd vhci_hcd.0: disconnect device [ 171.947086][ T1140] vhci_hcd vhci_hcd.0: stop threads [ 171.983855][ T1140] vhci_hcd vhci_hcd.0: release socket [ 172.002113][ T1140] vhci_hcd vhci_hcd.0: disconnect device [ 172.324655][ T6665] netlink: 'syz.1.133': attribute type 21 has an invalid length. [ 172.339075][ T6665] netlink: 156 bytes leftover after parsing attributes in process `syz.1.133'. [ 174.419472][ T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 174.628669][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 174.781784][ T39] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 174.795051][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.829535][ T39] usb 3-1: Product: syz [ 174.870983][ T39] usb 3-1: Manufacturer: syz [ 174.880723][ T39] usb 3-1: SerialNumber: syz [ 174.929350][ T39] usb 3-1: config 0 descriptor?? [ 175.507238][ T39] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 175.807223][ T5901] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 176.751098][ T39] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 177.100378][ T912] usb usb34-port1: attempt power cycle [ 177.458432][ T6715] netlink: 'syz.3.143': attribute type 6 has an invalid length. [ 177.469021][ T6715] netlink: 'syz.3.143': attribute type 7 has an invalid length. [ 177.476789][ T6715] netlink: 'syz.3.143': attribute type 8 has an invalid length. [ 177.849103][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 177.864026][ T912] usb usb34-port1: unable to enumerate USB device [ 178.074925][ T10] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 178.144441][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 178.194589][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.227374][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.278154][ T10] usb 4-1: config 0 descriptor?? [ 178.323323][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 178.501915][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 178.501939][ T30] audit: type=1326 audit(1768908895.767:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824b19acb9 code=0x7ffc0000 [ 178.544996][ T30] audit: type=1326 audit(1768908895.767:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824b19acb9 code=0x7ffc0000 [ 178.695727][ T30] audit: type=1326 audit(1768908895.767:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f824b19acb9 code=0x7ffc0000 [ 178.729385][ T912] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 178.899029][ T912] usb 1-1: Using ep0 maxpacket: 32 [ 178.946552][ T912] usb 1-1: config 0 has an invalid interface number: 145 but max is 1 [ 178.993250][ T912] usb 1-1: config 0 has an invalid interface number: 43 but max is 1 [ 179.001911][ T912] usb 1-1: config 0 has no interface number 0 [ 179.008142][ T30] audit: type=1326 audit(1768908895.767:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824b19acb9 code=0x7ffc0000 [ 179.036708][ T912] usb 1-1: config 0 has no interface number 1 [ 179.044144][ T912] usb 1-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 179.236374][ T912] usb 1-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 179.250655][ T30] audit: type=1326 audit(1768908895.767:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f824b19acb9 code=0x7ffc0000 [ 179.277833][ T912] usb 1-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 179.352776][ T912] usb 1-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 179.367567][ T5901] usb 3-1: USB disconnect, device number 5 [ 179.373855][ T30] audit: type=1326 audit(1768908895.767:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824b19acb9 code=0x7ffc0000 [ 179.402568][ T912] usb 1-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 179.450997][ T912] usb 1-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 179.466920][ T30] audit: type=1326 audit(1768908895.777:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f824b19acb9 code=0x7ffc0000 [ 179.513142][ T912] usb 1-1: config 0 interface 145 has no altsetting 0 [ 179.536546][ T912] usb 1-1: config 0 interface 43 has no altsetting 0 [ 179.566070][ T30] audit: type=1326 audit(1768908895.777:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824b19acb9 code=0x7ffc0000 [ 179.625676][ T912] usb 1-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 179.646373][ T912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.660618][ T912] usb 1-1: Product: syz [ 179.691585][ T912] usb 1-1: Manufacturer: syz [ 179.704168][ T912] usb 1-1: SerialNumber: syz [ 179.712491][ T30] audit: type=1326 audit(1768908895.777:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f824b19acb9 code=0x7ffc0000 [ 179.744241][ T912] usb 1-1: config 0 descriptor?? [ 179.808622][ T30] audit: type=1326 audit(1768908895.777:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824b19acb9 code=0x7ffc0000 [ 180.047961][ T6734] netlink: 'syz.2.148': attribute type 21 has an invalid length. [ 180.057760][ T6734] netlink: 156 bytes leftover after parsing attributes in process `syz.2.148'. [ 180.515575][ T6740] netdevsim netdevsim4: Direct firmware load for / [ 180.515575][ T6740] failed with error -2 [ 180.569519][ T6740] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 180.569519][ T6740] [ 181.659156][ T912] keyspan_pda 1-1:0.145: required endpoints missing [ 181.788287][ T39] usb 4-1: USB disconnect, device number 7 [ 181.847135][ T912] keyspan_pda 1-1:0.43: Keyspan PDA converter detected [ 181.909536][ T912] usb 1-1: Keyspan PDA converter now attached to ttyUSB0 [ 181.950036][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 182.019348][ T912] usb 1-1: USB disconnect, device number 5 [ 182.042480][ T912] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 182.159908][ T912] keyspan_pda 1-1:0.43: device disconnected [ 183.499017][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 183.710594][ T10] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 183.723945][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.754762][ T10] usb 3-1: Product: syz [ 183.767375][ T10] usb 3-1: Manufacturer: syz [ 183.799527][ T10] usb 3-1: SerialNumber: syz [ 183.855056][ T10] hub 3-1:24.0: bad descriptor, ignoring hub [ 183.872770][ T10] hub 3-1:24.0: probe with driver hub failed with error -5 [ 184.055046][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 184.120600][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.130999][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 184.238964][ T912] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 184.262950][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 184.262968][ T30] audit: type=1326 audit(1768908901.577:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6766 comm="syz.1.156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff592d9acb9 code=0x0 [ 184.411358][ T10] usb 3-1: media controller created [ 184.446230][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.509413][ T912] usb 1-1: Using ep0 maxpacket: 8 [ 184.517958][ T912] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 184.530193][ T912] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 184.557892][ T912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.840819][ T912] usb 1-1: Product: syz [ 184.850644][ T912] usb 1-1: Manufacturer: syz [ 184.969694][ T912] usb 1-1: SerialNumber: syz [ 185.021385][ T912] usb 1-1: config 0 descriptor?? [ 185.030285][ T912] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 185.099730][ T10] DVB: Unable to find symbol dib7000p_attach() [ 185.119018][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 185.340503][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 185.346821][ T10] Registered IR keymap rc-empty [ 185.441479][ T10] dvb-usb: could not initialize remote control. [ 185.473010][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 185.510637][ T10] usb 3-1: USB disconnect, device number 6 [ 185.615807][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 186.360984][ T912] gspca_zc3xx: reg_w_i err -71 [ 186.678552][ T6790] use of bytesused == 0 is deprecated and will be removed in the future, [ 186.687330][ T6790] use the actual size instead. [ 187.029006][ T912] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 187.036757][ T912] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 187.098585][ T912] usb 1-1: USB disconnect, device number 6 [ 187.960743][ T6803] netlink: 'syz.4.163': attribute type 21 has an invalid length. [ 187.968719][ T6803] netlink: 156 bytes leftover after parsing attributes in process `syz.4.163'. [ 189.460365][ T6826] netlink: 'syz.3.166': attribute type 6 has an invalid length. [ 189.469604][ T6826] netlink: 'syz.3.166': attribute type 7 has an invalid length. [ 189.477307][ T6826] netlink: 'syz.3.166': attribute type 8 has an invalid length. [ 189.500106][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 189.728988][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 189.927099][ T10] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 189.952577][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 189.995187][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.024680][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.046305][ T10] usb 4-1: config 0 descriptor?? [ 190.109433][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 190.977397][ T30] audit: type=1326 audit(1768908908.267:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.4.170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e5059acb9 code=0x0 [ 191.645172][ T5955] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 192.035907][ T5955] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 192.083743][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.260503][ T5955] usb 1-1: Product: syz [ 192.265162][ T5955] usb 1-1: Manufacturer: syz [ 192.284865][ T5955] usb 1-1: SerialNumber: syz [ 192.327175][ T5955] hub 1-1:24.0: bad descriptor, ignoring hub [ 192.343179][ T5955] hub 1-1:24.0: probe with driver hub failed with error -5 [ 192.519387][ T5955] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 192.591022][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 192.789786][ T5955] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 192.829055][ T5955] usb 1-1: media controller created [ 192.895993][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.088380][ T912] usb 4-1: USB disconnect, device number 8 [ 193.190010][ T5955] DVB: Unable to find symbol dib7000p_attach() [ 193.225675][ T5955] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 193.440066][ T5955] rc_core: IR keymap rc-dib0700-rc5 not found [ 193.524686][ T5955] Registered IR keymap rc-empty [ 193.530521][ T5955] dvb-usb: could not initialize remote control. [ 193.574080][ T5955] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 193.982573][ T5955] usb 1-1: USB disconnect, device number 7 [ 194.211083][ T5955] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 195.001608][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 195.086718][ T6890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.180'. [ 195.338183][ T6897] hub 9-0:1.0: USB hub found [ 195.343371][ T6897] hub 9-0:1.0: 1 port detected [ 195.504956][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 195.631773][ T6902] erspan0: entered promiscuous mode [ 196.012287][ T6890] libceph: resolve '0..' (ret=-3): failed [ 196.511725][ T6911] fuse: Bad value for 'user_id' [ 196.516648][ T6911] fuse: Bad value for 'user_id' [ 197.349778][ T6918] netlink: 'syz.2.186': attribute type 6 has an invalid length. [ 197.357555][ T6918] netlink: 'syz.2.186': attribute type 7 has an invalid length. [ 197.365538][ T6918] netlink: 'syz.2.186': attribute type 8 has an invalid length. [ 197.546115][ T6923] netlink: 'syz.3.188': attribute type 10 has an invalid length. [ 197.719029][ T5921] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 197.891729][ T5921] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 197.958197][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 197.973260][ T5921] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.984818][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.009283][ T5955] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 198.152411][ T5921] usb 3-1: config 0 descriptor?? [ 198.210697][ T5921] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 198.218737][ T5955] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 198.229275][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.253906][ T5955] usb 5-1: Product: syz [ 198.271644][ T5955] usb 5-1: Manufacturer: syz [ 198.320546][ T5955] usb 5-1: SerialNumber: syz [ 198.358830][ T5955] hub 5-1:24.0: bad descriptor, ignoring hub [ 198.394045][ T5955] hub 5-1:24.0: probe with driver hub failed with error -5 [ 198.598165][ T5955] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 198.611684][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 198.622502][ T5955] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 198.631258][ T5955] usb 5-1: media controller created [ 198.750108][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.898305][ T5955] DVB: Unable to find symbol dib7000p_attach() [ 198.906359][ T5955] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 199.289309][ T5955] rc_core: IR keymap rc-dib0700-rc5 not found [ 199.300990][ T5955] Registered IR keymap rc-empty [ 199.386611][ T5955] dvb-usb: could not initialize remote control. [ 199.550916][ T5955] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 199.694092][ T5955] usb 5-1: USB disconnect, device number 5 [ 199.766923][ T5955] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 200.662599][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.687658][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.267156][ T5955] usb 3-1: USB disconnect, device number 7 [ 201.673161][ T6971] warning: `syz.2.197' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 201.854762][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 202.127399][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 202.181808][ T6975] vlan2: entered promiscuous mode [ 202.186938][ T6975] bridge0: entered promiscuous mode [ 202.217890][ T6981] bridge_slave_1: left allmulticast mode [ 202.236886][ T6981] bridge_slave_1: left promiscuous mode [ 202.254984][ T6981] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.316309][ T6981] bridge_slave_0: left allmulticast mode [ 202.323258][ T6981] bridge_slave_0: left promiscuous mode [ 202.376673][ T6981] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.390146][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 202.659550][ T10] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 202.834188][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.901285][ T10] usb 2-1: Product: syz [ 202.918141][ T10] usb 2-1: Manufacturer: syz [ 202.931729][ T10] usb 2-1: SerialNumber: syz [ 203.026241][ T10] hub 2-1:24.0: bad descriptor, ignoring hub [ 203.034813][ T10] hub 2-1:24.0: probe with driver hub failed with error -5 [ 203.239755][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 203.261445][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 203.311862][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 203.329831][ T10] usb 2-1: media controller created [ 203.391561][ T5901] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.404420][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.440066][ T5901] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 203.719150][ T10] DVB: Unable to find symbol dib7000p_attach() [ 203.752496][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 203.936001][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 203.947222][ T10] Registered IR keymap rc-empty [ 203.966591][ T10] dvb-usb: could not initialize remote control. [ 204.019089][ T5921] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 204.188218][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 204.200024][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 204.208323][ T5921] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 204.221860][ T5921] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 204.246443][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.358499][ T5921] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 204.368161][ T5921] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 204.376687][ T5921] usb 1-1: Product: syz [ 204.381906][ T5921] usb 1-1: Manufacturer: syz [ 204.396699][ T5921] usb 1-1: SerialNumber: syz [ 204.424790][ T5921] usb 1-1: config 0 descriptor?? [ 204.717399][ T10] usb 2-1: USB disconnect, device number 8 [ 205.062214][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 205.290861][ T5921] gs_usb 1-1:0.0: Couldn't get device config: (err=-71) [ 205.306138][ T5921] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 205.325614][ T5921] usb 1-1: USB disconnect, device number 8 [ 206.461006][ T7022] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 207.790137][ T7041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.212'. [ 208.448311][ T7045] vlan2: entered promiscuous mode [ 208.649347][ T7045] bridge0: entered promiscuous mode [ 208.683601][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 208.733821][ T7047] bridge_slave_1: left allmulticast mode [ 208.741499][ T7047] bridge_slave_1: left promiscuous mode [ 208.960199][ T7052] syz.0.215 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 208.989928][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.037675][ T7047] bridge_slave_0: left allmulticast mode [ 209.044253][ T7047] bridge_slave_0: left promiscuous mode [ 209.283969][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.940075][ T7056] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 210.169100][ T5955] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 210.348756][ T5955] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 210.374817][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.389000][ T5901] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 210.416337][ T5955] usb 2-1: Product: syz [ 210.426993][ T5955] usb 2-1: Manufacturer: syz [ 210.438106][ T5955] usb 2-1: SerialNumber: syz [ 210.458252][ T5955] hub 2-1:24.0: bad descriptor, ignoring hub [ 210.474500][ T5955] hub 2-1:24.0: probe with driver hub failed with error -5 [ 210.541463][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 210.549059][ T5901] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 210.559238][ T5901] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 210.578796][ T5901] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.599984][ T5901] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 210.609502][ T5901] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 210.625949][ T5901] usb 5-1: Product: syz [ 210.632276][ T5901] usb 5-1: Manufacturer: syz [ 210.638712][ T5901] usb 5-1: SerialNumber: syz [ 210.650134][ T5901] usb 5-1: config 0 descriptor?? [ 210.663652][ T5955] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 210.958980][ T30] audit: type=1326 audit(1768908928.137:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40519acb9 code=0x7ffc0000 [ 211.009004][ T30] audit: type=1326 audit(1768908928.137:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd40519acb9 code=0x7ffc0000 [ 211.048423][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.168131][ T5955] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 211.194559][ T30] audit: type=1326 audit(1768908928.147:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40519acb9 code=0x7ffc0000 [ 211.297670][ T30] audit: type=1326 audit(1768908928.157:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fd40519acb9 code=0x7ffc0000 [ 211.404716][ T5955] usb 2-1: media controller created [ 211.412790][ T30] audit: type=1326 audit(1768908928.157:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40519acb9 code=0x7ffc0000 [ 211.638825][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.821124][ T30] audit: type=1326 audit(1768908928.197:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd40515b58e code=0x7ffc0000 [ 211.849430][ T5901] gs_usb 5-1:0.0: Couldn't get device config: (err=-71) [ 211.871635][ T5901] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 211.930254][ T30] audit: type=1326 audit(1768908928.357:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40519acb9 code=0x7ffc0000 [ 211.955678][ T5901] usb 5-1: USB disconnect, device number 6 [ 212.033637][ T5955] DVB: Unable to find symbol dib7000p_attach() [ 212.042256][ T5955] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 212.060170][ T30] audit: type=1326 audit(1768908928.357:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40519acb9 code=0x7ffc0000 [ 212.660586][ T5955] rc_core: IR keymap rc-dib0700-rc5 not found [ 212.692142][ T5955] Registered IR keymap rc-empty [ 212.712994][ T5955] dvb-usb: could not initialize remote control. [ 212.742007][ T5955] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 213.001138][ T7091] trusted_key: syz.4.222 sent an empty control message without MSG_MORE. [ 213.209555][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 213.209608][ T7077] Bluetooth: hci1: command 0x0406 tx timeout [ 213.215633][ T7074] Bluetooth: hci4: command 0x0406 tx timeout [ 213.215681][ T7074] Bluetooth: hci3: command 0x0406 tx timeout [ 213.250332][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 213.306991][ T5955] usb 2-1: USB disconnect, device number 9 [ 213.666048][ T5955] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 213.784510][ T7099] netlink: 'syz.2.224': attribute type 6 has an invalid length. [ 213.792327][ T7099] netlink: 'syz.2.224': attribute type 7 has an invalid length. [ 213.800081][ T7099] netlink: 'syz.2.224': attribute type 8 has an invalid length. [ 214.078991][ T5901] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 214.303916][ T5901] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 214.319069][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 214.364847][ T5901] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.427431][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.448087][ T5901] usb 3-1: config 0 descriptor?? [ 214.462246][ T5901] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 214.816328][ T7106] mmap: syz.1.225 (7106) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 214.838816][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.225'. [ 216.784176][ T7119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.227'. [ 217.514100][ T912] usb 3-1: USB disconnect, device number 8 [ 217.570845][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 219.159232][ T5916] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 219.313833][ T5916] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 219.333371][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.356294][ T5916] usb 4-1: Product: syz [ 219.376177][ T5916] usb 4-1: Manufacturer: syz [ 219.387986][ T5916] usb 4-1: SerialNumber: syz [ 219.558694][ T5916] hub 4-1:24.0: bad descriptor, ignoring hub [ 219.625929][ T5916] hub 4-1:24.0: probe with driver hub failed with error -5 [ 219.702118][ T5916] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 219.808144][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.239698][ T5916] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 220.248235][ T5916] usb 4-1: media controller created [ 220.756603][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.587535][ T5916] DVB: Unable to find symbol dib7000p_attach() [ 221.608268][ T5916] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 221.971998][ T5916] rc_core: IR keymap rc-dib0700-rc5 not found [ 221.978152][ T5916] Registered IR keymap rc-empty [ 222.199302][ T5916] dvb-usb: could not initialize remote control. [ 222.215701][ T5916] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 222.242918][ T7173] netlink: 72 bytes leftover after parsing attributes in process `syz.4.239'. [ 222.256437][ T7173] netlink: 64 bytes leftover after parsing attributes in process `syz.4.239'. [ 222.311152][ T5916] usb 4-1: USB disconnect, device number 9 [ 222.478837][ T5916] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 222.898653][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 223.122830][ T5916] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 223.296704][ T5916] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 223.311675][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.330343][ T5916] usb 4-1: Product: syz [ 223.334995][ T5916] usb 4-1: Manufacturer: syz [ 223.349132][ T5916] usb 4-1: SerialNumber: syz [ 223.376570][ T5916] hub 4-1:24.0: bad descriptor, ignoring hub [ 223.383022][ T5916] hub 4-1:24.0: probe with driver hub failed with error -5 [ 223.575416][ T5916] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 223.639775][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.656095][ T5916] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 223.799301][ T7187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.079716][ T5916] usb 4-1: media controller created [ 224.110333][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.351363][ T5916] DVB: Unable to find symbol dib7000p_attach() [ 224.521993][ T5916] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 224.679418][ T5916] rc_core: IR keymap rc-dib0700-rc5 not found [ 224.709158][ T5916] Registered IR keymap rc-empty [ 224.714740][ T5916] dvb-usb: could not initialize remote control. [ 224.731060][ T5916] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 224.783074][ T5916] usb 4-1: USB disconnect, device number 10 [ 224.908443][ T5916] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 224.919001][ T7197] hub 9-0:1.0: USB hub found [ 224.945769][ T7197] hub 9-0:1.0: 1 port detected [ 225.082424][ T7199] netlink: 52 bytes leftover after parsing attributes in process `syz.2.246'. [ 225.115495][ T7199] netlink: 40 bytes leftover after parsing attributes in process `syz.2.246'. [ 225.142622][ T7201] binder: 7200:7201 ioctl ab03 0 returned -22 [ 225.161592][ T7201] binder: 7200:7201 ioctl 400454cd 324 returned -22 [ 225.202702][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 225.213648][ T7199] netlink: 40 bytes leftover after parsing attributes in process `syz.2.246'. [ 225.619187][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 225.911384][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 225.929300][ T9] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 225.938400][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 225.982983][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 226.019130][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.037540][ T9] usb 4-1: Product: syz [ 226.169772][ T9] usb 4-1: Manufacturer: syz [ 226.208961][ T9] usb 4-1: SerialNumber: syz [ 226.447859][ T9] uvcvideo 4-1:220.0: Found Unit with invalid ID 0 [ 226.479936][ T9] uvcvideo 4-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 226.516182][ T9] uvcvideo 4-1:220.0: No valid video chain found. [ 226.550025][ T9] usb 4-1: USB disconnect, device number 11 [ 227.349123][ T5921] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 227.361711][ T7222] netlink: 'syz.3.253': attribute type 4 has an invalid length. [ 227.379646][ T7222] netlink: 'syz.3.253': attribute type 4 has an invalid length. [ 227.869406][ T5921] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 227.908968][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.949062][ T5921] usb 2-1: Product: syz [ 227.953281][ T5921] usb 2-1: Manufacturer: syz [ 227.980936][ T5921] usb 2-1: SerialNumber: syz [ 228.198391][ T5921] hub 2-1:24.0: bad descriptor, ignoring hub [ 228.260431][ T5921] hub 2-1:24.0: probe with driver hub failed with error -5 [ 228.430444][ T5921] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 229.184631][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 229.227462][ T5921] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 229.332250][ T5921] usb 2-1: media controller created [ 229.390410][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.718156][ T5921] DVB: Unable to find symbol dib7000p_attach() [ 229.744783][ T5921] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 229.959558][ T5921] rc_core: IR keymap rc-dib0700-rc5 not found [ 230.032946][ T5921] Registered IR keymap rc-empty [ 230.050501][ T5921] dvb-usb: could not initialize remote control. [ 230.070627][ T5921] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 230.098432][ T5921] usb 2-1: USB disconnect, device number 10 [ 230.486505][ T5921] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 231.605755][ T30] audit: type=1326 audit(1768908948.917:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 231.840533][ T30] audit: type=1326 audit(1768908948.947:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff592d5b58e code=0x7ffc0000 [ 232.105696][ T7265] netlink: 52 bytes leftover after parsing attributes in process `syz.4.261'. [ 232.120523][ T7265] netlink: 40 bytes leftover after parsing attributes in process `syz.4.261'. [ 232.166611][ T7265] netlink: 40 bytes leftover after parsing attributes in process `syz.4.261'. [ 232.305160][ T30] audit: type=1326 audit(1768908948.957:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 232.419470][ T30] audit: type=1326 audit(1768908948.967:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 232.459025][ T30] audit: type=1326 audit(1768908948.967:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff592d5b58e code=0x7ffc0000 [ 232.679082][ T30] audit: type=1326 audit(1768908948.967:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 232.899625][ T30] audit: type=1326 audit(1768908948.967:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 232.924422][ T30] audit: type=1326 audit(1768908948.967:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 233.089052][ T30] audit: type=1326 audit(1768908948.967:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 233.125383][ T7270] loop6: detected capacity change from 0 to 524288000 [ 233.272890][ T30] audit: type=1326 audit(1768908948.967:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 233.352867][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 233.412660][ T7278] netlink: 388 bytes leftover after parsing attributes in process `syz.0.262'. [ 234.570670][ T7288] netlink: 'syz.4.265': attribute type 6 has an invalid length. [ 234.579493][ T7288] netlink: 'syz.4.265': attribute type 7 has an invalid length. [ 234.587310][ T7288] netlink: 'syz.4.265': attribute type 8 has an invalid length. [ 234.859598][ T5901] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 235.011477][ T5901] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 235.151426][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 235.206042][ T5901] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.223404][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.264541][ T5901] usb 5-1: config 0 descriptor?? [ 235.314607][ T5901] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 235.979152][ T6248] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 236.259368][ T6248] usb 3-1: Using ep0 maxpacket: 32 [ 236.281935][ T6248] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 236.294524][ T6248] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 236.345910][ T6248] usb 3-1: config 0 interface 0 has no altsetting 0 [ 236.413968][ T6248] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 236.424029][ T6248] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 236.435853][ T6248] usb 3-1: Product: syz [ 236.443709][ T6248] usb 3-1: Manufacturer: syz [ 236.455191][ T6248] usb 3-1: SerialNumber: syz [ 236.475551][ T6248] usb 3-1: config 0 descriptor?? [ 236.749197][ T5901] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 237.018122][ T5901] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 237.028552][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.092232][ T5901] usb 2-1: Product: syz [ 237.156622][ T5901] usb 2-1: Manufacturer: syz [ 237.162067][ T5901] usb 2-1: SerialNumber: syz [ 237.237965][ T5901] hub 2-1:24.0: bad descriptor, ignoring hub [ 237.276579][ T5901] hub 2-1:24.0: probe with driver hub failed with error -5 [ 237.380943][ T6248] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 237.393704][ T6248] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 237.426448][ T6248] usb 3-1: USB disconnect, device number 9 [ 237.440025][ T5901] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 237.484861][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 237.514389][ T5901] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 237.529068][ T5901] usb 2-1: media controller created [ 237.564592][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.996566][ T9] usb 5-1: USB disconnect, device number 7 [ 238.029030][ T6248] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 238.075811][ T5901] DVB: Unable to find symbol dib7000p_attach() [ 238.082319][ T5901] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 238.240970][ T6248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.263097][ T6248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.418387][ T7330] netlink: 'syz.4.274': attribute type 27 has an invalid length. [ 238.440418][ T5901] rc_core: IR keymap rc-dib0700-rc5 not found [ 238.447133][ T5901] Registered IR keymap rc-empty [ 238.457435][ T5901] dvb-usb: could not initialize remote control. [ 238.464846][ T5901] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 238.479153][ T6248] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 238.500494][ T6248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.528203][ T6248] usb 1-1: config 0 descriptor?? [ 238.809431][ T7310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.845364][ T7310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.852975][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 239.144035][ T6248] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 239.160440][ T6248] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 239.167740][ T6248] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 239.200391][ T6248] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 239.219025][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 239.242515][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 239.289981][ T9] usb 5-1: config 0 has no interface number 0 [ 239.331357][ T9] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 239.409630][ T7319] netlink: 48 bytes leftover after parsing attributes in process `syz.0.272'. [ 239.433579][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.491891][ T9] usb 5-1: Product: syz [ 239.506099][ T9] usb 5-1: Manufacturer: syz [ 239.524798][ T9] usb 5-1: SerialNumber: syz [ 239.554349][ T9] usb 5-1: config 0 descriptor?? [ 239.609740][ T5901] usb 2-1: USB disconnect, device number 11 [ 239.642122][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 239.752030][ T7318] syzkaller1: entered promiscuous mode [ 239.784589][ T7318] syzkaller1: entered allmulticast mode [ 239.796310][ T5901] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 240.189833][ T9] gspca_spca1528: reg_w err -110 [ 240.222564][ T7330] bond_slave_0: left promiscuous mode [ 240.228417][ T7330] bond_slave_1: left promiscuous mode [ 240.260675][ T9] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 240.394036][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.420538][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.640557][ T5921] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 240.789859][ T7346] netlink: 20 bytes leftover after parsing attributes in process `syz.3.276'. [ 241.194863][ T7331] syz_tun: left promiscuous mode [ 241.295456][ T7331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.324177][ T7331] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.384719][ T7331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.424685][ T1163] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.707669][ T1163] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.722070][ T1163] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.733282][ T1163] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.742443][ T1163] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.753761][ T1163] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.762931][ T1163] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.794876][ T1163] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.983787][ T912] usb 1-1: USB disconnect, device number 9 [ 243.067929][ T5921] usb 5-1: USB disconnect, device number 8 [ 244.080062][ T7374] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 244.255053][ T7379] netlink: 'syz.2.283': attribute type 4 has an invalid length. [ 244.273078][ T7379] netlink: 'syz.2.283': attribute type 4 has an invalid length. [ 245.435205][ T7387] netlink: 'syz.4.284': attribute type 6 has an invalid length. [ 245.453457][ T7387] netlink: 'syz.4.284': attribute type 7 has an invalid length. [ 245.480099][ T7387] netlink: 'syz.4.284': attribute type 8 has an invalid length. [ 245.819425][ T5901] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 245.899025][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 245.982900][ T5901] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 245.993989][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.013640][ T5901] usb 4-1: Product: syz [ 246.027367][ T5901] usb 4-1: Manufacturer: syz [ 246.043393][ T5901] usb 4-1: SerialNumber: syz [ 246.054695][ T9] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 246.108592][ T5901] hub 4-1:24.0: bad descriptor, ignoring hub [ 246.116234][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 246.139567][ T5901] hub 4-1:24.0: probe with driver hub failed with error -5 [ 246.157334][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.186772][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.207522][ T9] usb 5-1: config 0 descriptor?? [ 246.231455][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 246.308741][ T5901] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 246.324723][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 246.347185][ T5901] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 246.356294][ T5901] usb 4-1: media controller created [ 246.384453][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.608251][ T5901] DVB: Unable to find symbol dib7000p_attach() [ 246.614956][ T5901] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 247.008951][ T5901] rc_core: IR keymap rc-dib0700-rc5 not found [ 247.032236][ T5901] Registered IR keymap rc-empty [ 247.057600][ T5901] dvb-usb: could not initialize remote control. [ 247.111013][ T5901] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 247.809031][ T6248] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 247.833914][ T5901] usb 4-1: USB disconnect, device number 12 [ 247.952810][ T5901] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 248.029019][ T6248] usb 1-1: Using ep0 maxpacket: 32 [ 248.107383][ T6248] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 248.134851][ T6248] usb 1-1: config 0 has no interface number 0 [ 248.190642][ T6248] usb 1-1: config 0 interface 184 has no altsetting 0 [ 248.366803][ T6248] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 248.382183][ T6248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.424544][ T6248] usb 1-1: Product: syz [ 248.428763][ T6248] usb 1-1: Manufacturer: syz [ 248.449015][ T6248] usb 1-1: SerialNumber: syz [ 248.461825][ T6248] usb 1-1: config 0 descriptor?? [ 248.561537][ T6248] smsc75xx v1.0.0 [ 249.199660][ T5901] usb 5-1: USB disconnect, device number 9 [ 249.789004][ T912] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 250.039283][ T912] usb 2-1: Using ep0 maxpacket: 32 [ 250.058279][ T912] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 250.098970][ T912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.150036][ T912] usb 2-1: config 0 descriptor?? [ 250.428354][ T912] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 250.496538][ T912] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 250.505294][ T912] dib0700: firmware download failed at 7 with -22 [ 251.494067][ T6248] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 251.522620][ T6248] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 251.596886][ T6248] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 251.661988][ T6248] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 251.716499][ T6248] usb 1-1: USB disconnect, device number 10 [ 253.467376][ T6248] usb 2-1: USB disconnect, device number 12 [ 255.124415][ T7476] netlink: 40 bytes leftover after parsing attributes in process `syz.4.302'. [ 255.699125][ T7482] capability: warning: `syz.0.303' uses 32-bit capabilities (legacy support in use) [ 256.842624][ T7495] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 256.851307][ T7495] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 256.861403][ T7495] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 257.133889][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.306'. [ 258.001262][ T912] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 258.390281][ T912] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 258.401327][ T912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.410892][ T912] usb 5-1: Product: syz [ 258.418359][ T912] usb 5-1: Manufacturer: syz [ 258.430052][ T912] usb 5-1: SerialNumber: syz [ 258.519477][ T912] hub 5-1:24.0: bad descriptor, ignoring hub [ 258.528816][ T912] hub 5-1:24.0: probe with driver hub failed with error -5 [ 258.772222][ T912] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 258.811432][ T912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 258.849571][ T912] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 258.884583][ T912] usb 5-1: media controller created [ 258.907618][ T912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.083438][ T912] DVB: Unable to find symbol dib7000p_attach() [ 260.090341][ T912] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 260.260908][ T912] rc_core: IR keymap rc-dib0700-rc5 not found [ 260.276255][ T912] Registered IR keymap rc-empty [ 260.287007][ T912] dvb-usb: could not initialize remote control. [ 260.304623][ T912] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 261.270230][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 261.270250][ T30] audit: type=1326 audit(1768908978.547:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 261.413154][ T912] usb 5-1: USB disconnect, device number 10 [ 261.483528][ T30] audit: type=1326 audit(1768908978.547:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 261.729980][ T30] audit: type=1326 audit(1768908978.547:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 261.770217][ T912] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 261.824297][ T30] audit: type=1326 audit(1768908978.547:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 261.859862][ T30] audit: type=1326 audit(1768908978.547:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 262.028978][ T30] audit: type=1326 audit(1768908978.547:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 262.092373][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.098795][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.105244][ T30] audit: type=1326 audit(1768908978.547:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 262.291208][ T30] audit: type=1326 audit(1768908978.547:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 262.355145][ T30] audit: type=1326 audit(1768908978.547:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 262.399038][ T30] audit: type=1326 audit(1768908978.547:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff592d9acb9 code=0x7ffc0000 [ 263.734085][ T7555] netlink: 'syz.2.319': attribute type 6 has an invalid length. [ 263.741902][ T7555] netlink: 'syz.2.319': attribute type 7 has an invalid length. [ 263.749875][ T7555] netlink: 'syz.2.319': attribute type 8 has an invalid length. [ 265.123260][ T7569] netlink: 'syz.4.322': attribute type 6 has an invalid length. [ 265.131359][ T7569] netlink: 'syz.4.322': attribute type 7 has an invalid length. [ 265.139187][ T7569] netlink: 'syz.4.322': attribute type 8 has an invalid length. [ 265.419094][ T6248] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 265.603037][ T6248] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 265.636080][ T6248] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 265.684047][ T6248] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.757357][ T6248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.799252][ T6248] usb 5-1: config 0 descriptor?? [ 265.834660][ T6248] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 265.869080][ T912] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 266.052761][ T912] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 266.064324][ T912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.072531][ T912] usb 1-1: Product: syz [ 266.077122][ T912] usb 1-1: Manufacturer: syz [ 266.082349][ T912] usb 1-1: SerialNumber: syz [ 266.094019][ T912] hub 1-1:24.0: bad descriptor, ignoring hub [ 266.104937][ T912] hub 1-1:24.0: probe with driver hub failed with error -5 [ 266.309621][ T912] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 266.337796][ T912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 266.361106][ T912] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 266.381230][ T912] usb 1-1: media controller created [ 266.430976][ T912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.686831][ T912] DVB: Unable to find symbol dib7000p_attach() [ 266.697853][ T912] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 267.062547][ T912] rc_core: IR keymap rc-dib0700-rc5 not found [ 267.078950][ T912] Registered IR keymap rc-empty [ 267.089442][ T912] dvb-usb: could not initialize remote control. [ 267.139010][ T912] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 267.459970][ T912] usb 1-1: USB disconnect, device number 11 [ 267.691817][ T912] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 268.514143][ T9] usb 5-1: USB disconnect, device number 11 [ 268.600519][ T7599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.686782][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 269.918964][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 269.929849][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.000662][ T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 270.030823][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.048930][ T9] usb 5-1: Product: syz [ 270.209482][ T9] usb 5-1: Manufacturer: syz [ 270.236739][ T9] usb 5-1: SerialNumber: syz [ 270.291703][ T9] usb 5-1: config 0 descriptor?? [ 270.336689][ T9] snd_usb_variax 5-1:0.0: Line 6 Variax Workbench found [ 270.367096][ T9] usb 5-1: selecting invalid altsetting 1 [ 270.388149][ T9] snd_usb_variax 5-1:0.0: set_interface failed [ 270.425474][ T9] snd_usb_variax 5-1:0.0: Line 6 Variax Workbench now disconnected [ 270.464280][ T9] snd_usb_variax 5-1:0.0: probe with driver snd_usb_variax failed with error -22 [ 270.602118][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.614802][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.843870][ T912] usb 5-1: USB disconnect, device number 12 [ 274.557032][ T6248] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 274.748344][ T6248] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 274.757529][ T6248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.788524][ T6248] usb 1-1: Product: syz [ 274.798645][ T6248] usb 1-1: Manufacturer: syz [ 274.816776][ T6248] usb 1-1: SerialNumber: syz [ 274.857526][ T6248] hub 1-1:24.0: bad descriptor, ignoring hub [ 274.929127][ T6248] hub 1-1:24.0: probe with driver hub failed with error -5 [ 275.040279][ T6248] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 275.056117][ T6248] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 275.089563][ T6248] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 275.116912][ T6248] usb 1-1: media controller created [ 275.194415][ T6248] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.423223][ T6248] DVB: Unable to find symbol dib7000p_attach() [ 275.479042][ T6248] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 275.630450][ T6248] rc_core: IR keymap rc-dib0700-rc5 not found [ 275.653539][ T6248] Registered IR keymap rc-empty [ 275.677496][ T6248] dvb-usb: could not initialize remote control. [ 275.736598][ T7661] netlink: 'syz.4.344': attribute type 6 has an invalid length. [ 275.744733][ T7661] netlink: 'syz.4.344': attribute type 7 has an invalid length. [ 275.752502][ T7661] netlink: 'syz.4.344': attribute type 8 has an invalid length. [ 275.768565][ T6248] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 275.866297][ T6248] usb 1-1: USB disconnect, device number 12 [ 275.948337][ T6248] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 276.410900][ T7671] netlink: 72 bytes leftover after parsing attributes in process `syz.3.346'. [ 278.369786][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 278.369805][ T30] audit: type=1326 audit(1768908995.687:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5059acb9 code=0x7ffc0000 [ 278.535652][ T30] audit: type=1326 audit(1768908995.687:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5059acb9 code=0x7ffc0000 [ 278.652216][ T30] audit: type=1326 audit(1768908995.687:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f0e5059acb9 code=0x7ffc0000 [ 278.725968][ T30] audit: type=1326 audit(1768908995.687:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5059acb9 code=0x7ffc0000 [ 278.769059][ T30] audit: type=1326 audit(1768908995.687:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f0e5059acb9 code=0x7ffc0000 [ 278.809362][ T30] audit: type=1326 audit(1768908995.707:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5059acb9 code=0x7ffc0000 [ 279.080862][ T30] audit: type=1326 audit(1768908995.727:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f0e5059acb9 code=0x7ffc0000 [ 279.156635][ T30] audit: type=1326 audit(1768908995.727:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5059acb9 code=0x7ffc0000 [ 279.311132][ T30] audit: type=1326 audit(1768908995.727:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5059acb9 code=0x7ffc0000 [ 279.426231][ T30] audit: type=1326 audit(1768908995.737:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f0e5059acb9 code=0x7ffc0000 [ 284.148986][ T6248] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 284.405716][ T7754] netlink: 'syz.0.365': attribute type 13 has an invalid length. [ 284.413610][ T7754] netlink: 'syz.0.365': attribute type 27 has an invalid length. [ 284.533677][ T6248] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 284.544622][ T6248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.561610][ T6248] usb 5-1: Product: syz [ 284.567589][ T6248] usb 5-1: Manufacturer: syz [ 284.585193][ T6248] usb 5-1: SerialNumber: syz [ 284.619836][ T6248] hub 5-1:24.0: bad descriptor, ignoring hub [ 284.648319][ T6248] hub 5-1:24.0: probe with driver hub failed with error -5 [ 284.821029][ T6248] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 284.836681][ T6248] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.870973][ T6248] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 284.881892][ T6248] usb 5-1: media controller created [ 285.024932][ T6248] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.430196][ T6248] DVB: Unable to find symbol dib7000p_attach() [ 285.436393][ T6248] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 285.638969][ T6248] rc_core: IR keymap rc-dib0700-rc5 not found [ 285.645155][ T6248] Registered IR keymap rc-empty [ 285.686555][ T6248] dvb-usb: could not initialize remote control. [ 285.716525][ T6248] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 285.757722][ T6248] usb 5-1: USB disconnect, device number 13 [ 285.896710][ T6248] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 286.149082][ T912] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 286.353998][ T912] usb 4-1: No LPM exit latency info found, disabling LPM. [ 286.523185][ T912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 286.575626][ T912] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 286.618060][ T912] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 286.847912][ T7775] netlink: 'syz.0.368': attribute type 6 has an invalid length. [ 286.855864][ T7775] netlink: 'syz.0.368': attribute type 7 has an invalid length. [ 286.863712][ T7775] netlink: 'syz.0.368': attribute type 8 has an invalid length. [ 286.999097][ T6248] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 287.109010][ T5921] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 287.161148][ T6248] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.171519][ T6248] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 287.231403][ T6248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.305722][ T5921] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 287.320861][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 287.335672][ T6248] usb 2-1: config 0 descriptor?? [ 287.356628][ T6248] pwc: Askey VC010 type 2 USB webcam detected. [ 287.378299][ T5921] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.407097][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.460127][ T5921] usb 1-1: config 0 descriptor?? [ 287.501580][ T5921] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 287.757985][ T6248] pwc: recv_control_msg error -32 req 02 val 2b00 [ 287.792136][ T6248] pwc: recv_control_msg error -32 req 02 val 2700 [ 287.818546][ T6248] pwc: recv_control_msg error -32 req 02 val 2c00 [ 287.839345][ T6248] pwc: recv_control_msg error -32 req 04 val 1000 [ 287.862082][ T6248] pwc: recv_control_msg error -32 req 04 val 1300 [ 287.886186][ T6248] pwc: recv_control_msg error -32 req 04 val 1400 [ 287.908709][ T6248] pwc: recv_control_msg error -32 req 02 val 2000 [ 287.922644][ T7771] vivid-000: ================= START STATUS ================= [ 287.947013][ T6248] pwc: recv_control_msg error -32 req 02 val 2100 [ 287.983701][ T7771] vivid-000: Test Pattern: 75% Colorbar [ 288.033735][ T7776] trusted_key: encrypted_key: keylen parameter is missing [ 288.049056][ T7771] vivid-000: Fill Percentage of Frame: 100 [ 288.132002][ T7771] vivid-000: Horizontal Movement: No Movement [ 288.187458][ T7771] vivid-000: Vertical Movement: No Movement [ 288.214802][ T7771] vivid-000: OSD Text Mode: All [ 288.229135][ T7771] vivid-000: Show Border: false [ 288.256132][ T7771] vivid-000: Show Square: false [ 288.284747][ T7771] vivid-000: Sensor Flipped Horizontally: false [ 288.331481][ T7771] vivid-000: Sensor Flipped Vertically: false [ 288.488638][ T7771] vivid-000: Insert SAV Code in Image: false [ 288.522062][ T7771] vivid-000: Insert EAV Code in Image: false [ 288.577200][ T7771] vivid-000: Insert Video Guard Band: false [ 288.598849][ T7771] vivid-000: Reduced Framerate: false [ 288.632136][ T7771] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 288.671956][ T912] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.693485][ T7771] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 288.715213][ T912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.769694][ T7771] vivid-000: Enable Capture Cropping: true [ 288.809255][ T912] usb 4-1: can't set config #1, error -71 [ 288.824073][ T7771] vivid-000: Enable Capture Composing: true [ 288.852152][ T7771] vivid-000: Enable Capture Scaler: true [ 288.903468][ T912] usb 4-1: USB disconnect, device number 13 [ 288.939922][ T7771] vivid-000: Timestamp Source: End of Frame [ 288.967789][ T7771] vivid-000: Colorspace: Rec. 709 [ 288.998732][ T7771] vivid-000: Transfer Function: Default [ 289.033319][ T7771] vivid-000: Y'CbCr Encoding: Default [ 289.056412][ T7771] vivid-000: HSV Encoding: Hue 0-179 [ 289.077375][ T7771] vivid-000: Quantization: Limited Range [ 289.095053][ T7771] vivid-000: Apply Alpha To Red Only: false [ 289.107969][ T7771] vivid-000: Standard Aspect Ratio: 4x3 [ 289.123642][ T7771] vivid-000: DV Timings Signal Mode: Current DV Timings [ 289.135791][ T7771] vivid-000: DV Timings: 640x480p59 inactive [ 289.212917][ T7771] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 289.232028][ T7771] vivid-000: Maximum EDID Blocks: 2 [ 289.256472][ T7771] vivid-000: Limited RGB Range (16-235): true [ 289.275552][ T7771] vivid-000: Rx RGB Quantization Range: Automatic [ 289.467234][ T7771] vivid-000: Power Present: 0x00000001 [ 289.512477][ T7771] tpg source WxH: 1280x720 (Y'CbCr) [ 289.563422][ T7771] tpg field: 1 [ 289.580252][ T7771] tpg crop: (0,0)/1280x720 [ 289.603302][ T7771] tpg compose: (0,0)/1280x720 [ 289.619118][ T7771] tpg colorspace: 3 [ 289.623014][ T7771] tpg transfer function: 0/0 [ 289.647260][ T7771] tpg Y'CbCr encoding: 0/0 [ 289.662195][ T7771] tpg quantization: 2/0 [ 289.675606][ T7771] tpg RGB range: 0/1 [ 289.686030][ T7771] vivid-000: ================== END STATUS ================== [ 289.778268][ T7792] netlink: 'syz.4.374': attribute type 6 has an invalid length. [ 289.786144][ T7792] netlink: 'syz.4.374': attribute type 7 has an invalid length. [ 289.803358][ T7786] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 289.815890][ T7792] netlink: 'syz.4.374': attribute type 8 has an invalid length. [ 289.832806][ T7786] team0: Port device batadv1 added [ 289.861135][ T6248] pwc: recv_control_msg error -71 req 02 val 2500 [ 289.966347][ T6248] pwc: recv_control_msg error -71 req 02 val 2400 [ 290.048759][ T6248] pwc: recv_control_msg error -71 req 02 val 2600 [ 290.067505][ T6248] pwc: recv_control_msg error -71 req 02 val 2900 [ 290.112215][ T6248] pwc: recv_control_msg error -71 req 02 val 2800 [ 290.130216][ T6248] pwc: recv_control_msg error -71 req 04 val 1100 [ 290.149451][ T6248] pwc: recv_control_msg error -71 req 04 val 1200 [ 290.255676][ T7799] netlink: 'syz.1.375': attribute type 6 has an invalid length. [ 290.263628][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 290.276354][ T7799] netlink: 'syz.1.375': attribute type 7 has an invalid length. [ 290.284971][ T7799] netlink: 'syz.1.375': attribute type 8 has an invalid length. [ 290.324961][ T6248] pwc: Registered as video103. [ 290.399553][ T6248] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29 [ 290.445648][ T9] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 290.489608][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 290.513039][ T6248] usb 2-1: USB disconnect, device number 13 [ 290.552029][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.613533][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.623491][ T5901] usb 1-1: USB disconnect, device number 13 [ 290.667026][ T9] usb 5-1: config 0 descriptor?? [ 290.753993][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 291.108917][ T7805] netlink: 'syz.0.376': attribute type 27 has an invalid length. [ 291.836777][ T7805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.871579][ T7805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.037713][ T6248] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 292.096651][ T7805] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 292.240643][ T6248] usb 1-1: Using ep0 maxpacket: 16 [ 292.267155][ T6248] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.327111][ T6248] usb 1-1: config 0 has no interface number 0 [ 292.403631][ T6248] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 292.426222][ T6248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.448751][ T6248] usb 1-1: Product: syz [ 292.465263][ T6248] usb 1-1: Manufacturer: syz [ 292.479128][ T6248] usb 1-1: SerialNumber: syz [ 292.510223][ T6248] usb 1-1: config 0 descriptor?? [ 292.533733][ T7807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.581002][ T6248] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 292.601358][ T7807] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.994483][ T7807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.059980][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.080704][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.090263][ T5921] usb 5-1: USB disconnect, device number 14 [ 293.118367][ T6248] gspca_spca1528: reg_w err -110 [ 293.154497][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.169531][ T6248] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 293.238205][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.056643][ T7826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.654580][ T912] usb 1-1: USB disconnect, device number 14 [ 295.439758][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 295.627830][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 295.637011][ T7844] bridge_slave_1: left allmulticast mode [ 295.643712][ T7844] bridge_slave_1: left promiscuous mode [ 295.649955][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.984773][ T7844] bridge_slave_0: left allmulticast mode [ 295.991097][ T7844] bridge_slave_0: left promiscuous mode [ 296.031420][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.429445][ T7854] netlink: 'syz.1.386': attribute type 6 has an invalid length. [ 296.437307][ T7854] netlink: 'syz.1.386': attribute type 7 has an invalid length. [ 296.445078][ T7854] netlink: 'syz.1.386': attribute type 8 has an invalid length. [ 296.750266][ T5919] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 296.943664][ T5919] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 296.977636][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 297.037744][ T5919] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.069528][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.130956][ T5919] usb 2-1: config 0 descriptor?? [ 297.188993][ T5919] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 299.733113][ T7880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.391'. [ 299.953280][ T7882] netlink: 'syz.4.394': attribute type 4 has an invalid length. [ 299.971825][ T7882] netlink: 'syz.4.394': attribute type 4 has an invalid length. [ 299.987971][ T912] usb 2-1: USB disconnect, device number 14 [ 300.416298][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 300.416319][ T30] audit: type=1326 audit(1768909017.667:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40519acb9 code=0x7ffc0000 [ 300.482315][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'. [ 300.509066][ T30] audit: type=1326 audit(1768909017.667:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40519acb9 code=0x7ffc0000 [ 300.542346][ T5901] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 300.606406][ T30] audit: type=1326 audit(1768909017.667:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd40519acb9 code=0x7ffc0000 [ 300.840001][ T5901] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 300.849357][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.893693][ T30] audit: type=1326 audit(1768909017.667:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40519acb9 code=0x7ffc0000 [ 300.940153][ T5901] usb 1-1: Product: syz [ 300.944467][ T5901] usb 1-1: Manufacturer: syz [ 300.949126][ T6248] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 301.089048][ T30] audit: type=1326 audit(1768909017.667:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd40519acb9 code=0x7ffc0000 [ 301.089391][ T5901] usb 1-1: SerialNumber: syz [ 301.198642][ T30] audit: type=1326 audit(1768909017.667:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40519acb9 code=0x7ffc0000 [ 301.221201][ T6248] usb 2-1: Using ep0 maxpacket: 32 [ 301.230882][ T6248] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 301.259799][ T6248] usb 2-1: config 0 has no interface number 0 [ 301.275475][ T6248] usb 2-1: config 0 interface 184 has no altsetting 0 [ 301.293908][ T30] audit: type=1326 audit(1768909017.667:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd40519acb9 code=0x7ffc0000 [ 301.320332][ T6248] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 301.343594][ T6248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.369079][ T6248] usb 2-1: Product: syz [ 301.380841][ T30] audit: type=1326 audit(1768909017.677:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40519acb9 code=0x7ffc0000 [ 301.410064][ T6248] usb 2-1: Manufacturer: syz [ 301.414727][ T6248] usb 2-1: SerialNumber: syz [ 301.447052][ T6248] usb 2-1: config 0 descriptor?? [ 301.469697][ T6248] smsc75xx v1.0.0 [ 301.479264][ T30] audit: type=1326 audit(1768909017.677:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd40515b58e code=0x7ffc0000 [ 301.526069][ T5901] hub 1-1:24.0: bad descriptor, ignoring hub [ 301.553088][ T5901] hub 1-1:24.0: probe with driver hub failed with error -5 [ 301.648205][ T5901] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 301.688292][ T30] audit: type=1326 audit(1768909017.677:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40519acb9 code=0x7ffc0000 [ 301.819703][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 301.904755][ T5901] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 301.943465][ T5901] usb 1-1: media controller created [ 302.011606][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.487821][ T5901] DVB: Unable to find symbol dib7000p_attach() [ 302.560712][ T5901] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 302.970481][ T5901] rc_core: IR keymap rc-dib0700-rc5 not found [ 303.003949][ T5901] Registered IR keymap rc-empty [ 303.025127][ T5901] dvb-usb: could not initialize remote control. [ 303.062505][ T5901] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 303.134505][ T5901] usb 1-1: USB disconnect, device number 15 [ 303.334503][ T5901] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 303.952747][ T6248] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 303.994324][ T6248] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 304.028427][ T6248] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 304.061699][ T6248] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 304.105685][ T6248] usb 2-1: USB disconnect, device number 15 [ 304.247344][ T7923] netlink: 'syz.0.403': attribute type 2 has an invalid length. [ 304.508959][ T5921] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 304.698994][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 304.708096][ T5921] usb 1-1: config index 0 descriptor too short (expected 36, got 35) [ 304.787437][ T5921] usb 1-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 304.814640][ T5921] usb 1-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.879155][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 304.936762][ T5921] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 304.988115][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.036435][ T5921] usb 1-1: config 0 descriptor?? [ 305.500179][ T7945] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 305.500349][ T7945] block device autoloading is deprecated and will be removed. [ 306.053906][ T7950] netlink: 'syz.4.411': attribute type 4 has an invalid length. [ 306.062096][ T7950] netlink: 'syz.4.411': attribute type 4 has an invalid length. [ 306.813968][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 306.813988][ T30] audit: type=1326 audit(1768909024.107:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 306.866392][ T30] audit: type=1326 audit(1768909024.107:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 306.917591][ T30] audit: type=1326 audit(1768909024.107:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 306.970237][ T30] audit: type=1326 audit(1768909024.107:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 306.993262][ T912] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 307.020183][ T30] audit: type=1326 audit(1768909024.107:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 307.082457][ T30] audit: type=1326 audit(1768909024.107:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 307.183617][ T912] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 307.193825][ T912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.203335][ T912] usb 2-1: Product: syz [ 307.207797][ T30] audit: type=1326 audit(1768909024.107:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 307.263269][ T912] usb 2-1: Manufacturer: syz [ 307.268990][ T912] usb 2-1: SerialNumber: syz [ 307.277351][ T30] audit: type=1326 audit(1768909024.107:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 307.306149][ T7960] netlink: 'syz.2.414': attribute type 4 has an invalid length. [ 307.342835][ T912] hub 2-1:24.0: bad descriptor, ignoring hub [ 307.355144][ T7960] netlink: 'syz.2.414': attribute type 4 has an invalid length. [ 307.368812][ T912] hub 2-1:24.0: probe with driver hub failed with error -5 [ 307.518652][ T30] audit: type=1326 audit(1768909024.107:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 307.591994][ T30] audit: type=1326 audit(1768909024.117:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f6918f9acb9 code=0x7ffc0000 [ 307.644946][ T912] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 307.710595][ T912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 307.805091][ T912] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 307.844517][ T912] usb 2-1: media controller created [ 307.984627][ T912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.505364][ T912] DVB: Unable to find symbol dib7000p_attach() [ 308.541478][ T912] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 308.757607][ T5921] usb 1-1: string descriptor 0 read error: -71 [ 308.826428][ T5921] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 308.869357][ T912] rc_core: IR keymap rc-dib0700-rc5 not found [ 308.875492][ T912] Registered IR keymap rc-empty [ 308.879317][ T5921] usb 1-1: USB disconnect, device number 16 [ 308.900063][ T912] dvb-usb: could not initialize remote control. [ 308.912877][ T912] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 309.010902][ T912] usb 2-1: USB disconnect, device number 16 [ 309.112328][ T7971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.416'. [ 309.502934][ T912] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 311.300629][ T7994] netlink: 'syz.3.421': attribute type 6 has an invalid length. [ 311.308498][ T7994] netlink: 'syz.3.421': attribute type 7 has an invalid length. [ 311.390832][ T7994] netlink: 'syz.3.421': attribute type 8 has an invalid length. [ 313.049189][ T39] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 313.982087][ T39] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 313.993428][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.006040][ T39] usb 2-1: Product: syz [ 314.018004][ T39] usb 2-1: Manufacturer: syz [ 314.028173][ T39] usb 2-1: SerialNumber: syz [ 314.067286][ T39] hub 2-1:24.0: bad descriptor, ignoring hub [ 314.085266][ T39] hub 2-1:24.0: probe with driver hub failed with error -5 [ 314.254756][ T39] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 314.345025][ T39] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 314.375370][ T39] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 314.449288][ T39] usb 2-1: media controller created [ 314.505776][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 314.586067][ T8018] fuse: Bad value for 'fd' [ 314.603157][ T8018] netlink: 40 bytes leftover after parsing attributes in process `syz.0.424'. [ 314.752786][ T39] DVB: Unable to find symbol dib7000p_attach() [ 314.790056][ T39] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 314.989062][ T39] rc_core: IR keymap rc-dib0700-rc5 not found [ 314.995265][ T39] Registered IR keymap rc-empty [ 315.002561][ T39] dvb-usb: could not initialize remote control. [ 315.069036][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 315.238661][ T39] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 315.512572][ T9] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 315.522028][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.650208][ T39] usb 2-1: USB disconnect, device number 17 [ 315.718083][ T9] usb 5-1: Product: syz [ 315.743122][ T39] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 315.753871][ T9] usb 5-1: Manufacturer: syz [ 315.815703][ T9] usb 5-1: SerialNumber: syz [ 315.879169][ T9] hub 5-1:24.0: bad descriptor, ignoring hub [ 315.885238][ T9] hub 5-1:24.0: probe with driver hub failed with error -5 [ 315.919546][ T5919] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 316.056788][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 316.093278][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.119002][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 316.145622][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 316.165029][ T5919] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 316.177030][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 316.195524][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.249292][ T9] usb 5-1: media controller created [ 316.308099][ T5919] usb 4-1: config 0 descriptor?? [ 316.402687][ T5919] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 316.425591][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 316.438468][ T5919] dvb-usb: bulk message failed: -22 (3/0) [ 316.555631][ T5919] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 316.593890][ T5919] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 316.614049][ T8033] ------------[ cut here ]------------ [ 316.619790][ T8033] usb 5-1: BOGUS control dir, pipe 80000f80 doesn't match bRequestType c0 [ 316.628377][ T8033] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#0: syz.3.429/8033 [ 316.638801][ T8033] Modules linked in: [ 316.643109][ T8033] CPU: 0 UID: 0 PID: 8033 Comm: syz.3.429 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.654053][ T8033] Tainted: [L]=SOFTLOCKUP [ 316.658417][ T8033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 316.668549][ T8033] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 316.674257][ T8033] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 316.694011][ T8033] RSP: 0018:ffffc90004e6f948 EFLAGS: 00010246 [ 316.700216][ T8033] RAX: 0000000000000000 RBX: ffff888146b4a900 RCX: 0000000080000f80 [ 316.708223][ T8033] RDX: ffff88801148e900 RSI: ffffffff8c341640 RDI: ffffffff8fcf2570 [ 316.717111][ T8033] RBP: 1ffff1100acdb818 R08: 00000000000000c0 R09: 0000000000000000 [ 316.725176][ T8033] R10: ffffc90004e6fa40 R11: fffff520009cdf54 R12: ffff888031bf4100 [ 316.733261][ T8033] R13: ffff8880566dc0c0 R14: 0000000080000f80 R15: ffff88801148e900 [ 316.741313][ T8033] FS: 00007f6919de36c0(0000) GS:ffff888125a0b000(0000) knlGS:0000000000000000 [ 316.750313][ T8033] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 316.756932][ T8033] CR2: 0000001b31616ff8 CR3: 000000007f684000 CR4: 00000000003526f0 [ 316.764989][ T8033] Call Trace: [ 316.768277][ T8033] [ 316.771247][ T8033] ? __init_swait_queue_head+0xa9/0x150 [ 316.776828][ T8033] usb_start_wait_urb+0x12b/0x510 [ 316.781933][ T8033] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 316.787507][ T8033] usb_control_msg+0x232/0x3e0 [ 316.792327][ T8033] dib0700_i2c_xfer+0xbb2/0xf80 [ 316.797215][ T8033] __i2c_transfer+0x79a/0x1ee0 [ 316.802038][ T8033] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 316.807866][ T8033] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 316.813728][ T8033] ? i2c_transfer+0xc8/0x2d0 [ 316.818372][ T8033] i2c_transfer+0x1cc/0x2d0 [ 316.822935][ T8033] i2cdev_ioctl_rdwr+0x460/0x740 [ 316.827899][ T8033] i2cdev_ioctl+0x6a5/0x880 [ 316.832542][ T8033] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 316.837585][ T8033] ? __fget_files+0x3a0/0x420 [ 316.842313][ T8033] ? __fget_files+0x2a/0x420 [ 316.847085][ T8033] ? bpf_lsm_file_ioctl+0x9/0x20 [ 316.852156][ T8033] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 316.857224][ T8033] __se_sys_ioctl+0xfc/0x170 [ 316.861971][ T8033] do_syscall_64+0xe2/0xf80 [ 316.866551][ T8033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.872701][ T8033] ? trace_irq_disable+0x37/0x100 [ 316.877779][ T8033] ? clear_bhb_loop+0x60/0xb0 [ 316.882576][ T8033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.888611][ T8033] RIP: 0033:0x7f6918f9acb9 [ 316.893170][ T8033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.912886][ T8033] RSP: 002b:00007f6919de3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.921383][ T8033] RAX: ffffffffffffffda RBX: 00007f6919216180 RCX: 00007f6918f9acb9 [ 316.929421][ T8033] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000007 [ 316.937488][ T8033] RBP: 00007f6919008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 316.945567][ T8033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.954472][ T8033] R13: 00007f6919216218 R14: 00007f6919216180 R15: 00007f691933fa48 [ 316.962569][ T8033] [ 316.965604][ T8033] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 316.972902][ T8033] CPU: 0 UID: 0 PID: 8033 Comm: syz.3.429 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.983755][ T8033] Tainted: [L]=SOFTLOCKUP [ 316.988080][ T8033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 316.998271][ T8033] Call Trace: [ 317.001565][ T8033] [ 317.004512][ T8033] vpanic+0x1e0/0x670 [ 317.008774][ T8033] panic+0xc5/0xd0 [ 317.012513][ T8033] ? __pfx_panic+0x10/0x10 [ 317.016947][ T8033] __warn+0x315/0x4a0 [ 317.020935][ T8033] ? usb_submit_urb+0x1052/0x18b0 [ 317.025972][ T8033] ? usb_submit_urb+0x1052/0x18b0 [ 317.031023][ T8033] __report_bug+0x29a/0x540 [ 317.035535][ T8033] ? usb_submit_urb+0x1052/0x18b0 [ 317.040572][ T8033] ? __pfx___report_bug+0x10/0x10 [ 317.045609][ T8033] ? lockdep_hardirqs_on+0x7a/0x110 [ 317.050822][ T8033] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 317.056646][ T8033] report_bug_entry+0x19a/0x290 [ 317.061513][ T8033] ? usb_submit_urb+0x1114/0x18b0 [ 317.066544][ T8033] ? usb_submit_urb+0x1119/0x18b0 [ 317.071598][ T8033] handle_bug+0xca/0x200 [ 317.075858][ T8033] exc_invalid_op+0x1a/0x50 [ 317.080377][ T8033] asm_exc_invalid_op+0x1a/0x20 [ 317.085240][ T8033] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 317.090915][ T8033] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 317.110615][ T8033] RSP: 0018:ffffc90004e6f948 EFLAGS: 00010246 [ 317.116721][ T8033] RAX: 0000000000000000 RBX: ffff888146b4a900 RCX: 0000000080000f80 [ 317.124722][ T8033] RDX: ffff88801148e900 RSI: ffffffff8c341640 RDI: ffffffff8fcf2570 [ 317.132790][ T8033] RBP: 1ffff1100acdb818 R08: 00000000000000c0 R09: 0000000000000000 [ 317.140763][ T8033] R10: ffffc90004e6fa40 R11: fffff520009cdf54 R12: ffff888031bf4100 [ 317.148735][ T8033] R13: ffff8880566dc0c0 R14: 0000000080000f80 R15: ffff88801148e900 [ 317.156728][ T8033] ? usb_submit_urb+0x10a3/0x18b0 [ 317.161776][ T8033] ? __init_swait_queue_head+0xa9/0x150 [ 317.167427][ T8033] usb_start_wait_urb+0x12b/0x510 [ 317.172473][ T8033] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 317.178044][ T8033] usb_control_msg+0x232/0x3e0 [ 317.182824][ T8033] dib0700_i2c_xfer+0xbb2/0xf80 [ 317.187721][ T8033] __i2c_transfer+0x79a/0x1ee0 [ 317.192534][ T8033] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 317.198383][ T8033] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 317.204200][ T8033] ? i2c_transfer+0xc8/0x2d0 [ 317.208904][ T8033] i2c_transfer+0x1cc/0x2d0 [ 317.213447][ T8033] i2cdev_ioctl_rdwr+0x460/0x740 [ 317.218412][ T8033] i2cdev_ioctl+0x6a5/0x880 [ 317.222958][ T8033] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 317.227993][ T8033] ? __fget_files+0x3a0/0x420 [ 317.232678][ T8033] ? __fget_files+0x2a/0x420 [ 317.237281][ T8033] ? bpf_lsm_file_ioctl+0x9/0x20 [ 317.242227][ T8033] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 317.247265][ T8033] __se_sys_ioctl+0xfc/0x170 [ 317.251874][ T8033] do_syscall_64+0xe2/0xf80 [ 317.256386][ T8033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.262552][ T8033] ? trace_irq_disable+0x37/0x100 [ 317.267587][ T8033] ? clear_bhb_loop+0x60/0xb0 [ 317.272289][ T8033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.278190][ T8033] RIP: 0033:0x7f6918f9acb9 [ 317.282613][ T8033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.302575][ T8033] RSP: 002b:00007f6919de3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.311011][ T8033] RAX: ffffffffffffffda RBX: 00007f6919216180 RCX: 00007f6918f9acb9 [ 317.318998][ T8033] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000007 [ 317.327000][ T8033] RBP: 00007f6919008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 317.334994][ T8033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.342990][ T8033] R13: 00007f6919216218 R14: 00007f6919216180 R15: 00007f691933fa48 [ 317.350990][ T8033] [ 317.354548][ T8033] Kernel Offset: disabled [ 317.358885][ T8033] Rebooting in 86400 seconds..