last executing test programs: 5m10.595131075s ago: executing program 4 (id=351): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008095) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0xb, 0xff5, &(0x7f00000013c0)=""/4085}, 0x94) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f01000000000000000000090582"], 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x5a, 0x1}, 0xffff2539, 0x44, 0x0, 0x0, 0x5, 0x8, 0x3, 0xc, 0x101, 0x0}) connect$inet(r5, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) r8 = socket$can_bcm(0x1d, 0x2, 0x2) getpeername(r8, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 5m5.651225796s ago: executing program 4 (id=360): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) pipe(0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x80, 0x48001059, 0xffffffffffffff9c, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) wait4(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)) memfd_create(0x0, 0x3) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000180)=0x3ff, 0xc, 0x0) 5m4.041846694s ago: executing program 4 (id=362): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r4) capget(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) poll(0x0, 0x0, 0x7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x8811) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) r9 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r10, 0x0, 0x41}, 0x38) read$FUSE(r9, &(0x7f0000002d80)={0x2020}, 0x2025) syz_usb_connect(0x3, 0x108, &(0x7f00000002c0)={{0x12, 0x1, 0x100, 0xfa, 0x24, 0x9f, 0x20, 0x734, 0x43b, 0xd800, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf6, 0x1, 0x9, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x25, 0x8, 0x0, 0x8, 0x5e, 0x8b, 0x3, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "9b5b422a55"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0x8000, 0x3, 0x5}, [@dmm={0x7, 0x24, 0x14, 0x6}, @mdlm_detail={0x8a, 0x24, 0x13, 0x4, "f2173b3ed30fbba4826a4b72cb44602077fa41e59f9778e7f3097f18cc71cdc521e0416fc012998f652a3c53f142b87720fe121dfd7af2c6a94c2804cc9db3d4206b38459e3729350285f4a011ad9ed4faaef058a98796eb48ede2d52c9e8a360725219062b14dd0f61ba67142701a5874f770baba93bb7f3da5711c9ecf68401144ce418ef8"}, @mbim={0xc, 0x24, 0x1b, 0x4c0, 0x1, 0x2, 0x9, 0x1, 0xb}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0x9, 0x1, 0x0, 0x6}, @mdlm_detail={0x10, 0x24, 0x13, 0x67, "fdb6997fcfa092dab3f04124"}, @country_functional={0x8, 0x24, 0x7, 0x1a, 0xff, [0x4]}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x2, 0x1}]}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x5, 0x9, 0x1, 0x4e1f168e26921e94, 0xc}, 0x16, &(0x7f0000000240)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x0, 0x5, 0xe}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x4, 0x1a8}]}, 0x3, [{0x31, &(0x7f00000004c0)=@string={0x31, 0x3, "d1beefab789f5c463eb749f68d8a3d987474f1e6775a06bc31dd7e6cb4d6eb8fec28dc5df30aab33d05f83cf435435"}}, {0x81, &(0x7f00000000c0)=@string={0x81, 0x3, "d9d29e4356c753412f4e0769c40f769fc98bb7d6039a304671d5048ba8fd398d4540d07f337f3b0c49c46e9f93681f0b147de0931c64e44da32f0259c753f4cb39fa31b340c49edaf74a3693fdfbf6f023ea14936e81964a72ed9cb53860ad1f1edf5468b7e80d007941e29510b889f0528099ba5ed1a21409021662e37b04"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x445}}]}) 4m59.92900145s ago: executing program 4 (id=369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001900010000000000fbdbdf250a00000000f275a6c5e696d05f424cfccbab72e1fa1e00fe00000000000800170008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040052}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x8}}, 0x1c}}, 0x4000800) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, 0x4, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000050}, 0xdbcc7a2431de4ec6) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$LOOP_SET_FD(r6, 0x4c05, r6) dup2(r5, r2) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0xfc, 0x1b3}]}) syz_open_dev$sndctrl(0x0, 0x336, 0x20a00) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) write(r8, &(0x7f0000000000)="fc", 0x1) splice(r7, 0x0, r1, 0x0, 0x1100002000f336, 0x5) 4m58.965939046s ago: executing program 4 (id=371): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000133000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, &(0x7f0000b19000/0x4000)=nil, &(0x7f0000366000/0x3000)=nil, &(0x7f000035a000/0x4000)=nil, &(0x7f000098a000/0x4000)=nil, &(0x7f00002e5000/0x4000)=nil, &(0x7f0000bbc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000df5000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)="ada7add567670a893303eaca99ec08a42110bab48f38e5c0369a48607dd74355876dd0e61df947f3145c8a894ad3daedd22306b5bafd8ca6f504be890ae4d155872984bc3bce634b66d1833aa47691208b3806bbb89d60389ba39c63ba6ca1a75f2ccd711f09da1a348252cc49da3a3d5d0d5a2e857c0cf1676c65ebd21fcb27d1dbf133ec9a3964088dd5e3d0e1bcff875a618059bd875f605c9b7889fce9a99d42f00a77baf16740aa889bbfb2b2fac4639af50b691b3fa97561291dee2a0baabbc5f8930b29ae429ad642fb9a02bb3e7bbba2878123ce52680dae62036449461c2660fd213f7bda03d709c2d370e96ce6", 0xf2, r1}, 0x68) r4 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x0, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0x4, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x6, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}], 0x1, 0x6) timer_create(0x2, 0x0, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24500, 0x0) r8 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "a8cfec1040c4c04dd41ec2264a856281649ccb419f5b625a1254d840dd56a0779c7ca83df072feb076993263e373f2e6a57807c340fc13e69230cce7912d533a", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$setperm(0x5, r8, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f00000000c0)) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xbd, 0x8, 0x47425247, 0x41495043, [0x3fe], [0x7fff], 0x1}}) r10 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'e', 0x3a, '\x00\x00eh`\x1a\x00+^\x01\xa0\xfdZ\x020\x93-M\x93\xf4\x7fj\x05B\xf5,\xf4\xe8\x18<\xfd{\xe9\xd2\xfb\xf6\xa2COg\x84\xc8\xd7\x1c\x93\x87\xc2y\xe4%\xff\x14\x91\xfc\xbdRDs[\xc0\x03^~\x1d\xda\xd5\xf5\x83B\xc4?\xe9[:\x1d\xf9\x95\x8e\xfe\x10,\\^\x84\x8d\xb39\xfeu\xbd\x05cN ~\xbf:Z\xfd!$\xfc\x01@\xc0\xc2\xe0i+\xd7\xac\xaa\xd2!\b\x1b\xa8\x9f\x9f\xe3\x06\xe3~&\xe0x8\x84\xa9\xc3\xb6\xed\x92\x95\xa5\xbb\xb8\x04dB\xfd', 0x3a, './file1'}, 0xb5) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 4m58.532679158s ago: executing program 4 (id=374): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$dsp(0xffffff9c, &(0x7f00000003c0), 0x84000, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00', @ANYRES16], 0x2c}}, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) 4m57.77108498s ago: executing program 32 (id=374): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$dsp(0xffffff9c, &(0x7f00000003c0), 0x84000, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00', @ANYRES16], 0x2c}}, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) 1m19.981265476s ago: executing program 5 (id=1037): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r3, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x20, 0x0, {0x0, 0x9416}, {0x350, 0xfffffffd}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x9, 0x101, @l2={'ib', 0x3a, 'dummy0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x26, 0x301, 0x20010002, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r9 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0) ioctl$SIOCSIFMTU(r10, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendfile(r11, r11, 0x0, 0x200000) 1m13.686643098s ago: executing program 5 (id=1046): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1715, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 1m13.613358127s ago: executing program 5 (id=1047): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x8c, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x18, &(0x7f0000000140)={0x40, 0xd, 0x8, {0x8, 0x4, "f91f649464b2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m10.577221687s ago: executing program 5 (id=1059): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1m9.435018498s ago: executing program 5 (id=1061): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000018dfde1035121000822953050a010902"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 1m6.392329715s ago: executing program 5 (id=1072): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) pipe2$watch_queue(0x0, 0x80) sendfile(0xffffffffffffffff, r5, 0x0, 0x7ffffffd) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r6, &(0x7f0000000600)=""/4099, 0x1003, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000001640)=ANY=[@ANYBLOB]) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r7, &(0x7f0000000000)=0x8, r7, 0x0, 0x4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x8000) ioctl$NBD_SET_SOCK(r6, 0xab00, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x2, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x3f00000000000000, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 56.435688144s ago: executing program 1 (id=1117): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x8, r4}, 0x10) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r8, 0x4b63, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000400)='cubic', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIONCLEX(r9, 0x5450) r10 = gettid() prlimit64(r10, 0xa, &(0x7f0000000100)={0x7319, 0x144d3d36}, &(0x7f0000000240)) 56.203285802s ago: executing program 0 (id=1120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000010440)={0xa, 0x20, 0x0, @local, 0x9}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) 56.02531368s ago: executing program 2 (id=1121): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0xca, &(0x7f0000001300)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x19, 0x4, 0x3, 0x2d, 0xbc, 0x68, 0x0, 0x7, 0x1, 0x0, @broadcast, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x42, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x80000001}]}, @timestamp={0x44, 0x8, 0xa6, 0x0, 0xa, [0x5e]}, @timestamp_addr={0x44, 0x3c, 0x65, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfb1}, {@remote, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb70}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x2}, {@broadcast, 0x80000001}, {@local, 0x9}, {@private=0xa010101, 0x8}]}]}}, @redirect={0x5, 0x3, 0x0, @empty, {0x13, 0x4, 0x1, 0x1d, 0x8, 0x65, 0xf, 0x5, 0x2, 0x6, @broadcast, @multicast1, {[@ssrr={0x89, 0x7, 0x77, [@local]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x5, 0xc, "b2dbefe37e745d094f56"}, {0x1, 0x2}, {0x5, 0xd, "fff2fd43fdd82794801792"}, {0x1, 0xd, "37ff93ae02b06a962c1e2e"}]}]}}, "c1f4cce9"}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[], 0x40}}, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$kcm(0x1e, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0x5b01, 0x0) syz_usb_disconnect(r5) 55.203509462s ago: executing program 0 (id=1123): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x24000840) 55.194158844s ago: executing program 1 (id=1124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 53.097880583s ago: executing program 1 (id=1125): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) pipe2$watch_queue(0x0, 0x80) sendfile(0xffffffffffffffff, r6, 0x0, 0x7ffffffd) ioctl$KVM_SET_CLOCK(r5, 0x4048aec9, &(0x7f0000000040)={0x6, 0x0, 0x80000000, 0x0, 0x40004}) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r7, &(0x7f0000000600)=""/4099, 0x1003, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r8, &(0x7f0000000000)=0x8, r8, 0x0, 0x4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x8000) ioctl$NBD_SET_SOCK(r7, 0xab00, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x2, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x3f00000000000000, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 52.973485386s ago: executing program 0 (id=1126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048004}, 0x80) 52.755600852s ago: executing program 0 (id=1127): r0 = syz_io_uring_setup(0x7095, &(0x7f0000000380)={0x0, 0x5978, 0x10100, 0x0, 0x3e2}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x64, 0x2d0900, 0x23456}) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x51) 52.504961744s ago: executing program 3 (id=1130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) 52.488734114s ago: executing program 0 (id=1140): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) 52.417035386s ago: executing program 0 (id=1131): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0xca, &(0x7f0000001300)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x19, 0x4, 0x3, 0x2d, 0xbc, 0x68, 0x0, 0x7, 0x1, 0x0, @broadcast, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x42, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x80000001}]}, @timestamp={0x44, 0x8, 0xa6, 0x0, 0xa, [0x5e]}, @timestamp_addr={0x44, 0x3c, 0x65, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfb1}, {@remote, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb70}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x2}, {@broadcast, 0x80000001}, {@local, 0x9}, {@private=0xa010101, 0x8}]}]}}, @redirect={0x5, 0x3, 0x0, @empty, {0x13, 0x4, 0x1, 0x1d, 0x8, 0x65, 0xf, 0x5, 0x2, 0x6, @broadcast, @multicast1, {[@ssrr={0x89, 0x7, 0x77, [@local]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x5, 0xc, "b2dbefe37e745d094f56"}, {0x1, 0x2}, {0x5, 0xd, "fff2fd43fdd82794801792"}, {0x1, 0xd, "37ff93ae02b06a962c1e2e"}]}]}}, "c1f4cce9"}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[], 0x40}}, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$kcm(0x1e, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0x5b01, 0x0) syz_usb_disconnect(r5) 51.739369339s ago: executing program 1 (id=1132): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011003111b5b40d8050c815f180902030109021b00010601f1080904c808017ff8ac4c090501030002"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 51.73923979s ago: executing program 3 (id=1133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd368a6acfbb9f167}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3000000}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}, 0x1, 0x0, 0x0, 0x24000080}, 0x8000) 51.360466131s ago: executing program 3 (id=1134): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) 51.303616571s ago: executing program 33 (id=1072): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) pipe2$watch_queue(0x0, 0x80) sendfile(0xffffffffffffffff, r5, 0x0, 0x7ffffffd) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r6, &(0x7f0000000600)=""/4099, 0x1003, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000001640)=ANY=[@ANYBLOB]) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r7, &(0x7f0000000000)=0x8, r7, 0x0, 0x4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x8000) ioctl$NBD_SET_SOCK(r6, 0xab00, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x2, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x3f00000000000000, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 50.952079612s ago: executing program 3 (id=1136): r0 = socket(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/234, 0xea}], 0x1}, 0x3}], 0x1, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @private2, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfffffff9, 0xffffffff}}}}}}, 0x0) 50.75260534s ago: executing program 3 (id=1137): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=@newtfilter={0x4b4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x10, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x779f0574}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_RATE={0x6, 0x5, {0x1, 0xa8}}, @TCA_RATE={0x6, 0x5, {0xab, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x438, 0x2, [@TCA_U32_POLICE={0x410, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x368, 0x6, 0x5, 0x5f, 0x81, 0xe6, 0x5, 0x10, 0x4, 0x2, 0x4, 0x84, 0x9, 0x7, 0x17ee, 0x8001, 0x2, 0x6, 0x1, 0x0, 0xb, 0x1, 0xffffffff, 0x35ab, 0x4, 0xddc, 0x1, 0xa, 0x0, 0x2, 0x1, 0xffffffff, 0x3, 0x72820263, 0x9, 0x7, 0x0, 0x5, 0x7, 0x0, 0xfffffff9, 0x4, 0x7, 0x6, 0xc, 0xfff, 0x5, 0x5a9, 0x7fff, 0x49d2, 0xa, 0x100, 0x1b, 0x0, 0x3, 0x9, 0x28000000, 0x0, 0x8, 0x6, 0xf, 0x2735, 0x7ff, 0x0, 0x80, 0x101, 0x7f, 0x8, 0x1, 0x8, 0x9d, 0x391, 0x7, 0x6, 0x7, 0x6, 0xc4, 0xb, 0xec0, 0x40, 0x8, 0x8001, 0x2, 0x40, 0x7, 0x8, 0x7566, 0xb, 0x1, 0x4, 0x6, 0x10, 0x9, 0xc054, 0x6, 0xfffffff9, 0x4, 0x4, 0x8, 0x4, 0xea, 0x3, 0x3, 0x0, 0x9843, 0xb9a, 0x40, 0x2, 0x3, 0x0, 0x4, 0x2, 0xa94, 0x7, 0x0, 0x6, 0x0, 0x8000c, 0x1, 0x3, 0x0, 0xfffffff8, 0xd7, 0x80000001, 0x40, 0xfff, 0x4, 0x9, 0x9, 0xaa, 0x7fffffff, 0x9, 0x0, 0x80, 0x3ff, 0x6, 0x3, 0x800, 0xc9, 0x1, 0x2, 0xe, 0x1, 0x8001, 0x7ff, 0x40, 0x4, 0x100, 0x8, 0x1, 0x1, 0xae0c, 0x1df, 0x6, 0x7, 0x1, 0x6, 0x0, 0x200, 0x7, 0x200, 0x9, 0xffff, 0x2f, 0x0, 0xffffffff, 0x7ff, 0x6, 0xb029, 0x8, 0x2, 0x2, 0x80, 0x100000, 0x2, 0x6, 0x20000, 0x10001, 0x5, 0x4, 0x400, 0x58a2, 0x1ff, 0xff, 0x8, 0x8, 0x7f, 0x8, 0x1, 0x6, 0x4, 0x9, 0x0, 0x3, 0x81, 0xff, 0x6, 0xffffffff, 0x5, 0xfffffff8, 0x1, 0x10000, 0xd, 0x2, 0x0, 0x8, 0x5c8d, 0x5, 0x1385, 0x800, 0x9, 0x8, 0x80, 0x836, 0x8c66, 0x8, 0x1, 0x8, 0x3, 0xe8c, 0x47c4, 0x9f, 0x4, 0x2, 0x8, 0x7, 0xa6f, 0x9, 0x1, 0x2000000c, 0x5, 0x7, 0x40, 0x5, 0x4a5e, 0xd32c, 0x1000, 0x4c, 0xfffffffc, 0x1, 0x442, 0x1000, 0x1, 0x7, 0x8, 0x8, 0x9, 0x8000, 0x51c, 0x7, 0x3, 0x5, 0x3, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x874}]}, @TCA_U32_INDEV={0x14, 0x8, 'geneve1\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0xfff1}}]}}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 50.131513116s ago: executing program 2 (id=1138): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0xe, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/4096, 0x1000}, {0x0}], 0x2) 49.739527193s ago: executing program 2 (id=1139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x72, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x8, {[@eol, @fastopen={0x22, 0x2}]}}}}}}}, 0x0) 49.739395966s ago: executing program 3 (id=1141): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000240)=[{0x1, 0x2a00, 0x0, 0x0}, {0x3, 0x6000, 0x0, 0x0}, {0x4, 0x0, 0x0, 0x0}], 0x3}) 49.59366216s ago: executing program 2 (id=1142): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@remote, 0x4e24, 0xfff7, 0x4e21, 0x2, 0x2}, {0x6, 0x6, 0xc6b9, 0x5, 0x6, 0x6, 0x8, 0xff}, {0x6b, 0xffffffffffff149d, 0x2, 0xab15}, 0x7, 0x6e6bb8, 0x0, 0x1, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x4d5, 0x32}, 0xa, @in6=@mcast1, 0x3501, 0x4, 0x2, 0x0, 0x4, 0x1, 0x406}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) 49.051942859s ago: executing program 2 (id=1143): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x400c0c0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x3, 0x2, 0x0, 0x0, 0xfffffffc}, 0x10}}, 0x0) 48.521731348s ago: executing program 1 (id=1144): io_uring_setup(0x162e, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) 48.224546387s ago: executing program 2 (id=1145): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x8, r4}, 0x10) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r8, 0x4b63, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000400)='cubic', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIONCLEX(r9, 0x5450) r10 = gettid() prlimit64(r10, 0xa, &(0x7f0000000100)={0x7319, 0x144d3d36}, &(0x7f0000000240)) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 48.055566019s ago: executing program 1 (id=1146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 34 (id=1131): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0xca, &(0x7f0000001300)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x19, 0x4, 0x3, 0x2d, 0xbc, 0x68, 0x0, 0x7, 0x1, 0x0, @broadcast, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x42, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x80000001}]}, @timestamp={0x44, 0x8, 0xa6, 0x0, 0xa, [0x5e]}, @timestamp_addr={0x44, 0x3c, 0x65, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfb1}, {@remote, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb70}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x2}, {@broadcast, 0x80000001}, {@local, 0x9}, {@private=0xa010101, 0x8}]}]}}, @redirect={0x5, 0x3, 0x0, @empty, {0x13, 0x4, 0x1, 0x1d, 0x8, 0x65, 0xf, 0x5, 0x2, 0x6, @broadcast, @multicast1, {[@ssrr={0x89, 0x7, 0x77, [@local]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x5, 0xc, "b2dbefe37e745d094f56"}, {0x1, 0x2}, {0x5, 0xd, "fff2fd43fdd82794801792"}, {0x1, 0xd, "37ff93ae02b06a962c1e2e"}]}]}}, "c1f4cce9"}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[], 0x40}}, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$kcm(0x1e, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0x5b01, 0x0) syz_usb_disconnect(r5) kernel console output (not intermixed with test programs): e instead [ 390.319357][ T9339] syzkaller0: entered promiscuous mode [ 390.363613][ T9339] syzkaller0: entered allmulticast mode [ 391.511583][ T9364] netlink: 'syz.2.599': attribute type 10 has an invalid length. [ 391.566204][ T1585] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 391.732187][ T1585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 391.743181][ T7705] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 391.834398][ T1585] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 391.873085][ T1585] usb 6-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 391.910683][ T1585] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.929831][ T7705] usb 2-1: config 0 has an invalid interface number: 160 but max is 0 [ 391.941777][ T7705] usb 2-1: config 0 has no interface number 0 [ 391.959546][ T1585] usb 6-1: Product: syz [ 391.967950][ T7705] usb 2-1: config 0 interface 160 has no altsetting 0 [ 391.995463][ T1585] usb 6-1: Manufacturer: syz [ 392.032646][ T1585] usb 6-1: SerialNumber: syz [ 392.047217][ T7705] usb 2-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 392.063046][ T1585] usb 6-1: config 0 descriptor?? [ 392.075540][ T7705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.276038][ T7705] usb 2-1: Product: syz [ 392.285531][ T7705] usb 2-1: Manufacturer: syz [ 392.293226][ T7705] usb 2-1: SerialNumber: syz [ 392.306848][ T7705] usb 2-1: config 0 descriptor?? [ 392.318615][ T7705] usb-storage 2-1:0.160: USB Mass Storage device detected [ 392.328890][ T9359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.394523][ T9359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.443995][ T1585] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 394.316855][ T9357] bond0: (slave bridge0): Releasing backup interface [ 394.324249][ T9357] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.331650][ T9357] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.345146][ T9357] bridge_slave_0: left allmulticast mode [ 394.350857][ T9357] bridge_slave_0: left promiscuous mode [ 394.358936][ T9357] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.373995][ T9357] bridge_slave_1: left allmulticast mode [ 394.385953][ T9357] bridge_slave_1: left promiscuous mode [ 394.392672][ T9357] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.414509][ T9357] bond0: (slave bond_slave_0): Releasing backup interface [ 394.439944][ T9357] bond0: (slave bond_slave_1): Releasing backup interface [ 394.485273][ T9357] team0: Port device team_slave_0 removed [ 394.509087][ T9357] team0: Port device team_slave_1 removed [ 394.516927][ T9357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.524445][ T9357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.541109][ T9357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.555607][ T9357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.567336][ T9357] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 394.590587][ T9360] pim6reg: entered allmulticast mode [ 394.602597][ T9364] team0: Port device netdevsim0 added [ 394.685662][ T1585] usb 6-1: USB disconnect, device number 8 [ 394.907701][ T9382] fuse: Bad value for 'group_id' [ 394.912651][ T9382] fuse: Bad value for 'group_id' [ 395.000003][ T9383] binder: BINDER_SET_CONTEXT_MGR already set [ 395.015213][ T9383] binder: 9378:9383 ioctl 4018620d 80000040 returned -16 [ 395.043524][ T1585] usb 2-1: USB disconnect, device number 27 [ 395.436163][ T5912] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 395.645928][ T1585] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 395.837370][ T1585] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 395.889706][ T1585] usb 1-1: config 0 has no interface number 0 [ 396.019956][ T1585] usb 1-1: config 0 interface 160 has no altsetting 0 [ 396.078125][ T5912] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 396.100085][ T1585] usb 1-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 396.116902][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.142447][ T5912] usb 3-1: config 0 descriptor?? [ 396.156038][ T1585] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.235063][ T5912] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 396.285891][ T1585] usb 1-1: Product: syz [ 396.335938][ T1585] usb 1-1: Manufacturer: syz [ 396.340562][ T1585] usb 1-1: SerialNumber: syz [ 396.583345][ T1585] usb 1-1: config 0 descriptor?? [ 396.614009][ T1585] usb-storage 1-1:0.160: USB Mass Storage device detected [ 396.743872][ T9400] usb 1-1: USB disconnect, device number 15 [ 396.900286][ T9396] hub 1-0:1.0: USB hub found [ 396.913000][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.606'. [ 396.951742][ T9396] hub 1-0:1.0: 1 port detected [ 396.968012][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.606'. [ 397.034357][ T9406] lo: Caught tx_queue_len zero misconfig [ 397.055554][ T9406] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 397.156145][ T1585] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 398.272033][ T5912] gp8psk: usb in 128 operation failed. [ 398.316184][ T5912] gp8psk: usb in 137 operation failed. [ 398.354175][ T5912] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 398.446023][ T5912] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 398.763600][ T7705] usb 3-1: USB disconnect, device number 17 [ 399.140528][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 399.164125][ T9428] netlink: 72 bytes leftover after parsing attributes in process `syz.2.610'. [ 399.379038][ T9430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.607'. [ 399.389477][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 399.586069][ T5912] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 399.746126][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 399.765319][ T5912] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 399.794326][ T5912] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.824691][ T5912] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 399.885594][ T5912] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 399.919214][ T5912] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.013615][ T5912] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 400.043993][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.411873][ T5912] usb 3-1: usb_control_msg returned -71 [ 400.436087][ T5912] usbtmc 3-1:16.0: can't read capabilities [ 400.581447][ T5912] usb 3-1: USB disconnect, device number 18 [ 401.018393][ T9452] netlink: 'syz.1.614': attribute type 4 has an invalid length. [ 401.026342][ T9452] netlink: 17 bytes leftover after parsing attributes in process `syz.1.614'. [ 401.496137][ T5912] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 401.539217][ T9463] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 401.587306][ T9463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.680707][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.617'. [ 401.718173][ T5912] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 401.728668][ T5912] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 401.756676][ T5912] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 401.812322][ T5912] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 401.833286][ T9467] netlink: 72 bytes leftover after parsing attributes in process `syz.3.617'. [ 401.881254][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.992899][ T5912] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 402.116323][ T5912] usb 2-1: invalid MIDI out EP 0 [ 402.278593][ T7008] udevd[7008]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.298804][ T9456] delete_channel: no stack [ 402.323658][ T5912] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 402.388794][ T5912] usb 2-1: USB disconnect, device number 28 [ 403.302550][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 403.302567][ T30] audit: type=1326 audit(1763652872.705:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9474 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 403.466290][ T30] audit: type=1326 audit(1763652872.705:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9474 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 403.621736][ T30] audit: type=1326 audit(1763652872.745:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9474 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 403.744109][ T30] audit: type=1326 audit(1763652872.745:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9474 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 403.768601][ T9479] netlink: 68 bytes leftover after parsing attributes in process `syz.0.620'. [ 403.948973][ T30] audit: type=1326 audit(1763652872.745:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9474 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 404.093512][ T30] audit: type=1326 audit(1763652872.745:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9474 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 404.234230][ T30] audit: type=1326 audit(1763652872.745:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9474 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 404.326550][ T1585] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 404.424743][ T30] audit: type=1326 audit(1763652872.745:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9474 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 404.456006][ T30] audit: type=1326 audit(1763652872.745:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9474 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 404.477963][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.525988][ T30] audit: type=1326 audit(1763652872.745:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9474 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 404.557406][ T1585] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 404.626011][ T1585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.708419][ T1585] usb 6-1: config 0 descriptor?? [ 404.781026][ T1585] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 405.010030][ T9503] tap0: tun_chr_ioctl cmd 1074025677 [ 405.029855][ T9503] tap0: linktype set to 825 [ 406.536084][ T9512] capability: warning: `syz.1.625' uses 32-bit capabilities (legacy support in use) [ 406.996362][ T1585] gp8psk: usb in 128 operation failed. [ 407.031571][ T1585] gp8psk: usb in 137 operation failed. [ 407.041369][ T1585] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 407.079663][ T1585] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 407.705238][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 407.821946][ T5940] usb 6-1: USB disconnect, device number 9 [ 407.904893][ T9534] netlink: 72 bytes leftover after parsing attributes in process `syz.2.628'. [ 407.957366][ T9537] ip6tnl0: Caught tx_queue_len zero misconfig [ 408.208419][ T7706] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 408.466275][ T7706] usb 3-1: Using ep0 maxpacket: 8 [ 408.529187][ T7706] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 408.561851][ T7706] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 408.861061][ T7706] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 408.986504][ T7706] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 409.064748][ T7706] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.118579][ T7706] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 409.220707][ T7706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.671812][ T7706] usb 3-1: usb_control_msg returned -71 [ 409.742303][ T7706] usbtmc 3-1:16.0: can't read capabilities [ 410.336602][ T7706] usb 3-1: USB disconnect, device number 19 [ 412.891318][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 412.903266][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 412.924268][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 413.436181][ T9564] block device autoloading is deprecated and will be removed. [ 413.731897][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 413.825803][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 413.837430][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 413.849840][ T9596] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 415.072595][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 415.072621][ T30] audit: type=1326 audit(1763652884.465:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 415.101106][ T30] audit: type=1326 audit(1763652884.465:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 415.130962][ T30] audit: type=1326 audit(1763652884.465:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 415.171725][ T30] audit: type=1326 audit(1763652884.465:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 415.223930][ T30] audit: type=1326 audit(1763652884.465:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 415.247426][ T30] audit: type=1326 audit(1763652884.465:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 415.304970][ T30] audit: type=1326 audit(1763652884.465:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 415.351411][ T30] audit: type=1326 audit(1763652884.465:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 415.398495][ T30] audit: type=1326 audit(1763652884.465:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 415.452219][ T30] audit: type=1326 audit(1763652884.465:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 418.431560][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 418.573613][ T9656] netlink: 72 bytes leftover after parsing attributes in process `syz.2.647'. [ 418.866511][ T7705] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 419.036171][ T7705] usb 3-1: Using ep0 maxpacket: 8 [ 419.048943][ T7705] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 419.082468][ T7705] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 419.106417][ T7705] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 419.116944][ T7705] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 419.140789][ T7705] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.169742][ T7705] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 419.186344][ T7705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.600896][ T7705] usb 3-1: usb_control_msg returned -71 [ 419.608719][ T7705] usbtmc 3-1:16.0: can't read capabilities [ 419.661391][ T7705] usb 3-1: USB disconnect, device number 20 [ 420.036306][ T7706] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 420.204337][ T7706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.327090][ T7706] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 420.357603][ T7706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 420.384226][ T7706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 420.399604][ T9677] fuse: Bad value for 'fd' [ 420.465091][ T9676] @: renamed from vlan0 (while UP) [ 420.474808][ T7706] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 420.578719][ T7706] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 420.642781][ T7706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 420.703949][ T7706] usb 2-1: Product: syz [ 420.725709][ T7706] usb 2-1: Manufacturer: syz [ 420.748541][ T7706] usb 2-1: SerialNumber: syz [ 420.791661][ T7706] usb 2-1: config 0 descriptor?? [ 421.028059][ T7706] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 421.059545][ T7706] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 421.260283][ T7706] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 421.346891][ T7706] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 421.403159][ T7706] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 421.488043][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 421.488067][ T30] audit: type=1326 audit(1763652890.885:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 421.516050][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.573902][ T30] audit: type=1326 audit(1763652890.885:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 421.635597][ T30] audit: type=1326 audit(1763652890.945:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 421.660776][ T30] audit: type=1326 audit(1763652890.945:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 421.682678][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.696798][ T30] audit: type=1326 audit(1763652890.945:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 421.702710][ T7706] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 421.718749][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.720788][ T30] audit: type=1326 audit(1763652890.955:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 421.765531][ T30] audit: type=1326 audit(1763652890.955:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 421.788460][ T30] audit: type=1326 audit(1763652890.955:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 421.814105][ T30] audit: type=1326 audit(1763652890.965:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 421.840369][ T30] audit: type=1326 audit(1763652890.965:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 422.108100][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.655'. [ 422.120745][ T9690] netlink: 72 bytes leftover after parsing attributes in process `syz.5.655'. [ 422.441930][ T1585] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 422.706180][ T1585] usb 6-1: Using ep0 maxpacket: 8 [ 422.718732][ T1585] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 422.727810][ T1585] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 422.798140][ T1585] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 422.829018][ T1585] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 422.866213][ T1585] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.898052][ T1585] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 422.928727][ T1585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.025658][ T9662] netlink: 'syz.1.652': attribute type 3 has an invalid length. [ 423.269311][ T7706] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 423.313774][ T1585] usb 6-1: GET_CAPABILITIES returned 0 [ 423.321415][ T7706] usb 2-1: USB disconnect, device number 29 [ 423.330154][ T1585] usbtmc 6-1:16.0: can't read capabilities [ 423.395726][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 423.429354][ T9698] netlink: 44 bytes leftover after parsing attributes in process `syz.3.657'. [ 423.438534][ T9698] netlink: 44 bytes leftover after parsing attributes in process `syz.3.657'. [ 423.810524][ T7705] usb 6-1: USB disconnect, device number 10 [ 423.817547][ T9690] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 424.626659][ T5940] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 424.833456][ T5940] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 424.890310][ T5940] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 424.981514][ T5940] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 425.022123][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.296571][ T9720] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 425.365478][ T9720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.547875][ T9724] netlink: 36 bytes leftover after parsing attributes in process `syz.1.660'. [ 426.091227][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.665'. [ 426.249234][ T9741] netlink: 72 bytes leftover after parsing attributes in process `syz.5.665'. [ 427.634486][ T7705] usb 2-1: USB disconnect, device number 30 [ 430.210975][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 430.297226][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.672'. [ 430.316125][ T9793] netlink: 44 bytes leftover after parsing attributes in process `syz.5.672'. [ 430.335997][ T9793] netlink: 44 bytes leftover after parsing attributes in process `syz.5.672'. [ 430.407599][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.677'. [ 430.419929][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.427782][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.436884][ T9790] netlink: 72 bytes leftover after parsing attributes in process `syz.2.676'. [ 430.683313][ T9798] Option ' ÜÛPu©ª¡´ià ' to dns_resolver key: bad/missing value [ 430.766697][ T5940] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 431.206277][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 431.417769][ T5940] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 431.456190][ T5940] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 431.487660][ T5940] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 431.520717][ T5940] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 431.553846][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 431.571683][ T5940] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.620988][ T5940] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 431.664018][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.910012][ T5940] usb 3-1: GET_CAPABILITIES returned 0 [ 431.922079][ T5940] usbtmc 3-1:16.0: can't read capabilities [ 432.295628][ T7706] usb 3-1: USB disconnect, device number 21 [ 432.320835][ T9790] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 432.501609][ T9820] netlink: 14 bytes leftover after parsing attributes in process `syz.0.682'. [ 432.846050][ T5912] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 433.086060][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 433.099044][ T5912] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 433.108359][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.118307][ T5912] usb 1-1: config 0 descriptor?? [ 433.160823][ T5912] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 434.414190][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 434.568795][ T9830] netlink: 72 bytes leftover after parsing attributes in process `syz.3.683'. [ 435.012653][ T9820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.074923][ T9820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.119961][ T9820] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 435.346771][ T9836] netlink: 76 bytes leftover after parsing attributes in process `syz.2.684'. [ 435.698480][ T9838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.684'. [ 436.011933][ T9820] bond0 (unregistering): Released all slaves [ 436.265207][ T5912] usb 1-1: Detected FT232A [ 436.340056][ T5912] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 436.391066][ T5912] usb 1-1: USB disconnect, device number 17 [ 436.416585][ T5912] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 436.445502][ T5912] ftdi_sio 1-1:0.0: device disconnected [ 436.702881][ T9850] hub 9-0:1.0: USB hub found [ 436.733224][ T9850] hub 9-0:1.0: 1 port detected [ 436.798720][ T9850] netlink: 96 bytes leftover after parsing attributes in process `syz.1.685'. [ 437.502142][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 437.502158][ T30] audit: type=1326 audit(1763652906.815:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 437.665366][ T30] audit: type=1326 audit(1763652906.815:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 437.771029][ T30] audit: type=1326 audit(1763652906.825:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 437.793178][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.046463][ T30] audit: type=1326 audit(1763652906.825:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 438.046516][ T30] audit: type=1326 audit(1763652906.825:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 438.046557][ T30] audit: type=1326 audit(1763652906.825:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=303 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 438.046600][ T30] audit: type=1326 audit(1763652906.825:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 438.046641][ T30] audit: type=1326 audit(1763652906.825:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 438.046682][ T30] audit: type=1326 audit(1763652906.835:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 438.046723][ T30] audit: type=1326 audit(1763652906.835:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 438.389834][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.490464][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.527750][ T9895] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 439.630401][ T9896] pim6reg: entered allmulticast mode [ 439.997542][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 440.030881][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.037810][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.226635][ T9912] netlink: 72 bytes leftover after parsing attributes in process `syz.2.702'. [ 441.188377][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 441.736795][ T9931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 444.487893][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 445.165041][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.726'. [ 445.237951][ T9992] netlink: 72 bytes leftover after parsing attributes in process `syz.0.726'. [ 445.486082][ T5946] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 445.826948][T10007] netlink: 'syz.1.732': attribute type 25 has an invalid length. [ 445.865758][T10007] netlink: 40 bytes leftover after parsing attributes in process `syz.1.732'. [ 446.214290][T10013] netlink: 72 bytes leftover after parsing attributes in process `syz.5.730'. [ 446.324008][T10012] netlink: 72 bytes leftover after parsing attributes in process `syz.5.730'. [ 446.506191][ T5946] usb 1-1: Using ep0 maxpacket: 8 [ 446.525493][ T5946] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 446.546400][ T1585] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 446.716183][ T1585] usb 6-1: Using ep0 maxpacket: 8 [ 446.730008][ T1585] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 446.746239][ T1585] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 446.767179][ T1585] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 446.785977][ T1585] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 446.806336][ T1585] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.853125][ T1585] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 446.872685][ T1585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.079543][ T5946] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 447.096995][T10029] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 447.122886][T10029] team0: Port device netdevsim0 removed [ 447.131754][T10029] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 447.147677][ T5946] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 447.147716][ T5946] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 447.147741][ T5946] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.147792][ T5946] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 447.147816][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.223031][ T1585] usb 6-1: GET_CAPABILITIES returned 0 [ 447.241073][ T1585] usbtmc 6-1:16.0: can't read capabilities [ 447.297808][T10031] bond0: option all_slaves_active: invalid value (48) [ 447.427639][T10036] netlink: 76 bytes leftover after parsing attributes in process `syz.1.741'. [ 447.499900][T10012] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 447.507174][ T7705] usb 6-1: USB disconnect, device number 11 [ 447.508619][ T5946] usb 1-1: GET_CAPABILITIES returned 0 [ 447.586261][ T5946] usbtmc 1-1:16.0: can't read capabilities [ 447.620893][T10041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.741'. [ 447.806377][ T5946] usb 1-1: USB disconnect, device number 18 [ 449.406141][ T5940] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 449.570978][ T5940] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.589781][ T5940] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 449.606516][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.609631][T10070] binder: 10069:10070 ioctl 400c620e 80000180 returned -22 [ 449.614536][ T5940] usb 4-1: Product: syz [ 449.614556][ T5940] usb 4-1: Manufacturer: syz [ 449.614569][ T5940] usb 4-1: SerialNumber: syz [ 449.629398][ T5940] usb 4-1: config 0 descriptor?? [ 449.855758][ T7705] usb 4-1: USB disconnect, device number 29 [ 449.910287][T10078] xt_connbytes: Forcing CT accounting to be enabled [ 449.919653][T10078] xt_TPROXY: Can be used only with -p tcp or -p udp [ 450.085442][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'. [ 450.243722][T10092] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 451.143430][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 451.284004][T10118] netlink: 72 bytes leftover after parsing attributes in process `syz.3.769'. [ 451.826305][ T1585] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 452.132228][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.775'. [ 452.158582][T10142] netlink: 72 bytes leftover after parsing attributes in process `syz.5.775'. [ 452.354376][ T1585] usb 4-1: Using ep0 maxpacket: 8 [ 452.545196][ T1585] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 452.584269][ T1585] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 452.617118][ T1585] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 452.643634][ T1585] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.681911][ T1585] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.706364][ T7705] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 452.723187][ T1585] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 452.752823][ T1585] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.886354][ T7705] usb 6-1: Using ep0 maxpacket: 8 [ 452.902863][ T7705] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 452.933807][ T7705] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 452.985299][ T7705] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 453.028119][ T7705] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 453.078076][ T7705] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.102015][ T1585] usb 4-1: usb_control_msg returned -71 [ 453.126384][ T1585] usbtmc 4-1:16.0: can't read capabilities [ 453.166144][ T7705] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 453.230411][ T1585] usb 4-1: USB disconnect, device number 30 [ 453.256134][ T7705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.527404][ T7705] usb 6-1: GET_CAPABILITIES returned 0 [ 453.565016][ T7705] usbtmc 6-1:16.0: can't read capabilities [ 453.870824][ T7705] usb 6-1: USB disconnect, device number 12 [ 453.886377][T10138] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 453.926218][T10161] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 454.520702][T10177] netlink: 'syz.2.795': attribute type 4 has an invalid length. [ 454.568551][T10177] netlink: 152 bytes leftover after parsing attributes in process `syz.2.795'. [ 454.591115][T10177] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 454.686173][ T5940] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 454.761948][T10182] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 454.882488][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 454.898137][ T5940] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 454.912480][ T5940] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 454.921724][ T5940] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 454.930799][ T5940] usb 1-1: config 1 has no interface number 0 [ 454.937352][ T5940] usb 1-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 454.949122][ T5940] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 454.986262][ T5940] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 455.042952][ T5940] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 455.063645][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.096797][ T5940] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 455.206421][ T43] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 455.316866][ T5940] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 455.350504][ T5940] snd_usb_pod 1-1:1.1: invalid control EP [ 455.360199][ T5940] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 455.370652][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.393070][ T5940] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 455.400635][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.400666][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 455.400712][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 455.451129][ T5940] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 455.452303][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.471466][ T43] usb 4-1: config 0 descriptor?? [ 455.483999][ T43] hub 4-1:0.0: USB hub found [ 455.535622][ T5940] usb 1-1: USB disconnect, device number 19 [ 455.682383][ T43] hub 4-1:0.0: 14 ports detected [ 455.688321][ T43] hub 4-1:0.0: insufficient power available to use all downstream ports [ 455.732866][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 455.744866][T10212] netlink: 72 bytes leftover after parsing attributes in process `syz.1.808'. [ 455.883332][ T43] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 455.896369][ T7705] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 455.916440][ T43] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 455.968118][ T43] usb 4-1: USB disconnect, device number 31 [ 455.996401][ T1585] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 456.099001][ T7705] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 456.111850][ T7705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.127545][ T7705] usb 3-1: config 0 descriptor?? [ 456.138960][ T7705] cp210x 3-1:0.0: cp210x converter detected [ 456.166449][ T1585] usb 2-1: Using ep0 maxpacket: 8 [ 456.175425][ T1585] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 456.187433][ T1585] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.421314][ T1585] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 456.456550][ T7705] usb 3-1: cp210x converter now attached to ttyUSB0 [ 456.524699][ T1585] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 456.620237][ T1585] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.677478][ T7705] usb 3-1: USB disconnect, device number 22 [ 456.736571][ T7705] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 456.744917][ T7705] cp210x 3-1:0.0: device disconnected [ 456.759749][ T1585] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 456.795940][ T10] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 456.905464][ T1585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.981531][ T10] usb 1-1: config 0 has an invalid interface number: 56 but max is 0 [ 457.018356][ T10] usb 1-1: config 0 has no interface number 0 [ 457.133291][ T10] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 457.185888][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.193916][ T10] usb 1-1: Product: syz [ 457.270870][ T10] usb 1-1: Manufacturer: syz [ 457.280280][ T10] usb 1-1: SerialNumber: syz [ 457.284930][ T1585] usb 2-1: usb_control_msg returned -71 [ 457.294497][ T10] usb 1-1: config 0 descriptor?? [ 457.308118][ T1585] usbtmc 2-1:16.0: can't read capabilities [ 457.358902][ T1585] usb 2-1: USB disconnect, device number 31 [ 457.616701][ T10] peak_usb 1-1:0.56: PEAK-System PCAN-USB X6 v50 fw v117.0.0 (2 channels) [ 457.646926][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.828'. [ 457.827222][ T10] peak_usb 1-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 457.840373][ T10] peak_usb 1-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 457.854786][T10255] netlink: 72 bytes leftover after parsing attributes in process `syz.5.828'. [ 458.039883][ T10] peak_usb 1-1:0.56: probe with driver peak_usb failed with error -71 [ 458.106472][ T10] usb 1-1: USB disconnect, device number 20 [ 458.115962][ T5946] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 458.315923][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 458.342151][ T5946] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 458.411623][ T5946] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 458.431775][ T5946] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 458.442630][ T5946] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 458.453208][ T5946] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.483094][ T5946] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 458.505475][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.793334][T10284] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 458.870796][ T5946] usb 6-1: GET_CAPABILITIES returned 0 [ 458.896501][ T5946] usbtmc 6-1:16.0: can't read capabilities [ 459.163073][ T1585] usb 6-1: USB disconnect, device number 13 [ 459.181130][T10255] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 459.282037][T10301] netlink: 'syz.0.851': attribute type 2 has an invalid length. [ 459.386802][ T5946] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 459.577485][ T5946] usb 3-1: Using ep0 maxpacket: 8 [ 459.608049][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.640970][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.657738][ T5946] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 459.680357][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.727411][ T5946] usb 3-1: config 0 descriptor?? [ 460.163122][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 460.175412][T10330] netlink: 72 bytes leftover after parsing attributes in process `syz.1.862'. [ 460.197443][ T5946] logitech 0003:046D:C20E.0006: rdesc size test failed for formula gp [ 460.225150][ T5946] logitech 0003:046D:C20E.0006: unbalanced delimiter at end of report description [ 460.260515][ T5946] logitech 0003:046D:C20E.0006: parse failed [ 460.286451][ T5946] logitech 0003:046D:C20E.0006: probe with driver logitech failed with error -22 [ 460.371753][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 460.383473][T10333] netlink: 72 bytes leftover after parsing attributes in process `syz.0.865'. [ 460.413284][ T10] usb 3-1: USB disconnect, device number 23 [ 460.531354][ T5914] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 460.546533][ T5946] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 460.687822][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 460.716451][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.727002][ T5914] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 460.736087][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 460.742506][ T1585] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 460.751404][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.780898][ T5914] usb 4-1: config 0 descriptor?? [ 460.793182][ T5946] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 460.804237][ T5946] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 460.817593][ T5946] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 460.829068][ T5946] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 460.839576][ T5946] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.853590][ T5946] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 460.863545][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.014823][ T1585] usb 1-1: Using ep0 maxpacket: 8 [ 461.288799][ T5914] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 461.300248][ T5914] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 461.323351][ T5914] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 461.363747][ T5914] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 461.371384][ T5914] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 461.378319][ T5914] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 461.385132][ T5914] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 461.396959][ T5914] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 461.411439][ T1585] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 461.420354][ T1585] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 461.430941][ T1585] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 461.441499][ T1585] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 461.452100][ T1585] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.468831][ T5914] isku 0003:1E7D:319C.0007: couldn't init struct isku_device [ 461.482582][ T5914] isku 0003:1E7D:319C.0007: couldn't install keyboard [ 461.490322][ T1585] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 461.503367][ T5914] isku 0003:1E7D:319C.0007: probe with driver isku failed with error -71 [ 461.512345][ T1585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.537736][ T5914] usb 4-1: USB disconnect, device number 32 [ 461.753365][ T5946] usb 2-1: GET_CAPABILITIES returned 0 [ 461.771771][ T5946] usbtmc 2-1:16.0: can't read capabilities [ 461.782518][ T1585] usb 1-1: usb_control_msg returned -71 [ 461.806528][ T1585] usbtmc 1-1:16.0: can't read capabilities [ 461.925079][ T1585] usb 1-1: USB disconnect, device number 21 [ 461.988393][T10340] fido_id[10340]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 462.044911][ T5914] usb 2-1: USB disconnect, device number 32 [ 462.847080][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.875'. [ 462.911615][T10362] netlink: 72 bytes leftover after parsing attributes in process `syz.5.875'. [ 463.187547][ T1209] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 463.345971][ T1209] usb 6-1: Using ep0 maxpacket: 8 [ 463.356919][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 463.417748][ T1209] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 463.521709][ T1209] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 463.562960][ T1209] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 463.574962][ T1209] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 463.585538][ T1209] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.605548][ T1209] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 463.625733][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.094544][ T1209] usb 6-1: usb_control_msg returned -71 [ 464.108809][ T1209] usbtmc 6-1:16.0: can't read capabilities [ 464.134724][ T1209] usb 6-1: USB disconnect, device number 14 [ 464.386119][ T5946] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 464.607332][ T5946] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 464.618978][ T5946] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 464.631681][ T5946] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 464.642204][ T5946] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 464.660882][ T5946] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 464.674697][ T5946] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 464.687928][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 464.696928][ T5946] usb 3-1: Product: syz [ 464.701205][ T5946] usb 3-1: Manufacturer: syz [ 464.710028][ T5946] cdc_wdm 3-1:1.0: skipping garbage [ 464.716299][ T5946] cdc_wdm 3-1:1.0: skipping garbage [ 464.725819][ T5946] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 464.732735][ T5946] cdc_wdm 3-1:1.0: Unknown control protocol [ 464.931545][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 465.135776][ T1209] usb 3-1: USB disconnect, device number 24 [ 465.246965][ T5914] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 465.314854][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'. [ 465.344511][T10414] netlink: 72 bytes leftover after parsing attributes in process `syz.1.893'. [ 465.409025][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.428222][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 465.471129][ T5914] usb 4-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 465.507517][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.548326][ T5914] usb 4-1: config 0 descriptor?? [ 465.596541][ T1585] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 465.757427][ T1585] usb 2-1: Using ep0 maxpacket: 8 [ 465.774157][ T1585] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 465.794364][ T1585] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 465.820530][ T1585] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 465.891498][ T1585] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 465.909019][ T1585] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.923884][ T1585] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 465.935198][ T1585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.011880][ T5914] cypress 0003:04B4:DE64.0008: unknown main item tag 0x0 [ 466.054992][ T5914] cypress 0003:04B4:DE64.0008: unknown main item tag 0x0 [ 466.063782][ T5914] cypress 0003:04B4:DE64.0008: unknown main item tag 0x0 [ 466.074852][ T5914] cypress 0003:04B4:DE64.0008: hidraw0: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.3-1/input0 [ 466.125961][ T5946] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 466.169738][ T1585] usb 2-1: GET_CAPABILITIES returned 0 [ 466.187258][ T1585] usbtmc 2-1:16.0: can't read capabilities [ 466.254510][ T1585] usb 4-1: USB disconnect, device number 33 [ 466.328077][ T5946] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 466.352730][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.376161][ T5946] usb 3-1: config 0 descriptor?? [ 466.384742][T10429] fido_id[10429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 466.462872][ T7705] usb 2-1: USB disconnect, device number 33 [ 466.491086][T10409] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 466.517753][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.903'. [ 466.866224][ T1209] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 466.880579][ T5946] waltop 0003:172F:0032.0009: item fetching failed at offset 3/5 [ 466.930978][T10441] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 466.948409][ T5946] waltop 0003:172F:0032.0009: probe with driver waltop failed with error -22 [ 467.098176][ T1209] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 467.112721][ T1585] usb 3-1: USB disconnect, device number 25 [ 467.131409][ T1209] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 467.171027][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.207600][ T1209] usb 1-1: config 0 descriptor?? [ 467.306374][ T7705] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 467.477876][ T7705] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 467.488530][ T7705] usb 4-1: config 0 has no interface number 0 [ 467.505945][ T7705] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 467.527497][ T7705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.559439][ T7705] usb 4-1: config 0 descriptor?? [ 467.590375][ T7705] usb 4-1: selecting invalid altsetting 1 [ 467.619639][ T7705] dvb_ttusb_budget: ttusb_init_controller: error [ 467.627150][ T7705] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 467.652405][ T1209] waltop 0003:172F:0037.000A: collection stack underflow [ 467.696536][ T1209] waltop 0003:172F:0037.000A: item 0 1 0 12 parsing failed [ 467.717010][ T1209] waltop 0003:172F:0037.000A: probe with driver waltop failed with error -22 [ 467.809440][ T7705] DVB: Unable to find symbol cx22700_attach() [ 467.847520][ T7705] DVB: Unable to find symbol tda10046_attach() [ 467.853782][ T7705] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 467.871283][ T10] usb 1-1: USB disconnect, device number 22 [ 467.871808][ T7705] usb 4-1: USB disconnect, device number 34 [ 468.006243][ T5946] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 468.046109][ T1209] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 468.178314][ T5946] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 468.187557][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.198894][ T5946] usb 6-1: config 0 descriptor?? [ 468.211125][ T1209] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.222420][ T1209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 468.229343][ T1209] usb 3-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.00 [ 468.238459][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.249907][ T1209] usb 3-1: config 0 descriptor?? [ 468.409769][ T5946] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 468.569846][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 468.581786][T10457] netlink: 72 bytes leftover after parsing attributes in process `syz.0.913'. [ 468.605983][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 468.623925][ T5946] [drm:udl_init] *ERROR* Selecting channel failed [ 468.650334][ T5946] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 468.657523][ T5946] [drm] Initialized udl on minor 2 [ 468.668031][ T1209] hid (null): global environment stack underflow [ 468.678263][ T5946] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 468.691104][ T1209] hid-generic 0003:093A:8003.000B: global environment stack underflow [ 468.708239][ T5946] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 468.726596][ T1209] hid-generic 0003:093A:8003.000B: item 0 1 1 11 parsing failed [ 468.758980][ T5946] usb 6-1: USB disconnect, device number 15 [ 468.776676][ T5940] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 468.795158][ T1209] hid-generic 0003:093A:8003.000B: probe with driver hid-generic failed with error -22 [ 468.808683][ T5940] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 468.820425][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 468.837011][ T5914] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 468.864008][ T10] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 468.913040][ T10] usb 4-1: config 6 has no interface number 0 [ 468.927582][ T7705] usb 3-1: USB disconnect, device number 26 [ 468.973763][ T10] usb 4-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 469.009384][ T10] usb 4-1: config 6 interface 200 has no altsetting 0 [ 469.026335][ T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 469.046694][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 469.053887][ T10] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 469.077350][ T5914] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 469.091265][ T5914] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 469.102558][ T5914] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 469.113235][ T5914] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 469.123818][ T10] usb 4-1: Product: syz [ 469.128318][ T5914] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.128913][ T10] usb 4-1: Manufacturer: syz [ 469.142341][ T5914] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 469.159106][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.216826][ T10] usb 4-1: SerialNumber: syz [ 469.306386][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'. [ 469.450718][ T5914] usb 1-1: usb_control_msg returned -71 [ 469.467458][T10467] vlan0: entered promiscuous mode [ 469.511370][ T5914] usbtmc 1-1:16.0: can't read capabilities [ 469.528706][T10467] syz_tun: entered promiscuous mode [ 469.566043][ T5940] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 469.580161][ T5914] usb 1-1: USB disconnect, device number 23 [ 469.716009][ T5940] usb 6-1: Using ep0 maxpacket: 16 [ 469.769287][ T5940] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.811283][ T5940] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.887569][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 469.917607][ T5940] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.029286][ T5940] usb 6-1: config 0 interface 0 has no altsetting 0 [ 470.100846][ T5940] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 470.162111][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.196696][ T5940] usb 6-1: config 0 descriptor?? [ 470.356441][ T5914] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 470.508470][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.523790][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.555273][ T5914] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 470.597215][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.629269][ T5940] hid_parser_main: 2 callbacks suppressed [ 470.629284][ T5940] kye 0003:0458:0153.000C: unknown main item tag 0x0 [ 470.667485][ T5940] kye 0003:0458:0153.000C: unknown main item tag 0x0 [ 470.679039][ T5940] kye 0003:0458:0153.000C: unknown main item tag 0x0 [ 470.682469][ T5914] usb 3-1: config 0 descriptor?? [ 470.694768][ T5940] kye 0003:0458:0153.000C: unknown main item tag 0x0 [ 470.704442][ T5940] kye 0003:0458:0153.000C: unknown main item tag 0x0 [ 470.711965][ T5940] kye 0003:0458:0153.000C: unknown main item tag 0x0 [ 470.719955][ T5940] kye 0003:0458:0153.000C: unknown main item tag 0x0 [ 470.729724][ T5940] kye 0003:0458:0153.000C: unknown main item tag 0x0 [ 470.736863][ T5940] kye 0003:0458:0153.000C: unknown main item tag 0x0 [ 470.743831][ T5940] kye 0003:0458:0153.000C: unknown main item tag 0x0 [ 470.794616][ T5940] kye 0003:0458:0153.000C: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.5-1/input0 [ 470.978989][ T5940] usb 6-1: USB disconnect, device number 16 [ 471.218656][ T5914] lg-g15 0003:046D:C222.000D: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 471.413414][ T10] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 471.439125][ T10] dvb-usb: bulk message failed: -71 (3/0) [ 471.466209][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 471.494752][ T10] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 471.501393][ T5914] usb 3-1: USB disconnect, device number 27 [ 471.546808][ T10] usb 4-1: media controller created [ 471.554906][T10490] tipc: Enabling of bearer rejected, failed to enable media [ 471.640373][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 471.716062][ T10] dvb-usb: bulk message failed: -71 (6/0) [ 471.744358][ T10] dvb-usb: bulk message failed: -71 (6/0) [ 471.765180][ T10] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 471.788691][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 471.806965][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 471.825658][ T10] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 471.869655][ T10] usb 4-1: USB disconnect, device number 35 [ 471.927801][ T10] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 472.146319][ T5914] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 472.220158][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.936'. [ 472.266144][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 472.296237][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 472.308824][ T5914] usb 6-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 472.322943][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.334329][ T5914] usb 6-1: config 0 descriptor?? [ 472.335942][ T5940] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 472.428493][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.449074][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.470429][ T10] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 472.489572][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.507782][ T5940] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 472.524746][ T10] usb 4-1: config 0 descriptor?? [ 472.537236][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 472.565902][ T5940] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.593912][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 472.612337][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 472.633304][ T5940] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.646254][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 472.658814][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 472.668046][ T5940] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.679566][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 472.688717][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 472.699357][ T5940] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.711592][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 472.721312][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 472.781559][ T5940] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.797793][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 472.812562][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 472.832336][ T5940] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.844001][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 472.847408][ T5914] magicmouse 0003:05AC:0324.000E: item fetching failed at offset 3/5 [ 472.852438][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 472.877093][ T5914] magicmouse 0003:05AC:0324.000E: magicmouse hid parse failed [ 472.908857][ T5940] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.933116][ T5914] magicmouse 0003:05AC:0324.000E: probe with driver magicmouse failed with error -22 [ 472.943631][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 472.965666][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'. [ 472.983740][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 473.013405][ T5940] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 473.049893][ T5946] usb 6-1: USB disconnect, device number 17 [ 473.063606][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 473.094173][ T5940] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 473.125160][ T5940] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 473.155410][ T5940] usb 3-1: Product: syz [ 473.161377][ T5940] usb 3-1: Manufacturer: syz [ 473.173212][ T5940] usb 3-1: SerialNumber: syz [ 473.198625][ T5940] usb 3-1: config 0 descriptor?? [ 473.229022][ T5940] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 473.305449][ T10] stadia 0003:18D1:9400.000F: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.3-1/input0 [ 473.333151][ T10] stadia 0003:18D1:9400.000F: no inputs found [ 473.345536][ T10] stadia 0003:18D1:9400.000F: force feedback init failed [ 473.492950][ T7705] usb 4-1: USB disconnect, device number 36 [ 473.506496][ T5914] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 473.530403][ T10] usb 3-1: USB disconnect, device number 28 [ 473.543447][ T10] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 473.682646][ T5914] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 473.693482][ T5914] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 473.703039][ T5914] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 473.714032][ T1585] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 473.722164][ T5914] usb 2-1: config 220 has no interface number 2 [ 473.729069][ T5914] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 473.743605][ T5914] usb 2-1: config 220 interface 0 has no altsetting 0 [ 473.750907][ T5914] usb 2-1: config 220 interface 76 has no altsetting 0 [ 473.759956][ T5914] usb 2-1: config 220 interface 1 has no altsetting 0 [ 473.769868][ T5914] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 473.779710][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.788793][ T5914] usb 2-1: Product: syz [ 473.793107][ T5914] usb 2-1: Manufacturer: syz [ 473.798539][ T5914] usb 2-1: SerialNumber: syz [ 473.886051][ T1585] usb 1-1: Using ep0 maxpacket: 16 [ 473.893706][ T1585] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.911258][ T1585] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.921870][ T1585] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 473.931670][ T1585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.947453][ T1585] usb 1-1: config 0 descriptor?? [ 474.049117][ T5914] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 474.071112][ T5914] uvcvideo 2-1:220.0: No valid video chain found. [ 474.091713][ T5914] usb 2-1: selecting invalid altsetting 0 [ 474.136489][ T5914] usb 2-1: selecting invalid altsetting 0 [ 474.162881][ T5914] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 474.197726][ T5914] usb 2-1: USB disconnect, device number 34 [ 474.400921][ T1585] apple 0003:05AC:024B.0010: unbalanced collection at end of report description [ 474.422781][ T1585] apple 0003:05AC:024B.0010: parse failed [ 474.440074][ T1585] apple 0003:05AC:024B.0010: probe with driver apple failed with error -22 [ 474.604355][ T5940] usb 1-1: USB disconnect, device number 24 [ 475.066479][ T5940] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 475.140436][ T1585] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 475.157355][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 475.216200][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 475.223072][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.234647][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.244725][ T5940] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 475.258238][ T5940] usb 2-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 475.267348][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.277432][ T5940] usb 2-1: config 0 descriptor?? [ 475.298128][ T1585] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 475.307892][ T1585] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.319683][ T1585] usb 4-1: config 0 has no interface number 0 [ 475.326341][ T1585] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 475.337335][ T1585] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 475.355946][ T1585] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 475.365014][ T1585] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.378784][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.387676][ T1585] usb 4-1: config 0 descriptor?? [ 475.397428][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 475.398721][ T1585] ldusb 4-1:0.55: Interrupt in endpoint not found [ 475.410127][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.446550][ T5914] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 475.455271][ T10] usb 3-1: config 0 descriptor?? [ 475.481585][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 475.608436][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.610904][ T1209] usb 4-1: USB disconnect, device number 37 [ 475.620038][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.637328][ T5914] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 475.658897][ T5914] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 475.672331][ T5914] usb 1-1: Manufacturer: syz [ 475.680181][ T5914] usb 1-1: config 0 descriptor?? [ 475.720710][ T5940] hid-generic 0003:045E:FC40.0011: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.1-1/input0 [ 475.906000][ T5946] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 475.909054][ T7705] usb 2-1: USB disconnect, device number 35 [ 475.969098][ T1209] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 476.066158][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 476.073561][ T5946] usb 6-1: unable to get BOS descriptor or descriptor too short [ 476.083252][ T10] pwc: recv_control_msg error -71 req 02 val 2700 [ 476.090911][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 476.098432][ T5946] usb 6-1: config 4 interface 0 has no altsetting 0 [ 476.102845][ T5914] hid_mf 0003:0079:1846.0012: unbalanced delimiter at end of report description [ 476.105495][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 476.121935][ T5914] hid_mf 0003:0079:1846.0012: HID parse failed. [ 476.124317][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 476.129440][ T5914] hid_mf 0003:0079:1846.0012: probe with driver hid_mf failed with error -22 [ 476.136028][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 476.150026][ T1209] usb 4-1: Using ep0 maxpacket: 8 [ 476.155598][ T5946] usb 6-1: string descriptor 0 read error: -22 [ 476.162900][ T5946] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 476.172588][ T1209] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 476.180851][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.189181][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 476.195622][ T1209] usb 4-1: config 0 has no interface number 0 [ 476.203467][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 476.210022][ T1209] usb 4-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 476.226883][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 476.234130][ T5946] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 476.243249][ T1209] usb 4-1: config 0 interface 1 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 476.254163][ T5946] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 476.264527][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 476.271461][ T1209] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 476.281379][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 476.288122][ T5946] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 476.295256][ T5946] usb 6-1: media controller created [ 476.301027][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 476.308200][ T1209] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 476.319182][ T5914] usb 1-1: USB disconnect, device number 25 [ 476.325955][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 476.332627][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 476.346600][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 476.355914][ T1209] usb 4-1: SerialNumber: syz [ 476.363015][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 476.371561][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 476.378911][ T1209] usb 4-1: config 0 descriptor?? [ 476.384535][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 476.405523][ T10] pwc: Registered as video103. [ 476.411922][ T1209] hso 4-1:0.1: Failed to find BULK OUT ep [ 476.437376][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 476.493868][ T10] usb 3-1: USB disconnect, device number 29 [ 476.639356][ T5940] usb 4-1: USB disconnect, device number 38 [ 477.044249][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.967'. [ 477.476950][ T5946] zl10353_read_register: readreg error (reg=127, ret==0) [ 477.499021][ T5940] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 477.510101][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'. [ 477.562810][ T5946] usb 6-1: USB disconnect, device number 18 [ 477.626140][ T1209] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 477.685944][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 477.701294][ T5940] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.715380][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 477.724326][ T5940] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 477.739829][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.764308][ T5940] usb 3-1: config 0 descriptor?? [ 477.818331][ T1209] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 477.830457][ T1209] usb 1-1: config 0 has no interface number 0 [ 477.836718][ T1209] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.857882][ T1209] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.896434][ T1209] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 477.925271][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.947174][ T1209] usb 1-1: config 0 descriptor?? [ 478.305092][ T5940] uclogic 0003:5543:0781.0013: ignoring exceeding usage max [ 478.337565][ T5940] uclogic 0003:5543:0781.0013: unbalanced collection at end of report description [ 478.363586][ T5940] uclogic 0003:5543:0781.0013: parse failed [ 478.393261][ T5940] uclogic 0003:5543:0781.0013: probe with driver uclogic failed with error -22 [ 478.435194][ T1209] hid_parser_main: 1240 callbacks suppressed [ 478.435215][ T1209] prodikeys 0003:041E:2801.0014: unknown main item tag 0x0 [ 478.457143][ T1209] prodikeys 0003:041E:2801.0014: unknown main item tag 0x0 [ 478.466363][ T1209] prodikeys 0003:041E:2801.0014: unknown main item tag 0x0 [ 478.473620][ T1209] prodikeys 0003:041E:2801.0014: unknown main item tag 0x0 [ 478.481902][ T1209] prodikeys 0003:041E:2801.0014: unknown main item tag 0x0 [ 478.489996][ T1209] prodikeys 0003:041E:2801.0014: unknown main item tag 0x0 [ 478.534419][ T1209] prodikeys 0003:041E:2801.0014: unknown main item tag 0x0 [ 478.556876][ T7705] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 478.562742][ T1209] prodikeys 0003:041E:2801.0014: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 478.609083][ T1209] hid_prodikeys: hid-prodikeys: failed to find output report [ 478.609083][ T1209] [ 478.659905][ T1585] usb 3-1: USB disconnect, device number 30 [ 478.666126][ T1209] usb 1-1: USB disconnect, device number 26 [ 478.746917][T10636] fido_id[10636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 478.767991][ T7705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.802246][ T7705] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 478.812369][ T7705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.824081][ T7705] usb 2-1: config 0 descriptor?? [ 479.266629][ T7705] cypress 0003:04B4:BCA1.0015: hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.1-1/input0 [ 479.483674][ T7705] usb 2-1: USB disconnect, device number 36 [ 479.673106][T10644] fido_id[10644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 480.398501][ T5940] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 480.546628][T10672] syz_tun: entered promiscuous mode [ 480.552396][T10672] vlan0: entered promiscuous mode [ 480.607746][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 480.646157][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.710418][ T5940] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 480.719547][ T1209] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 480.752393][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.781617][ T5940] usb 4-1: config 0 descriptor?? [ 480.802567][ T5940] hub 4-1:0.0: USB hub found [ 480.908389][ T1209] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 480.916863][ T1209] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.945888][ T1209] usb 2-1: config 0 has no interface number 0 [ 480.952214][ T1209] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 480.983747][ T1209] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 480.997228][ T1209] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.025186][ T5940] hub 4-1:0.0: 2 ports detected [ 481.030242][ T1209] usb 2-1: config 0 interface 52 has no altsetting 0 [ 481.039190][ T1209] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 481.048838][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 481.059336][ T1209] usb 2-1: SerialNumber: syz [ 481.067710][ T1209] usb 2-1: config 0 descriptor?? [ 481.216485][ T7706] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 481.242622][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1002'. [ 481.284710][ T1209] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 481.338142][ T1209] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 481.366749][ T7706] usb 1-1: Using ep0 maxpacket: 8 [ 481.379534][ T7706] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 481.406529][ T7706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.424208][ T7706] usb 1-1: Product: syz [ 481.428933][ T7706] usb 1-1: Manufacturer: syz [ 481.434099][ T7706] usb 1-1: SerialNumber: syz [ 481.444369][ T5940] usb 4-1: USB disconnect, device number 39 [ 481.452179][ T7706] usb 1-1: config 0 descriptor?? [ 481.468358][ T7706] gspca_main: sq930x-2.14.0 probing 2770:930c [ 481.529182][ T7705] usb 2-1: USB disconnect, device number 37 [ 481.922513][ T7706] gspca_sq930x: ucbus_write failed -71 [ 482.166649][ T7706] gspca_sq930x: Sensor ov9630 not yet treated [ 482.172835][ T7706] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 482.205780][ T7706] usb 1-1: USB disconnect, device number 27 [ 482.856165][ T5946] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 482.898661][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'. [ 483.009230][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.032336][ T5946] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 483.103595][ T5946] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 483.143606][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.286665][ T5946] usb 2-1: config 0 descriptor?? [ 483.297833][ T5946] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 483.304440][ T5946] dvb-usb: bulk message failed: -22 (3/0) [ 483.349434][ T5946] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 483.373069][ T5946] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 483.380674][ T5946] usb 2-1: media controller created [ 483.397828][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 483.422755][ T5946] dvb-usb: bulk message failed: -22 (6/0) [ 483.440584][ T5946] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 483.461785][ T5946] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 483.525031][ T5946] dvb-usb: schedule remote query interval to 150 msecs. [ 483.564619][ T5946] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 483.603392][T10717] dvb-usb: bulk message failed: -22 (2/0) [ 483.716058][ T1209] dvb-usb: bulk message failed: -22 (1/0) [ 483.722088][ T1209] dvb-usb: error while querying for an remote control event. [ 483.745005][ T5946] usb 2-1: USB disconnect, device number 38 [ 483.797523][ T5946] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 483.986094][ T5940] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 484.309689][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.351228][ T5940] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 484.370936][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.390877][ T5940] usb 3-1: config 0 descriptor?? [ 484.612007][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1016'. [ 484.871097][T10747] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1016'. [ 484.914231][ T5940] lua 0003:1E7D:2C2E.0016: unbalanced collection at end of report description [ 484.967813][ T5940] lua 0003:1E7D:2C2E.0016: parse failed [ 484.976224][ T5940] lua 0003:1E7D:2C2E.0016: probe with driver lua failed with error -22 [ 485.147783][ T5940] usb 3-1: USB disconnect, device number 31 [ 486.026663][ T7705] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 486.141754][T10764] veth0_vlan: left promiscuous mode [ 486.157147][T10764] veth0_vlan: entered promiscuous mode [ 486.216532][ T7705] usb 3-1: Using ep0 maxpacket: 32 [ 486.251790][ T7705] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 486.260715][ T7705] usb 3-1: config 0 has no interface number 0 [ 486.275140][ T7705] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 486.307469][ T7705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.350345][ T7705] usb 3-1: Product: syz [ 486.354524][ T7705] usb 3-1: Manufacturer: syz [ 486.360249][ T7705] usb 3-1: SerialNumber: syz [ 486.379242][ T7705] usb 3-1: config 0 descriptor?? [ 486.388986][ T7705] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 486.405641][ T7705] dvb-usb: bulk message failed: -22 (2/0) [ 486.433956][ T7705] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 486.467921][ T7705] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 486.492500][ T7705] usb 3-1: media controller created [ 486.540823][ T7705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 486.631801][ T7705] cxusb: set interface failed [ 486.669515][ T7705] dvb-usb: bulk message failed: -22 (1/0) [ 486.980743][ T7705] DVB: Unable to find symbol lgdt330x_attach() [ 487.009568][ T7705] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 487.120775][ T7705] rc_core: IR keymap rc-dvico-portable not found [ 487.154545][ T7705] Registered IR keymap rc-empty [ 487.181209][ T7705] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 487.223832][ T7705] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input22 [ 487.259875][ T7705] dvb-usb: schedule remote query interval to 100 msecs. [ 487.284286][ T7705] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 487.309036][ T7705] usb 3-1: USB disconnect, device number 32 [ 487.518206][ T7705] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 487.577018][ T7706] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 487.934549][ T7706] usb 1-1: Using ep0 maxpacket: 32 [ 488.427326][ T7706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.488923][ T7706] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 488.548607][ T7706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.571626][ T7706] usb 1-1: config 0 descriptor?? [ 490.334262][ T7706] elo 0003:04E7:0009.0017: unknown main item tag 0x4 [ 490.358431][ T7706] elo 0003:04E7:0009.0017: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.0-1/input0 [ 490.799939][ T5940] usb 1-1: USB disconnect, device number 28 [ 491.008557][T10800] netlink: 'syz.2.1032': attribute type 2 has an invalid length. [ 491.089542][T10801] fido_id[10801]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 491.502441][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 491.769693][T10813] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1033'. [ 492.745156][T10824] batman_adv: batadv0: Adding interface: ipvlan0 [ 492.803702][T10824] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.829104][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.102243][T10824] batman_adv: batadv0: Interface activated: ipvlan0 [ 498.410067][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 498.550465][ T1585] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 498.561581][T10852] netlink: 'syz.3.1048': attribute type 1 has an invalid length. [ 498.561605][T10852] netlink: 'syz.3.1048': attribute type 2 has an invalid length. [ 498.736058][ T5946] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 498.887029][ T5946] usb 3-1: Using ep0 maxpacket: 8 [ 498.894587][ T5946] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 498.911931][ T5946] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 498.947700][ T5946] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 498.978296][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 498.996301][ T5946] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 499.008442][ T1585] usb 6-1: Using ep0 maxpacket: 32 [ 499.017556][ T5946] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.055917][ T5946] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 499.090150][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.169943][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 499.195696][ T1585] usb 6-1: config 0 interface 0 altsetting 140 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.205923][ T10] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 499.257004][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.297465][ T10] usb 4-1: Product: syz [ 499.301724][ T10] usb 4-1: Manufacturer: syz [ 499.357760][ T5946] usb 3-1: GET_CAPABILITIES returned 0 [ 499.363850][ T10] usb 4-1: SerialNumber: syz [ 499.373932][ T1585] usb 6-1: config 0 interface 0 altsetting 140 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.395493][ T5946] usbtmc 3-1:16.0: can't read capabilities [ 499.426987][ T10] usb 4-1: config 0 descriptor?? [ 499.472229][ T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 499.496915][ T1585] usb 6-1: config 0 interface 0 has no altsetting 0 [ 499.511269][ T1585] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 499.529291][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 499.542027][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 499.550911][ T1585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.594180][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 499.620959][ T10] usb 4-1: media controller created [ 499.755634][ T1585] usb 6-1: config 0 descriptor?? [ 499.774953][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 499.815119][T10849] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 499.851666][ T5946] usb 3-1: USB disconnect, device number 33 [ 499.951436][ T10] cxusb: set interface failed [ 499.970478][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 500.175106][ T10] DVB: Unable to find symbol mt352_attach() [ 500.181693][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 500.315929][ T10] rc_core: IR keymap rc-dvico-portable not found [ 500.322308][ T10] Registered IR keymap rc-empty [ 500.331861][ T10] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 500.354858][ T10] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input23 [ 500.389000][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 500.405429][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 500.449484][ T10] usb 4-1: USB disconnect, device number 40 [ 500.486925][ T1209] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 500.676214][ T1209] usb 2-1: Using ep0 maxpacket: 16 [ 500.688420][ T1585] isku 0003:1E7D:3264.0018: item fetching failed at offset 2/7 [ 500.690953][ T1209] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 500.722150][ T1209] usb 2-1: config 0 has no interface number 0 [ 500.767277][ T1209] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 500.823614][ T1209] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 500.844551][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 500.877078][ T1209] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 500.915636][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 500.973253][ T1209] usb 2-1: Product: syz [ 500.988177][ T1209] usb 2-1: SerialNumber: syz [ 501.015453][ T1209] usb 2-1: config 0 descriptor?? [ 501.032210][ T1209] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 501.046891][ T1209] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input24 [ 501.064891][ T1585] isku 0003:1E7D:3264.0018: parse failed [ 501.120760][ T1585] isku 0003:1E7D:3264.0018: probe with driver isku failed with error -22 [ 501.182788][ T1585] usb 6-1: USB disconnect, device number 19 [ 501.246105][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 501.480751][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 501.518087][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 501.567308][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.571549][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.582664][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.589829][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.596979][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.604158][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.612292][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.612590][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.619429][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.633511][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.640720][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.648024][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.704864][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 501.755820][ T5940] usb 2-1: USB disconnect, device number 39 [ 501.761877][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 501.821776][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 501.859834][ T5940] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 501.884437][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.903816][ T10] usb 4-1: Product: syz [ 501.911786][ T10] usb 4-1: Manufacturer: syz [ 501.917584][ T10] usb 4-1: SerialNumber: syz [ 501.925065][ T10] usb 4-1: config 0 descriptor?? [ 501.941120][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 501.951394][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 501.966034][ T1209] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 502.139190][ T1209] usb 3-1: Using ep0 maxpacket: 32 [ 502.158268][ T1209] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 502.172092][ T1209] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 502.183976][ T1209] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.203506][ T1209] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 502.213421][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 502.221915][ T1209] usb 3-1: Product: syz [ 502.233960][ T1209] usb 3-1: Manufacturer: syz [ 502.239686][ T1209] usb 3-1: SerialNumber: syz [ 502.249325][T10882] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 502.287263][ T1209] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input25 [ 502.709575][ T10] em28xx 4-1:0.0: chip ID is em2710 [ 502.716729][ T1209] usb 3-1: USB disconnect, device number 34 [ 502.818479][ T1209] appletouch 3-1:1.0: input: appletouch disconnected [ 502.847697][ T1585] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 502.923684][ T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 502.941757][ T10] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 502.962538][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'. [ 502.977252][ T10] em28xx 4-1:0.0: No AC97 audio processor [ 503.009673][ T10] usb 4-1: USB disconnect, device number 41 [ 503.033983][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 503.070845][ T10] em28xx 4-1:0.0: Freeing device [ 503.113735][ T1585] usb 6-1: Using ep0 maxpacket: 16 [ 503.185934][ T5940] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 503.288435][ T1585] usb 6-1: config 0 has no interfaces? [ 503.370726][ T5940] usb 1-1: unable to get BOS descriptor or descriptor too short [ 503.389695][ T5940] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 503.400447][ T5940] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 503.411839][ T5940] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 503.430708][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 503.440986][ T5940] usb 1-1: config 129 has no interface number 0 [ 503.452998][ T5940] usb 1-1: config 129 has no interface number 1 [ 503.473362][ T5940] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 503.534600][ T5940] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 503.563519][ T5940] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 503.642089][ T5940] usb 1-1: config 129 interface 135 has no altsetting 0 [ 503.649705][ T1585] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 503.667924][ T1585] usb 6-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 503.686734][ T1585] usb 6-1: Product: syz [ 503.701088][ T1585] usb 6-1: Manufacturer: syz [ 503.704370][ T5940] usb 1-1: config 129 interface 5 has no altsetting 0 [ 503.751563][ T1585] usb 6-1: SerialNumber: syz [ 503.802411][ T5940] usb 1-1: string descriptor 0 read error: -22 [ 503.803127][ T1585] usb 6-1: config 0 descriptor?? [ 503.817643][ T5940] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 503.817673][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.872315][ T5940] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.965645][ T5940] usb 1-1: MIDIStreaming interface descriptor not found [ 504.014822][T10902] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 504.240671][ T5940] usb 1-1: USB disconnect, device number 29 [ 504.372558][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'. [ 504.541324][T10908] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1067'. [ 504.710890][ T10] usb 6-1: USB disconnect, device number 20 [ 505.474082][ T1585] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 505.498452][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 505.704211][ T1585] usb 4-1: device descriptor read/64, error -32 [ 506.076513][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 506.235958][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 506.251686][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 506.260567][ T10] usb 3-1: config 0 has no interface number 0 [ 506.270260][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 506.280338][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.290033][ T10] usb 3-1: Product: syz [ 506.294396][ T10] usb 3-1: Manufacturer: syz [ 506.307466][ T10] usb 3-1: SerialNumber: syz [ 506.323644][ T10] usb 3-1: config 0 descriptor?? [ 506.338981][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 506.432466][ T1585] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 506.565760][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 506.637706][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 506.789511][ T1585] usb 4-1: Using ep0 maxpacket: 8 [ 507.112153][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 507.123978][ T5940] usb 3-1: USB disconnect, device number 35 [ 507.192832][ T5940] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 507.328473][ T5940] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 507.362493][ T5940] quatech2 3-1:0.51: device disconnected [ 507.421426][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 507.421444][ T30] audit: type=1326 audit(1763652976.815:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 507.539687][ T30] audit: type=1326 audit(1763652976.825:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 507.618437][ T30] audit: type=1326 audit(1763652976.825:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 507.686300][ T30] audit: type=1326 audit(1763652976.825:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 507.898373][ T30] audit: type=1326 audit(1763652976.825:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 508.142398][ T30] audit: type=1326 audit(1763652976.825:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 508.351650][ T30] audit: type=1326 audit(1763652976.825:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 508.410235][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1081'. [ 508.438808][ T30] audit: type=1326 audit(1763652976.825:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 508.452976][ T1585] usb 4-1: device descriptor read/all, error -71 [ 508.503519][ T30] audit: type=1326 audit(1763652976.825:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 508.532060][ T1585] usb usb4-port1: attempt power cycle [ 508.533284][ T30] audit: type=1326 audit(1763652976.825:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 508.617759][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 511.813169][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1091'. [ 511.853390][T10990] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1091'. [ 512.105963][ T5946] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 512.186664][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 512.236154][ T1209] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 512.395979][ T1209] usb 4-1: Using ep0 maxpacket: 8 [ 512.425641][ T5946] usb 3-1: Using ep0 maxpacket: 8 [ 512.433767][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 512.466773][ T1209] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 512.483714][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.497001][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.505235][ T5946] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 512.524578][ T5946] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 512.540355][ T10] usb 1-1: config 0 descriptor?? [ 512.575359][ T1209] pvrusb2: Hardware description: Terratec Grabster AV400 [ 512.589637][ T5946] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 512.601827][ T10] cp210x 1-1:0.0: cp210x converter detected [ 512.822105][ T1209] pvrusb2: ********** [ 512.866636][ T5946] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 512.891717][ T1209] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 512.907220][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 512.945628][ T5946] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.959446][ T1209] pvrusb2: Important functionality might not be entirely working. [ 512.972887][ T1209] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 512.985354][ T5946] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 512.995606][ T1209] pvrusb2: ********** [ 513.000194][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.025967][ T2346] pvrusb2: Invalid write control endpoint [ 513.133671][ T10] usb 1-1: USB disconnect, device number 30 [ 513.196995][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 513.205114][ T10] cp210x 1-1:0.0: device disconnected [ 513.304370][ T5946] usb 3-1: GET_CAPABILITIES returned 0 [ 513.336785][T10995] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 513.348878][ T5946] usbtmc 3-1:16.0: can't read capabilities [ 513.368615][ T1209] usb 4-1: USB disconnect, device number 45 [ 513.396591][ T2346] pvrusb2: Invalid write control endpoint [ 513.422376][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 513.442386][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 513.451683][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 513.462295][ T2346] pvrusb2: Device being rendered inoperable [ 513.470375][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 513.494068][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 513.514391][ T2346] pvrusb2: Attached sub-driver cx25840 [ 513.556002][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 513.595055][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 513.647352][T10986] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 513.673430][ T10] usb 3-1: USB disconnect, device number 36 [ 514.590821][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 514.590838][ T30] audit: type=1326 audit(1763652983.995:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 514.673643][ T30] audit: type=1326 audit(1763652984.025:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 514.730992][ T30] audit: type=1326 audit(1763652984.035:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 514.788463][ T30] audit: type=1326 audit(1763652984.035:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 514.812276][ T30] audit: type=1326 audit(1763652984.035:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 514.859823][ T30] audit: type=1326 audit(1763652984.035:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 514.974538][ T30] audit: type=1326 audit(1763652984.035:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 515.032057][ T30] audit: type=1326 audit(1763652984.035:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 515.168497][ T30] audit: type=1326 audit(1763652984.035:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 515.246982][ T30] audit: type=1326 audit(1763652984.035:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 515.527004][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'. [ 515.554572][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 515.564027][T11045] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1119'. [ 515.584667][T11045] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 516.322382][T11055] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1121'. [ 516.417350][ T1209] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 516.606217][ T1209] usb 3-1: Using ep0 maxpacket: 8 [ 516.642206][ T1209] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 516.662237][ T1209] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 516.682534][ T1209] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 516.704997][ T1209] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 516.726862][ T1209] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.765994][ T1209] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 516.785552][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.758329][ T1209] usb 3-1: GET_CAPABILITIES returned 0 [ 517.763868][ T1209] usbtmc 3-1:16.0: can't read capabilities [ 518.371363][ T1209] usb 3-1: USB disconnect, device number 37 [ 519.524133][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'. [ 519.572932][T11087] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1131'. [ 519.856224][ T5946] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 520.026017][ T5946] usb 1-1: Using ep0 maxpacket: 8 [ 520.040222][ T5946] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 520.048932][ T5946] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 520.062039][ T5946] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 520.071983][ T5946] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 520.082755][ T5946] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.097165][ T5946] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 520.106726][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.390225][ T1585] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 520.453887][ T5946] usb 1-1: GET_CAPABILITIES returned 0 [ 520.476062][ T5946] usbtmc 1-1:16.0: can't read capabilities [ 520.811394][ T1585] usb 2-1: unable to get BOS descriptor or descriptor too short [ 520.879795][ T1585] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 520.897663][ T1585] usb 2-1: config 6 has no interface number 0 [ 520.903798][ T1585] usb 2-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 520.959348][T11087] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 520.966319][ T5946] usb 1-1: USB disconnect, device number 31 [ 521.026525][ T1585] usb 2-1: config 6 interface 200 has no altsetting 0 [ 521.140586][ T1585] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 521.159243][ T1585] usb 2-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 521.214409][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 521.229256][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 521.243457][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 521.283571][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 521.300409][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 521.351517][ T1585] usb 2-1: Product: syz [ 521.362890][ T1585] usb 2-1: Manufacturer: syz [ 521.365587][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 521.383624][ T1585] usb 2-1: SerialNumber: syz [ 521.386445][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 521.396645][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 521.409699][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 521.421669][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 522.267774][ T5946] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 522.427025][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 522.444811][ T5946] usb 4-1: unable to get BOS descriptor or descriptor too short [ 522.459346][ T5946] usb 4-1: config 4 interface 0 has no altsetting 0 [ 522.471163][T11102] chnl_net:caif_netlink_parms(): no params data found [ 522.483214][ T5946] usb 4-1: string descriptor 0 read error: -22 [ 522.494650][ T5946] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 522.560190][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.649923][ T5946] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 522.708559][ T5946] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 522.979712][ T5946] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 523.001590][ T5946] usb 4-1: media controller created [ 523.069144][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.270842][ T1585] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 523.300987][ T1585] dvb-usb: bulk message failed: -71 (3/0) [ 523.364137][ T1585] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 523.427532][ T1585] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 523.447999][ T1585] usb 2-1: media controller created [ 523.469293][ T5835] Bluetooth: hci5: command tx timeout [ 523.567646][T11102] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.602030][T11102] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.629784][T11102] bridge_slave_0: entered allmulticast mode [ 523.675046][T11102] bridge_slave_0: entered promiscuous mode [ 523.712971][T11102] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.743180][T11102] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.743689][ T1585] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.778469][T11102] bridge_slave_1: entered allmulticast mode [ 523.871361][ T1585] dvb-usb: bulk message failed: -71 (6/0) [ 523.897283][T11102] bridge_slave_1: entered promiscuous mode [ 523.951210][ T1585] dvb-usb: bulk message failed: -71 (6/0) [ 524.105475][ T1585] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 524.142540][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 524.186723][ T5946] zl10353_read_register: readreg error (reg=127, ret==0) [ 524.210337][ T1585] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 524.234636][ T1585] dvb-usb: schedule remote query interval to 150 msecs. [ 524.643041][ T1585] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 524.852045][ T5914] dvb-usb: bulk message failed: -71 (1/0) [ 524.867026][ T5914] dvb-usb: error while querying for an remote control event. [ 525.061456][ T5914] dvb-usb: bulk message failed: -71 (1/0) [ 525.790068][ T5835] Bluetooth: hci5: command tx timeout [ 527.891567][ T5840] Bluetooth: hci5: command tx timeout [ 528.089639][ T5914] dvb-usb: error while querying for an remote control event. [ 530.306037][ T5840] Bluetooth: hci5: command tx timeout [ 530.491415][ T5914] dvb-usb: bulk message failed: -71 (1/0) [ 531.377325][ C1] sched: DL replenish lagged too much [ 533.161438][ T5914] dvb-usb: error while querying for an remote control event. [ 533.964109][ T5914] dvb-usb: bulk message failed: -71 (1/0) [ 533.979156][ T5914] dvb-usb: error while querying for an remote control event. [ 535.342312][ T7706] dvb-usb: bulk message failed: -71 (1/0) [ 535.356859][ T7706] dvb-usb: error while querying for an remote control event. [ 554.070989][ T43] dvb-usb: bulk message failed: -71 (1/0) [ 554.117180][ T43] dvb-usb: error while querying for an remote control event. [ 563.071555][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.093617][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 597.518581][ T43] dvb-usb: bulk message failed: -71 (1/0) [ 597.524370][ T43] dvb-usb: error while querying for an remote control event. [ 627.851379][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.198667][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.175862][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 629.182847][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10924/1:b..l [ 629.191440][ C1] rcu: (detected by 1, t=10503 jiffies, g=48521, q=459278 ncpus=2) [ 629.199446][ C1] task:syz.5.1072 state:R running task stack:24808 pid:10924 tgid:10915 ppid:8002 task_flags:0x40054c flags:0x10080001 [ 629.214227][ C1] Call Trace: [ 629.217524][ C1] [ 629.220470][ C1] __schedule+0x1798/0x4cc0 [ 629.225015][ C1] ? __pfx___schedule+0x10/0x10 [ 629.229895][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x8bd/0xce0 [ 629.236532][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 629.241843][ C1] preempt_schedule_irq+0xb5/0x150 [ 629.246984][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 629.252738][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 629.258652][ C1] irqentry_exit+0x6f/0x90 [ 629.263182][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 629.269247][ C1] RIP: 0010:lock_release+0x2b5/0x3e0 [ 629.274634][ C1] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 eb ea d0 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 629.294254][ C1] RSP: 0018:ffffc9001c12f4b0 EFLAGS: 00000206 [ 629.300359][ C1] RAX: e46b4b9036d98300 RBX: 0000000000000202 RCX: e46b4b9036d98300 [ 629.308346][ C1] RDX: 0000000000000000 RSI: ffffffff8d8f50ca RDI: ffffffff8bbf08e0 [ 629.316328][ C1] RBP: ffff88802571a970 R08: ffffc9001c12fc10 R09: 0000000000000000 [ 629.324306][ C1] R10: ffffc9001c12f638 R11: fffff52003825ec9 R12: 0000000000000000 [ 629.332293][ C1] R13: 0000000000000000 R14: ffffffff8df3d6e0 R15: ffff888025719e40 [ 629.340293][ C1] ? unwind_next_frame+0xa5/0x2390 [ 629.345435][ C1] ? unwind_next_frame+0xa5/0x2390 [ 629.350563][ C1] unwind_next_frame+0x19a9/0x2390 [ 629.355795][ C1] ? unwind_next_frame+0xa5/0x2390 [ 629.360914][ C1] ? do_exit+0x6b5/0x2300 [ 629.365263][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 629.371440][ C1] arch_stack_walk+0x11c/0x150 [ 629.376229][ C1] ? do_group_exit+0x21c/0x2d0 [ 629.381019][ C1] stack_trace_save+0x9c/0xe0 [ 629.385724][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 629.391124][ C1] save_stack+0xf5/0x1f0 [ 629.395399][ C1] ? __pfx_save_stack+0x10/0x10 [ 629.400275][ C1] ? __free_frozen_pages+0xbc4/0xd30 [ 629.405580][ C1] ? vfree+0x25a/0x400 [ 629.409666][ C1] ? kcov_close+0x28/0x50 [ 629.413998][ C1] ? __fput+0x44c/0xa70 [ 629.418158][ C1] ? task_work_run+0x1d4/0x260 [ 629.422936][ C1] ? do_exit+0x6b5/0x2300 [ 629.427302][ C1] __reset_page_owner+0x71/0x1f0 [ 629.432260][ C1] __free_frozen_pages+0xbc4/0xd30 [ 629.437396][ C1] vfree+0x25a/0x400 [ 629.441324][ C1] ? __pfx_kcov_close+0x10/0x10 [ 629.446174][ C1] kcov_close+0x28/0x50 [ 629.450317][ C1] __fput+0x44c/0xa70 [ 629.454289][ C1] task_work_run+0x1d4/0x260 [ 629.458952][ C1] ? __pfx_task_work_run+0x10/0x10 [ 629.464050][ C1] ? do_exit+0x6b0/0x2300 [ 629.468358][ C1] ? kmem_cache_free+0x19b/0x690 [ 629.473280][ C1] do_exit+0x6b5/0x2300 [ 629.477419][ C1] ? do_raw_spin_lock+0x121/0x290 [ 629.482420][ C1] ? __pfx_do_exit+0x10/0x10 [ 629.486996][ C1] do_group_exit+0x21c/0x2d0 [ 629.491567][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.496748][ C1] get_signal+0x1285/0x1340 [ 629.501344][ C1] arch_do_signal_or_restart+0xa0/0x790 [ 629.506901][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 629.513049][ C1] ? __se_sys_futex_time32+0x360/0x3e0 [ 629.518495][ C1] ? exit_to_user_mode_loop+0x40/0x130 [ 629.523934][ C1] exit_to_user_mode_loop+0x72/0x130 [ 629.529197][ C1] __do_fast_syscall_32+0x1f4/0x2b0 [ 629.534482][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.539665][ C1] do_fast_syscall_32+0x34/0x80 [ 629.544488][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 629.550794][ C1] RIP: 0023:0xf70cd539 [ 629.554854][ C1] RSP: 002b:00000000f505855c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 629.563256][ C1] RAX: fffffffffffffff4 RBX: 0000000000000005 RCX: 00000000c0045005 [ 629.571209][ C1] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 629.579199][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 629.587149][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 629.595100][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 629.603078][ C1] [ 629.606093][ C1] rcu: rcu_preempt kthread starved for 492 jiffies! g48521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 629.617111][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 629.627105][ C1] rcu: RCU grace-period kthread stack dump: [ 629.633174][ C1] task:rcu_preempt state:R running task stack:27336 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 629.646688][ C1] Call Trace: [ 629.649979][ C1] [ 629.652922][ C1] __schedule+0x1798/0x4cc0 [ 629.657578][ C1] ? __lock_acquire+0xab9/0xd20 [ 629.662441][ C1] ? __pfx___schedule+0x10/0x10 [ 629.667324][ C1] ? schedule+0x91/0x360 [ 629.671582][ C1] schedule+0x165/0x360 [ 629.675914][ C1] schedule_timeout+0x12b/0x270 [ 629.680784][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 629.686173][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 629.692087][ C1] ? __pfx_process_timeout+0x10/0x10 [ 629.697391][ C1] ? prepare_to_swait_event+0x341/0x380 [ 629.702955][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 629.707836][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 629.713996][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 629.719292][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 629.724516][ C1] ? finish_swait+0xcd/0x1f0 [ 629.729129][ C1] rcu_gp_kthread+0x99/0x390 [ 629.733822][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 629.739038][ C1] ? __kthread_parkme+0x7b/0x200 [ 629.743987][ C1] ? __kthread_parkme+0x1a1/0x200 [ 629.749026][ C1] kthread+0x711/0x8a0 [ 629.753808][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 629.759030][ C1] ? __pfx_kthread+0x10/0x10 [ 629.763639][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 629.768858][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.774077][ C1] ? __pfx_kthread+0x10/0x10 [ 629.778690][ C1] ret_from_fork+0x4bc/0x870 [ 629.783295][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 629.788434][ C1] ? __switch_to_asm+0x39/0x70 [ 629.793220][ C1] ? __switch_to_asm+0x33/0x70 [ 629.797997][ C1] ? __pfx_kthread+0x10/0x10 [ 629.802608][ C1] ret_from_fork_asm+0x1a/0x30 [ 629.807403][ C1] [ 629.810424][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 629.816758][ C1] Sending NMI from CPU 1 to CPUs 0: [ 629.821966][ C0] NMI backtrace for cpu 0 [ 629.821998][ C0] CPU: 0 UID: 0 PID: 3533 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 629.822033][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 629.822052][ C0] Workqueue: events_unbound macvlan_process_broadcast [ 629.822082][ C0] RIP: 0010:kasan_check_range+0x9f/0x2c0 [ 629.822101][ C0] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd [ 629.822115][ C0] RSP: 0018:ffffc90000006cd0 EFLAGS: 00000046 [ 629.822129][ C0] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff81c7c338 [ 629.822140][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8f7cee70 [ 629.822151][ C0] RBP: ffffc90000006db0 R08: ffffffff8f7cee77 R09: 1ffffffff1ef9dce [ 629.822163][ C0] R10: dffffc0000000000 R11: fffffbfff1ef9dce R12: 0000000000000001 [ 629.822175][ C0] R13: ffff888150e26ec0 R14: fffffbfff1ef9dcf R15: 1ffffffff1ef9dce [ 629.822188][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 629.822201][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 629.822212][ C0] CR2: 00000000800f1018 CR3: 000000002aba8000 CR4: 00000000003526f0 [ 629.822226][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 629.822236][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 629.822246][ C0] Call Trace: [ 629.822252][ C0] [ 629.822259][ C0] ? ipt_do_table+0x2a3/0x1640 [ 629.822280][ C0] trace_irq_disable+0x28/0x110 [ 629.822298][ C0] __local_bh_enable_ip+0xce/0x1c0 [ 629.822315][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 629.822337][ C0] ipt_do_table+0x13dd/0x1640 [ 629.822368][ C0] ? ipt_do_table+0x2a3/0x1640 [ 629.822385][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 629.822406][ C0] ? nf_nat_ipv4_local_fn+0x3f1/0x540 [ 629.822431][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 629.822449][ C0] nf_hook_slow+0xc5/0x220 [ 629.822469][ C0] nf_hook+0x217/0x380 [ 629.822490][ C0] ? nf_hook+0x9d/0x380 [ 629.822509][ C0] ? __pfx_nf_hook+0x10/0x10 [ 629.822534][ C0] ? __pfx_dst_output+0x10/0x10 [ 629.822557][ C0] ? ip_fast_csum+0x1ee/0x2b0 [ 629.822577][ C0] __ip_local_out+0x4db/0x600 [ 629.822595][ C0] ? __pfx_dst_output+0x10/0x10 [ 629.822616][ C0] ip_local_out+0x26/0x70 [ 629.822636][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 629.822661][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 629.822678][ C0] ? nft_tunnel_get_reduce+0x5b8/0x640 [ 629.822696][ C0] ? synproxy_pernet+0x45/0x270 [ 629.822719][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 629.822744][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 629.822766][ C0] ? nf_ip_checksum+0x13c/0x510 [ 629.822787][ C0] nft_synproxy_do_eval+0x345/0x570 [ 629.822811][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 629.822832][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 629.822855][ C0] ? ip_vs_conn_out_get+0xa16/0xa70 [ 629.822882][ C0] nft_do_chain+0x40c/0x1920 [ 629.822909][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 629.822942][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 629.822965][ C0] nft_do_chain_inet+0x25d/0x340 [ 629.822985][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 629.823008][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 629.823034][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 629.823054][ C0] nf_hook_slow+0xc5/0x220 [ 629.823073][ C0] NF_HOOK+0x206/0x3a0 [ 629.823090][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 629.823107][ C0] ? NF_HOOK+0x9a/0x3a0 [ 629.823122][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 629.823137][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 629.823155][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 629.823173][ C0] ? skb_dst+0x4f/0xd0 [ 629.823189][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 629.823207][ C0] NF_HOOK+0x30c/0x3a0 [ 629.823224][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 629.823240][ C0] ? NF_HOOK+0x9a/0x3a0 [ 629.823255][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 629.823270][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 629.823286][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 629.823308][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 629.823322][ C0] __netif_receive_skb+0x143/0x380 [ 629.823346][ C0] ? process_backlog+0x2d5/0x14f0 [ 629.823371][ C0] process_backlog+0x60e/0x14f0 [ 629.823401][ C0] ? __pfx_process_backlog+0x10/0x10 [ 629.823423][ C0] ? do_raw_spin_lock+0x121/0x290 [ 629.823446][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 629.823468][ C0] __napi_poll+0xc7/0x360 [ 629.823489][ C0] ? skb_defer_free_flush+0x229/0x250 [ 629.823512][ C0] net_rx_action+0x5f7/0xdf0 [ 629.823547][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 629.823587][ C0] handle_softirqs+0x286/0x870 [ 629.823605][ C0] ? do_softirq+0xec/0x180 [ 629.823624][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 629.823644][ C0] ? macvlan_process_broadcast+0x222/0x660 [ 629.823668][ C0] do_softirq+0xec/0x180 [ 629.823683][ C0] [ 629.823688][ C0] [ 629.823694][ C0] ? __pfx_do_softirq+0x10/0x10 [ 629.823714][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 629.823730][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 629.823747][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 629.823767][ C0] ? macvlan_process_broadcast+0x222/0x660 [ 629.823792][ C0] macvlan_process_broadcast+0x222/0x660 [ 629.823815][ C0] ? __lock_acquire+0xab9/0xd20 [ 629.823832][ C0] ? __pfx_macvlan_process_broadcast+0x10/0x10 [ 629.823862][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 629.823882][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 629.823899][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 629.823917][ C0] process_scheduled_works+0xae1/0x17b0 [ 629.823947][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 629.823972][ C0] worker_thread+0x8a0/0xda0 [ 629.824001][ C0] kthread+0x711/0x8a0 [ 629.824023][ C0] ? __pfx_worker_thread+0x10/0x10 [ 629.824040][ C0] ? __pfx_kthread+0x10/0x10 [ 629.824061][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 629.824080][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.824102][ C0] ? __pfx_kthread+0x10/0x10 [ 629.824123][ C0] ret_from_fork+0x4bc/0x870 [ 629.824140][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 629.824160][ C0] ? __switch_to_asm+0x39/0x70 [ 629.824174][ C0] ? __switch_to_asm+0x33/0x70 [ 629.824187][ C0] ? __pfx_kthread+0x10/0x10 [ 629.824208][ C0] ret_from_fork_asm+0x1a/0x30 [ 629.824230][ C0] [ 630.467331][ T43] dvb-usb: bulk message failed: -71 (1/0) [ 630.473110][ T43] dvb-usb: error while querying for an remote control event. [ 636.258561][ T43] dvb-usb: bulk message failed: -71 (1/0) [ 636.264336][ T43] dvb-usb: error while querying for an remote control event. [ 636.280675][ T1585] usb 2-1: USB disconnect, device number 40