last executing test programs: 1m22.733257014s ago: executing program 0 (id=665): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xffff}, {0xffff, 0x5, 0x3, 0x46, 0x6, 0xfd}]}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) 1m21.318116838s ago: executing program 0 (id=671): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000001c0)='./bus\x00', 0x8000, 0x7) acct(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000640), 0x6f5, 0x2000000022, &(0x7f0000000680)={0x77359400}) setsockopt$sock_int(r1, 0x1, 0x52, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="02128ed102"], 0x10}}, 0x0) 1m20.978162523s ago: executing program 2 (id=672): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/damon_reclaim/parameters/enabled\x00', 0xc8240, 0x0) write(r1, &(0x7f0000000600), 0x0) r2 = openat(r1, &(0x7f0000000240)='./proc\x00', 0x101, 0xc) lseek(r2, 0x7, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f00000003c0)={0x3, 0x1, &(0x7f0000000280)={&(0x7f000039e000/0x2000)=nil, 0x4000, 0x1000}}) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x28}, 0x5}}}, 0x30) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)) r3 = socket$unix(0x1, 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000700)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x4, @local, 0x20000000}, {0x2, 0xfff9, 0xc60, @ipv4={'\x00', '\xff\xff', @remote}, 0x101}, 0xffffffffffffffff, 0xcf}}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e0000001c0d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, &(0x7f0000000640)={{&(0x7f0000000440)=[{0x6, 0x1b, 0x5000000, {0xffff, 0x7c11}, 0x800, 0x6, 0x1}, {0x8, 0x3, 0x1000, {0x4}, 0x8, 0x4, 0x101}, {0x5, 0x0, 0xec0, {0x9, 0x8000000000000001}, 0xfffffffffffffffa, 0xffffffffffffffff, 0x6}, {0xe8, 0x80000000, 0x3, {0x7, 0x8}, 0x2, 0x35, 0x401}], 0x4, 0x40, 0x1ff, 0x4e2}, {&(0x7f0000000540)=[{0x5a62, 0x400}, {0x3, 0xfffffffffffffffa}, {0x9, 0x1}, {0xab52, 0x1}], 0x4, 0x10, 0x1, 0xffffffff}, {&(0x7f0000000580)=[0x4, 0x6], 0x2, 0x8, 0x3, 0x2}, {&(0x7f00000005c0)=[{0xf15, 0x7, 0x38000000, 0x1, 0x3}], 0x1, 0x28, 0x1, 0x7}, {&(0x7f0000000600)=[0x9, 0x7, 0x5, 0xf36, 0xffffe00000000000, 0x2, 0x7], 0x7, 0x8, 0x800, 0x8}}) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) 1m18.600131891s ago: executing program 1 (id=673): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x63c, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x130, 0x2, [@TCA_BPF_ACT={0x12c, 0x1, [@m_simple={0x128, 0x1, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x6, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_DATA={0xa, 0x3, '#%@:/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0x2, 0xb, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x85, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4d0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x1fc, 0x2, [@m_connmark={0x1f8, 0xa, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x9, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x8, 0x8, 0x3ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x3, 0x1800, 0x7fff}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff7, 0x2, 0x7, 0x7ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x9, 0x20000000, 0x2, 0x800}, 0x38}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x71c, 0x6, 0x6, 0x41, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x3, 0x7, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x3, 0x9, 0x9}, 0x7}}]}, {0xe5, 0x6, "68d5f9b35942b1a9b81011af8ef9f58903979090153440330e71926cf16dfa6a95a63229ec1e046036f5951acc832298a090af5f8dd4c4eda121fe5c11e2758323235d7d4065e102fca2803e8455bbe375423a5083d857379e566a6b55eaa2a53c32659a3eed4669754e022d685f3904836ee46af5a86c45f1a6ba4ad03ce912f0b3be3d485456cdbcd0db56ba63218491a6c93c649f1201f2dcdfb54f743ff852af6a7de13cd0d2252b2d6743c0774446a19f08b9f2c77f986ea287dabf7581d911194d13e1f29884a2081bbf43fce2a1a2b767905dd62ad427703c4290d86deb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_csum={0x188, 0x0, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x400003, 0x47, 0x3, 0x80000000, 0x6}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7ff, 0x0, 0x3, 0x2}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0xfffffffffffffffc, 0x8, 0x3}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x530e, 0x9, 0x20000000, 0x7, 0xffffffff}, 0x1}}]}, {0xe9, 0x6, "8e742964a8bbfb3154844346644898de0354ee45597bbff6c1b4802726b2ca8b75ce550388c84cc686666dc0fd3ccd01f955cd351f6e0aee4e337b55bb5388a3b58420edfc59ade1349d7cc503101571895e677b64e3bfb9a5173fb1e737612ff18132f5bd2bc66d3b55ecbba2b5457b250035617dcdbdaec682f131f66bed12f8c9f14ba127f64337200b93d2baa76f2745a3aef055faebdf58456bed30345b2e556053be34feea35f858cc9db91981b08dd47caadf768a0b6974308b6864e3b32b95e11458f632c8a4b3de3d407dd970adc90d26a46a602356397bad1f3b4f5cae0b262f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x11c, 0x15, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1000, 0x40, 0x6, 0x2, 0xf}, 0x1}}]}, {0xd1, 0x6, "19a3953d78f1563aa910b5ab1c345795a9c5fdb59e62e379663a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49f40bb7b2f0cebdd8fb8e3d463ca5ef3a3b42ee142b1b380dd4e27c637e5eed7dc23e893606abf117d1645a88f80bd0099ddaaf047e8176c59ee4ad3dd6c16189178332362837467598d104a879c0c3e38990b7dbb96fafdf130365f21370f37f14adeb5658a62010e4723c7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x63c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m18.517602017s ago: executing program 0 (id=674): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m18.373858438s ago: executing program 4 (id=675): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}}, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000540)={0x1, {&(0x7f0000000380)=""/71, 0x47, 0x0, 0x2, 0x2}}, 0x48) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]}) statfs(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ppoll(&(0x7f00000001c0)=[{r2, 0x8000}, {0xffffffffffffffff, 0x100}], 0x2, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0xb, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)=""/41, 0x29}], 0x1) write$input_event(r0, &(0x7f0000000e00)={{0x77359400}, 0x15}, 0xfe4f) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000000840)=""/178, 0xb2, 0x0, 0x3, 0x2}}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x10, 0x4ede}}}}}}, 0x0) 1m18.253820096s ago: executing program 0 (id=676): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000100070007000c000180080001000200000076dd93bcd558c317509427928b561bf1291f18264c3ad8d94e95b09b1c0452bd7a9e59f44d972b3a416a0154d774fb6b09f5922dba85d2e4badad1d7cdca909ae8c0869ff9c2db02bade2096793e835f95c5ea57cb37174e4b77d19882fe40820638cacb1230a090819f5c89a626b5c0779d25e55ea0f0b8f521e534b7767e919ce7652f7dbdb739610ca8"], 0x30}}, 0x4000) openat$nsim_del_device(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x1f, 0x2, &(0x7f0000001bc0)=ANY=[], &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c40)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=@base={0x1d, 0x4, 0x6, 0x6, 0x40200}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001d40)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001d80)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001e00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000001e40), 0x0, 0x0) read$msr(r6, &(0x7f0000001e80)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x2, &(0x7f000001ae80)=0x80000000000003) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x201f00) pipe(&(0x7f000001af00)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = open(&(0x7f000001afc0)='./bus\x00', 0x141b42, 0x8) splice(r7, 0x0, r9, 0x0, 0x402000784853bb, 0x0) write$P9_RLOPEN(r8, &(0x7f000001b000)={0x18, 0xd, 0x2, {{0x30, 0x3, 0x7}, 0xe}}, 0x18) 1m18.235420797s ago: executing program 3 (id=677): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000007c0), 0x0}) 1m18.23212865s ago: executing program 2 (id=679): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000007c0), 0x0}) 1m17.404569314s ago: executing program 1 (id=680): openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x240008d1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000005c0)=@xdp={0x2c, 0x7, r2, 0x3e}, 0x80, &(0x7f0000000640)}, 0x4) 1m17.401186294s ago: executing program 4 (id=681): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="d8000000210081044e810382db44b9040a00007ffefe0500002015000600142603600e1209000600fe7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)="2947ccfbab120b", 0x7}], 0x2}, 0x0) 1m17.307225616s ago: executing program 4 (id=682): socket$nl_netfilter(0x10, 0x3, 0xc) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000100)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x40002000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m15.366860583s ago: executing program 0 (id=683): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="92010002000000401107500500000102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m15.278093091s ago: executing program 2 (id=684): r0 = syz_open_dev$sg(&(0x7f0000000980), 0x0, 0x142000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000009c0)={0x53, 0xfffffffffffffffe, 0x0, 0x2, @scatter={0x0, 0xdd, &(0x7f0000000a40)}, &(0x7f0000000a80), 0x0, 0x840802, 0x10030, 0x1000, 0x0}) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x6, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) futex$unlock_wake_list32(0x0, 0x601, 0x0, 0x0, 0x0, 0x0) r1 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x710040, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x101142) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_sec\x00', 0x16e) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000005c0)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/174, 0xae}, {0x0}, {&(0x7f0000000880)=""/226, 0xe2}], 0x3}, 0x18}], 0x1, 0x1, 0x0) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x202, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) mq_timedsend(r5, &(0x7f0000000500)="950c8daf4e7af91e4c03139dcb8218f69f64a95063153fa9322da9339cedb748900fe5e2b619a568304da298f2b833adda49fb2abd0a8f0336865215b355ec5ff4cb944803b530116e4ba68371052d7311d18a430609acab67b3642b4d3f53cc149fa911fe1b93689adf4fb2603ceb60", 0x70, 0x2, &(0x7f0000000580)={0x77359400}) read(r5, &(0x7f0000000100)=""/9, 0xfffffd87) 1m15.129575414s ago: executing program 1 (id=685): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m15.127107584s ago: executing program 3 (id=686): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000001c0)='./bus\x00', 0x8000, 0x7) acct(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000640), 0x6f5, 0x2000000022, &(0x7f0000000680)={0x77359400}) setsockopt$sock_int(r1, 0x1, 0x52, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="02128ed102"], 0x10}}, 0x0) 1m12.839747072s ago: executing program 3 (id=687): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m12.618261762s ago: executing program 3 (id=688): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000100)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x40002000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r4, 0x0) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0xe) r6 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0xc1105511, &(0x7f0000000240)={0x7, 0x3, 0x4000ffff, 0xdff, 'syz1\x00', 0x2}) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000280)=0x10001) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0xffffffffffffffff, &(0x7f00000002c0)) syz_usb_connect$uac2(0x5, 0xec, &(0x7f0000000300)=ANY=[@ANYBLOB="12011001000000081e0400304000010203010902da000301004002080b0002010120eb090400000001012000092401faff074c00100c"], 0x0) r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x4c80, &(0x7f0000000800)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) sendto$inet(0xffffffffffffffff, &(0x7f0000001800)="5f870e74a9917940c64d8ae3c13cee7c905481bb1edfc185c1fa446cfc3f5762624d0ae35e3d61dbe3c6c68c8b76346c49045a6f56c8a8a8edad6a79c39cf039f7ec991a453e7885295accdd07f574f13082164ccc22caba79c72e40b0a1d630b36d0b0d9a2b2bfd24b8c4b61e84805565823abec81a55", 0x77, 0x4004880, 0x0, 0x0) r8 = memfd_create(&(0x7f0000001880)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_tt\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r8, 0x2000000) ftruncate(r8, 0x8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m12.612728043s ago: executing program 4 (id=689): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6e, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @rand_addr=0x64010100, 0x4e24, 0x6, 'lblcr\x00', 0x4, 0x5, 0x166}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000780)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_open_dev$usbfs(0x0, 0x77, 0x41341) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1m9.672111716s ago: executing program 2 (id=690): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x63c, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x130, 0x2, [@TCA_BPF_ACT={0x12c, 0x1, [@m_simple={0x128, 0x1, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x6, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_DATA={0xa, 0x3, '#%@:/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0x2, 0xb, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x85, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4d0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x1fc, 0x2, [@m_connmark={0x1f8, 0xa, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x9, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x8, 0x8, 0x3ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x3, 0x1800, 0x7fff}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff7, 0x2, 0x7, 0x7ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x9, 0x20000000, 0x2, 0x800}, 0x38}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x71c, 0x6, 0x6, 0x41, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x3, 0x7, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x3, 0x9, 0x9}, 0x7}}]}, {0xe5, 0x6, "68d5f9b35942b1a9b81011af8ef9f58903979090153440330e71926cf16dfa6a95a63229ec1e046036f5951acc832298a090af5f8dd4c4eda121fe5c11e2758323235d7d4065e102fca2803e8455bbe375423a5083d857379e566a6b55eaa2a53c32659a3eed4669754e022d685f3904836ee46af5a86c45f1a6ba4ad03ce912f0b3be3d485456cdbcd0db56ba63218491a6c93c649f1201f2dcdfb54f743ff852af6a7de13cd0d2252b2d6743c0774446a19f08b9f2c77f986ea287dabf7581d911194d13e1f29884a2081bbf43fce2a1a2b767905dd62ad427703c4290d86deb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_csum={0x188, 0x0, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x400003, 0x47, 0x3, 0x80000000, 0x6}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7ff, 0x0, 0x3, 0x2}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0xfffffffffffffffc, 0x8, 0x3}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x530e, 0x9, 0x20000000, 0x7, 0xffffffff}, 0x1}}]}, {0xe9, 0x6, "8e742964a8bbfb3154844346644898de0354ee45597bbff6c1b4802726b2ca8b75ce550388c84cc686666dc0fd3ccd01f955cd351f6e0aee4e337b55bb5388a3b58420edfc59ade1349d7cc503101571895e677b64e3bfb9a5173fb1e737612ff18132f5bd2bc66d3b55ecbba2b5457b250035617dcdbdaec682f131f66bed12f8c9f14ba127f64337200b93d2baa76f2745a3aef055faebdf58456bed30345b2e556053be34feea35f858cc9db91981b08dd47caadf768a0b6974308b6864e3b32b95e11458f632c8a4b3de3d407dd970adc90d26a46a602356397bad1f3b4f5cae0b262f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x11c, 0x15, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1000, 0x40, 0x6, 0x2, 0xf}, 0x1}}]}, {0xd1, 0x6, "19a3953d78f1563aa910b5ab1c345795a9c5fdb59e62e379663a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49f40bb7b2f0cebdd8fb8e3d463ca5ef3a3b42ee142b1b380dd4e27c637e5eed7dc23e893606abf117d1645a88f80bd0099ddaaf047e8176c59ee4ad3dd6c16189178332362837467598d104a879c0c3e38990b7dbb96fafdf130365f21370f37f14adeb5658a62010e4723c7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x63c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m8.962502692s ago: executing program 1 (id=691): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000540)={0x1, {&(0x7f0000000380)=""/71, 0x47, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]}) statfs(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ppoll(&(0x7f00000001c0)=[{r2, 0x8000}, {0xffffffffffffffff, 0x100}], 0x2, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0xb, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)=""/41, 0x29}], 0x1) write$input_event(r0, &(0x7f0000000e00)={{0x77359400}, 0x15}, 0xfe4f) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000000840)=""/178, 0xb2, 0x0, 0x3, 0x2}}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="a800000000010506000000000000000002000000340001801400018008000100ac14142308000200ac1414aa1c0002800500010006000000060002004e220000060003004e230000340002801400018008000100ac1414aa08000200ac1414231c0002800500010006000000060002004e230000060003004e220000100004800c00018005000100010000001400188008000100000001000800020000000000080007000000012c"], 0xa8}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x10, 0x4ede}}}}}}, 0x0) 1m8.893371299s ago: executing program 4 (id=692): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}}, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000540)={0x1, {&(0x7f0000000380)=""/71, 0x47, 0x0, 0x2, 0x2}}, 0x48) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]}) statfs(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ppoll(&(0x7f00000001c0)=[{r2, 0x8000}, {0xffffffffffffffff, 0x100}], 0x2, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0xb, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)=""/41, 0x29}], 0x1) write$input_event(r0, &(0x7f0000000e00)={{0x77359400}, 0x15}, 0xfe4f) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000000840)=""/178, 0xb2, 0x0, 0x3, 0x2}}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x10, 0x4ede}}}}}}, 0x0) 1m8.653562084s ago: executing program 2 (id=693): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000100070007000c000180080001000200000076dd93bcd558c317509427928b561bf1291f18264c3ad8d94e95b09b1c0452bd7a9e59f44d972b3a416a0154d774fb6b09f5922dba85d2e4badad1d7cdca909ae8c0869ff9c2db02bade2096793e835f95c5ea57cb37174e4b77d19882fe40820638cacb1230a090819f5c89a626b5c0779d25e55ea0f0b8f521e534b7767e919ce7652f7dbdb739610ca8"], 0x30}}, 0x4000) openat$nsim_del_device(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x1f, 0x2, &(0x7f0000001bc0)=ANY=[], &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c40)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=@base={0x1d, 0x4, 0x6, 0x6, 0x40200}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001d40)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001d80)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001e00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000001e40), 0x0, 0x0) read$msr(r6, &(0x7f0000001e80)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x2, &(0x7f000001ae80)=0x80000000000003) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x201f00) pipe(&(0x7f000001af00)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = open(&(0x7f000001afc0)='./bus\x00', 0x141b42, 0x8) splice(r7, 0x0, r9, 0x0, 0x402000784853bb, 0x0) write$P9_RLOPEN(r8, &(0x7f000001b000)={0x18, 0xd, 0x2, {{0x30, 0x3, 0x7}, 0xe}}, 0x18) 1m8.45863399s ago: executing program 3 (id=694): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000500)='j', 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) shutdown(r0, 0x1) 1m8.28996783s ago: executing program 1 (id=695): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="d8000000210081044e810382db44b9040a00007ffefe0500002015000600142603600e1209000600fe7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)="2947ccfbab120b", 0x7}], 0x2}, 0x0) 1m8.213088042s ago: executing program 1 (id=696): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_usb_connect(0x3, 0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="92010002000000401107500500000102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m7.791209395s ago: executing program 4 (id=697): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x200, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0xc02, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x2, 0x26d}}], 0x1, 0x0, 0x0) 1m6.608723578s ago: executing program 2 (id=698): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000001c0)='./bus\x00', 0x8000, 0x7) acct(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000640), 0x6f5, 0x2000000022, &(0x7f0000000680)={0x77359400}) setsockopt$sock_int(r1, 0x1, 0x52, &(0x7f00000006c0)=0x80000000, 0x4) sendmsg$key(r1, 0x0, 0x0) 1m6.361050899s ago: executing program 3 (id=699): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m6.354499907s ago: executing program 0 (id=700): r0 = syz_open_dev$sg(&(0x7f0000000980), 0x0, 0x142000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000009c0)={0x53, 0xfffffffffffffffe, 0x0, 0x2, @scatter={0x0, 0xdd, &(0x7f0000000a40)}, &(0x7f0000000a80), 0x0, 0x840802, 0x10030, 0x1000, 0x0}) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x6, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) futex$unlock_wake_list32(0x0, 0x601, 0x0, 0x0, 0x0, 0x0) r1 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x710040, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x101142) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_sec\x00', 0x16e) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000005c0)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/174, 0xae}, {0x0}, {&(0x7f0000000880)=""/226, 0xe2}], 0x3}, 0x18}], 0x1, 0x1, 0x0) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x202, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) mq_timedsend(r5, &(0x7f0000000500)="950c8daf4e7af91e4c03139dcb8218f69f64a95063153fa9322da9339cedb748900fe5e2b619a568304da298f2b833adda49fb2abd0a8f0336865215b355ec5ff4cb944803b530116e4ba68371052d7311d18a430609acab67b3642b4d3f53cc149fa911fe1b93689adf4fb2603ceb60", 0x70, 0x2, &(0x7f0000000580)={0x77359400}) read(r5, &(0x7f0000000100)=""/9, 0xfffffd87) 0s ago: executing program 32 (id=696): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_usb_connect(0x3, 0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="92010002000000401107500500000102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) kernel console output (not intermixed with test programs): 705] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 189.715309][ T5705] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 189.717168][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.717190][ T5705] usb 5-1: Product: syz [ 189.717204][ T5705] usb 5-1: Manufacturer: syz [ 189.717219][ T5705] usb 5-1: SerialNumber: syz [ 189.719698][ T5705] usb 5-1: config 0 descriptor?? [ 189.722129][ T5705] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 189.722163][ T5705] usb 5-1: setting power ON [ 189.722176][ T5705] dvb-usb: bulk message failed: -22 (2/0) [ 189.727212][ T5705] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.727983][ T5705] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 189.728038][ T5705] usb 5-1: media controller created [ 189.736257][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.745941][ T5705] usb 5-1: selecting invalid altsetting 6 [ 189.745963][ T5705] usb 5-1: digital interface selection failed (-22) [ 189.745975][ T5705] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 189.746553][ T5705] usb 5-1: setting power OFF [ 189.746568][ T5705] dvb-usb: bulk message failed: -22 (2/0) [ 189.746580][ T5705] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 189.746589][ T5705] (NULL device *): no alternate interface [ 189.773212][ T5705] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 189.776394][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.776432][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 189.777419][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.777436][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.777468][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.778944][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 189.778964][ T9] usb 2-1: Product: syz [ 189.778976][ T9] usb 2-1: Manufacturer: syz [ 189.793011][ T9] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 189.950627][ T5705] usb 5-1: USB disconnect, device number 21 [ 189.958411][ T5715] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 189.993304][ T9] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC error code control 2 on unit 48: -71 (exp. 1). [ 189.994476][ T9] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 48: -71 (exp. 1). [ 189.994864][ T9] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 48: -71 (exp. 1). [ 189.996475][ T9] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1). [ 189.996828][ T9] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1). [ 189.997164][ T9] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 48: -71 (exp. 1). [ 189.997505][ T9] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 48: -71 (exp. 1). [ 189.997860][ T9] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 48: -71 (exp. 1). [ 189.998165][ T9] uvcvideo 2-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 48: -71 (exp. 1). [ 189.998483][ T9] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1). [ 189.998821][ T9] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 189.999486][ T9] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 17 on unit 48: -71 (exp. 1). [ 189.999812][ T9] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 18 on unit 48: -71 (exp. 1). [ 190.000034][ T9] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 190.008736][ T9] usb 2-1: USB disconnect, device number 13 [ 190.165831][ T5715] usb 3-1: not running at top speed; connect to a high speed hub [ 190.165861][ T5715] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 190.166963][ T5715] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.167014][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.214608][ T5715] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 190.317795][ T31] audit: type=1400 audit(1792103244.436:352): avc: denied { mounton } for pid=7009 comm="syz.0.349" path="/81/file0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 190.317867][ T7010] fuse: Unknown parameter 'group_i00000000000000000000' [ 190.484835][ T5600] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 190.581635][ T5715] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 190.584525][ T5715] videodev: could not get a free minor [ 190.584539][ T5715] uvcvideo 3-1:1.1: Failed to register meta-cap device (-23). [ 190.614870][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 190.633990][ T5600] usb 4-1: Using ep0 maxpacket: 8 [ 190.637171][ T5600] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 190.638041][ T5600] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.638056][ T5600] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.639559][ T5600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.639580][ T5600] usb 4-1: Product: syz [ 190.639593][ T5600] usb 4-1: Manufacturer: syz [ 190.639607][ T5600] usb 4-1: SerialNumber: syz [ 190.716447][ T5600] usb 4-1: 0:1 : does not exist [ 190.768062][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 190.768166][ T9] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 190.771348][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.771466][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 190.771525][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.776446][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.776468][ T9] usb 1-1: Product: syz [ 190.776480][ T9] usb 1-1: Manufacturer: syz [ 190.776492][ T9] usb 1-1: SerialNumber: syz [ 190.886786][ T5715] usb 3-1: USB disconnect, device number 21 [ 191.028524][ T31] audit: type=1400 audit(1792103245.136:353): avc: denied { read } for pid=7006 comm="syz.3.348" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 191.028576][ T31] audit: type=1400 audit(1792103245.136:354): avc: denied { open } for pid=7006 comm="syz.3.348" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 191.028609][ T31] audit: type=1400 audit(1792103245.136:355): avc: denied { ioctl } for pid=7006 comm="syz.3.348" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 191.144652][ T59] IPVS: starting estimator thread 0... [ 191.244036][ T7022] IPVS: using max 44 ests per chain, 105600 per kthread [ 191.245459][ T5705] usb 4-1: USB disconnect, device number 21 [ 191.556158][ T7028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.556177][ T7028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.558345][ T7028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.558360][ T7028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.071795][ T31] audit: type=1400 audit(1792103246.186:356): avc: denied { create } for pid=7035 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.109009][ T59] IPVS: starting estimator thread 0... [ 192.194315][ T7037] IPVS: using max 75 ests per chain, 180000 per kthread [ 192.376597][ T5715] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 192.602361][ T31] audit: type=1400 audit(1792103246.716:357): avc: denied { write } for pid=7045 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.666482][ T2278] Process accounting resumed [ 192.714789][ T5715] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 192.720817][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.720838][ T5715] usb 3-1: Product: syz [ 192.720846][ T5715] usb 3-1: Manufacturer: syz [ 192.720854][ T5715] usb 3-1: SerialNumber: syz [ 192.769204][ T5715] usb 3-1: USB2VGA dongle found at address 22 [ 192.773656][ T5715] usb 3-1: Allocated 8 output buffers [ 192.792916][ T5715] usb 3-1: Failed to early initialize device [ 192.846370][ T5705] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 192.994856][ T5705] usb 4-1: Using ep0 maxpacket: 8 [ 192.996388][ T5705] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 192.997481][ T5705] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 193.001373][ T7036] usb 3-1: Failed to initialize device [ 193.008334][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.008358][ T5705] usb 4-1: Product: syz [ 193.008370][ T5705] usb 4-1: Manufacturer: syz [ 193.008383][ T5705] usb 4-1: SerialNumber: syz [ 193.009166][ T5715] usb 3-1: USB disconnect, device number 22 [ 193.089312][ T5705] usb 4-1: config 0 descriptor?? [ 193.103201][ T5705] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 193.103241][ T5705] usb 4-1: setting power ON [ 193.103254][ T5705] dvb-usb: bulk message failed: -22 (2/0) [ 193.155390][ T5705] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.157025][ T5705] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 193.157057][ T5705] usb 4-1: media controller created [ 193.201373][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.224790][ T5705] usb 4-1: selecting invalid altsetting 6 [ 193.224813][ T5705] usb 4-1: digital interface selection failed (-22) [ 193.224823][ T5705] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 193.227618][ T5705] usb 4-1: setting power OFF [ 193.227645][ T5705] dvb-usb: bulk message failed: -22 (2/0) [ 193.227655][ T5705] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 193.227663][ T5705] (NULL device *): no alternate interface [ 193.307383][ T7046] dvb-usb: bulk message failed: -22 (3/0) [ 193.307416][ T7046] cxusb: i2c wr: len=79 is too big! [ 193.307416][ T7046] [ 193.342542][ T5705] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 193.362787][ T5705] usb 4-1: USB disconnect, device number 22 [ 193.413053][ T7053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.361'. [ 194.050828][ T9] usb 1-1: USB disconnect, device number 18 [ 194.564706][ T5715] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 194.754306][ T5715] usb 4-1: not running at top speed; connect to a high speed hub [ 194.754786][ T5715] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 194.845780][ T5715] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.846087][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.059934][ T5715] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 195.408765][ T9] Process accounting resumed [ 195.470747][ T5715] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 195.472800][ T5715] videodev: could not get a free minor [ 195.472813][ T5715] uvcvideo 4-1:1.1: Failed to register meta-cap device (-23). [ 195.664577][ T7087] fuse: Unknown parameter 'group_i00000000000000000000' [ 195.803050][ T5715] usb 4-1: USB disconnect, device number 23 [ 196.782281][ T31] audit: type=1400 audit(1792103250.896:358): avc: denied { read } for pid=7086 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.327975][ T7096] ceph: Path missing in source [ 197.328062][ T31] audit: type=1400 audit(1792103251.446:359): avc: denied { mounton } for pid=7094 comm="syz.0.374" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 197.424003][ T5722] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 197.600188][ T5722] usb 3-1: unable to get BOS descriptor or descriptor too short [ 197.600232][ T5722] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 197.601222][ T5722] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.601286][ T5722] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 197.601483][ T5722] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.656886][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.656914][ T5722] usb 3-1: Product: syz [ 197.656927][ T5722] usb 3-1: Manufacturer: syz [ 197.656940][ T5722] usb 3-1: SerialNumber: syz [ 199.051947][ T6675] IPVS: starting estimator thread 0... [ 199.135042][ T7121] IPVS: using max 49 ests per chain, 117600 per kthread [ 199.172431][ T5722] usb 3-1: USB disconnect, device number 23 [ 199.366520][ T6491] udevd[6491]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.371881][ T25] Process accounting resumed [ 199.484263][ T7125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.382'. [ 199.526261][ T7125] netlink: 'syz.1.382': attribute type 13 has an invalid length. [ 199.853109][ T5793] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 200.019730][ T5793] usb 5-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 200.037858][ T5793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 200.037875][ T5793] usb 5-1: Product: syz [ 200.037884][ T5793] usb 5-1: Manufacturer: syz [ 201.409556][ T5793] scsi host1: uas [ 201.707748][ T31] audit: type=1400 audit(1792103255.826:360): avc: denied { write } for pid=7134 comm="syz.4.386" name="protocols" dev="proc" ino=4026533521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 201.766501][ T31] audit: type=1400 audit(1792103255.886:361): avc: denied { ioctl } for pid=7134 comm="syz.4.386" path="socket:[15811]" dev="sockfs" ino=15811 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 201.766554][ T31] audit: type=1400 audit(1792103255.886:362): avc: denied { bind } for pid=7134 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 201.799113][ T31] audit: type=1400 audit(1792103255.896:363): avc: denied { setopt } for pid=7134 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 201.804193][ T31] audit: type=1400 audit(1792103255.916:364): avc: denied { read } for pid=7134 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 201.875348][ T2278] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 201.900204][ C0] usb 5-1: stat urb: status -71 [ 201.900453][ C0] usb 5-1: cmd cmplt err -71 [ 201.900493][ T25] usb 5-1: USB disconnect, device number 22 [ 201.921664][ T25] scsi 1:0:0:0: tag#20 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 201.921777][ T25] scsi 1:0:0:0: tag#20 CDB: Inquiry 12 00 00 00 24 00 [ 202.038132][ T2278] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.058217][ T2278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.058249][ T2278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.058267][ T2278] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.058301][ T2278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.061119][ T2278] usb 1-1: config 0 descriptor?? [ 202.558711][ T2278] usbhid 1-1:0.0: can't add hid device: -71 [ 202.558796][ T2278] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 202.588838][ T2278] usb 1-1: USB disconnect, device number 19 [ 202.655726][ T7159] fuse: Unknown parameter 'group_i00000000000000000000' [ 203.245850][ T5705] Process accounting resumed [ 204.234182][ T5722] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 204.377918][ T980] IPVS: starting estimator thread 0... [ 204.392132][ T5722] usb 3-1: unable to get BOS descriptor or descriptor too short [ 204.392163][ T5722] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 204.392973][ T5722] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.393034][ T5722] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 204.393070][ T5722] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.454756][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.454784][ T5722] usb 3-1: Product: syz [ 204.454798][ T5722] usb 3-1: Manufacturer: syz [ 204.454812][ T5722] usb 3-1: SerialNumber: syz [ 204.485030][ T7181] IPVS: using max 45 ests per chain, 108000 per kthread [ 204.760732][ T7190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.402'. [ 204.782909][ T7190] netlink: 'syz.0.402': attribute type 13 has an invalid length. [ 205.023696][ T31] audit: type=1400 audit(1792103259.136:365): avc: denied { connect } for pid=7192 comm="syz.4.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 206.535185][ T5722] usb 3-1: USB disconnect, device number 24 [ 207.512049][ T5715] Process accounting resumed [ 209.356820][ T7230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.356838][ T7230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.360402][ T7230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.360417][ T7230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.464034][ T5705] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 209.525465][ T2278] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 209.645794][ T5705] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 209.649744][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.649772][ T5705] usb 3-1: Product: syz [ 209.649787][ T5705] usb 3-1: Manufacturer: syz [ 209.649801][ T5705] usb 3-1: SerialNumber: syz [ 209.653760][ T5705] usb 3-1: USB2VGA dongle found at address 25 [ 209.693734][ T5705] usb 3-1: Allocated 8 output buffers [ 209.696129][ T2278] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 209.699100][ T5705] usb 3-1: Failed to early initialize device [ 209.720850][ T2278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.728591][ T2278] usb 2-1: config 0 descriptor?? [ 209.795760][ T9] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 209.904626][ T7224] usb 3-1: Failed to initialize device [ 209.906703][ T25] usb 3-1: USB disconnect, device number 25 [ 209.961338][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 209.961380][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 209.962129][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.962161][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.003045][ T9] uvcvideo 1-1:1.0: Found UVC 1.00 device (046d:0825) [ 210.074268][ T5715] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 210.304716][ T5715] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.319773][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.319829][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.319880][ T5715] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.320021][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.345964][ T2278] ath6kl: Failed to submit usb control message: -71 [ 210.346010][ T2278] ath6kl: unable to send the bmi data to the device: -71 [ 210.346023][ T2278] ath6kl: Unable to send get target info: -71 [ 210.445535][ T5715] usb 5-1: config 0 descriptor?? [ 210.600875][ T9] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 210.623576][ T2278] ath6kl: Failed to init ath6kl core: -71 [ 210.624638][ T2278] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 210.643155][ T9] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 210.643203][ T9] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 210.643618][ T9] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -5 [ 211.078913][ T9] usb 1-1: USB disconnect, device number 20 [ 211.079146][ T2278] usb 2-1: USB disconnect, device number 14 [ 211.211869][ T7242] fuse: Unknown parameter 'group_id00000000000000000000' [ 211.504116][ T5793] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 211.509058][ T5715] usbhid 5-1:0.0: can't add hid device: -71 [ 211.509631][ T5715] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 211.972418][ T5715] usb 5-1: USB disconnect, device number 23 [ 212.019038][ T5793] usb 4-1: unable to get BOS descriptor or descriptor too short [ 212.019146][ T5793] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 212.021068][ T5793] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.021191][ T5793] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 212.021253][ T5793] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.038684][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.038710][ T5793] usb 4-1: Product: syz [ 212.038723][ T5793] usb 4-1: Manufacturer: syz [ 212.038735][ T5793] usb 4-1: SerialNumber: syz [ 212.604091][ T5715] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 212.864940][ T5715] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 212.865955][ T5715] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 212.865996][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.905853][ T5715] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 213.935111][ T5715] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 213.935131][ T5715] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 213.935615][ T5715] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 214.134417][ T5715] Process accounting resumed [ 214.168059][ T2278] usb 1-1: USB disconnect, device number 21 [ 214.472818][ T5793] usb 4-1: USB disconnect, device number 24 [ 214.494021][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 215.242785][ T9] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 216.045994][ T7069] udevd[7069]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.057773][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.057796][ T9] usb 5-1: Product: syz [ 216.057809][ T9] usb 5-1: Manufacturer: syz [ 216.057821][ T9] usb 5-1: SerialNumber: syz [ 216.077787][ T9] usb 5-1: USB2VGA dongle found at address 24 [ 216.113120][ T9] usb 5-1: Allocated 8 output buffers [ 216.120721][ T9] usb 5-1: Failed to early initialize device [ 216.229745][ T7287] netlink: 232 bytes leftover after parsing attributes in process `syz.0.430'. [ 216.346481][ T7268] usb 5-1: Failed to initialize device [ 216.347848][ T5722] usb 5-1: USB disconnect, device number 24 [ 217.061943][ T25] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 217.232342][ T25] usb 1-1: not running at top speed; connect to a high speed hub [ 217.232376][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 217.233376][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.233423][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.283165][ T25] uvcvideo 1-1:1.0: Found UVC 1.00 device (046d:0825) [ 217.697687][ T25] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 217.700691][ T25] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 217.701197][ T25] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 217.714062][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 217.744631][ T5715] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 217.751635][ T25] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -5 [ 217.804658][ T25] usb 1-1: USB disconnect, device number 22 [ 217.869968][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 217.871181][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 217.878808][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.878831][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.882881][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.882904][ T9] usb 3-1: Product: syz [ 217.882916][ T9] usb 3-1: Manufacturer: syz [ 217.882928][ T9] usb 3-1: SerialNumber: syz [ 217.903522][ T9] usb 3-1: 0:1 : does not exist [ 217.939366][ T5715] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.954577][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.954704][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.954811][ T5715] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.954986][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.013030][ T5715] usb 5-1: config 0 descriptor?? [ 218.165425][ T5793] usb 3-1: USB disconnect, device number 26 [ 218.736437][ T5715] usbhid 5-1:0.0: can't add hid device: -71 [ 218.739138][ T5715] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 218.906877][ T5715] usb 5-1: USB disconnect, device number 25 [ 219.023593][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 219.090251][ T7317] fuse: Unknown parameter 'group_id00000000000000000000' [ 219.185286][ T25] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 219.186291][ T25] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 219.186469][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.193522][ T25] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 219.384543][ T5722] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 219.667593][ T5722] usb 1-1: unable to get BOS descriptor or descriptor too short [ 219.667920][ T5722] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 219.669901][ T5722] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.670149][ T5722] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 219.670266][ T5722] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.726014][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.726054][ T5722] usb 1-1: Product: syz [ 219.726083][ T5722] usb 1-1: Manufacturer: syz [ 219.726124][ T5722] usb 1-1: SerialNumber: syz [ 219.734734][ T7324] ceph: Path missing in source [ 220.287775][ T25] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 220.287831][ T25] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 220.366632][ T25] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 220.366753][ T25] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 220.763796][ T25] usb 2-1: USB disconnect, device number 15 [ 221.514021][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 221.665603][ T9] usb 5-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 221.673771][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 221.673811][ T9] usb 5-1: Product: syz [ 221.673838][ T9] usb 5-1: Manufacturer: syz [ 221.902394][ T31] audit: type=1400 audit(1792103276.016:366): avc: denied { ioctl } for pid=7340 comm="syz.2.448" path="socket:[17810]" dev="sockfs" ino=17810 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.948852][ T9] scsi host1: uas [ 222.217181][ C0] usb 5-1: stat urb: status -71 [ 222.217243][ C0] usb 5-1: cmd cmplt err -71 [ 222.217646][ T2278] usb 5-1: USB disconnect, device number 26 [ 222.225076][ T2278] scsi 1:0:0:0: tag#4 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 222.225121][ T2278] scsi 1:0:0:0: tag#4 CDB: Inquiry 12 00 00 00 24 00 [ 222.310371][ T5722] usb 1-1: USB disconnect, device number 23 [ 222.408310][ T6491] udevd[6491]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.445029][ T9] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 222.598613][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 222.598647][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 222.599611][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.599661][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.619859][ T9] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 222.700275][ T7362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.447'. [ 222.784143][ T5715] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 222.994021][ T2278] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 223.026466][ T9] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 223.028542][ T9] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 223.028588][ T9] uvcvideo 3-1:1.1: Failed to initialize the device (-5). [ 223.031677][ T9] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -5 [ 223.060410][ T5715] usb 2-1: Using ep0 maxpacket: 8 [ 223.061061][ T5715] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 223.063190][ T5715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.063213][ T5715] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.086181][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.086203][ T5715] usb 2-1: Product: syz [ 223.086217][ T5715] usb 2-1: Manufacturer: syz [ 223.086229][ T5715] usb 2-1: SerialNumber: syz [ 223.140553][ T9] usb 3-1: USB disconnect, device number 27 [ 223.169306][ T5715] usb 2-1: 0:1 : does not exist [ 223.214600][ T2278] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.215491][ T2278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.215520][ T2278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.215541][ T2278] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.215576][ T2278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.220812][ T2278] usb 1-1: config 0 descriptor?? [ 223.491029][ T7373] ceph: Path missing in source [ 223.800788][ T5731] usb 2-1: USB disconnect, device number 16 [ 224.421832][ T2278] usbhid 1-1:0.0: can't add hid device: -71 [ 224.421913][ T2278] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 224.757980][ T2278] usb 1-1: USB disconnect, device number 24 [ 224.853449][ T7380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.456'. [ 224.870427][ T7380] netlink: 'syz.4.456': attribute type 13 has an invalid length. [ 225.367837][ T7390] fuse: Unknown parameter 'group_id00000000000000000000' [ 225.565198][ T2278] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 225.663993][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 225.714724][ T2278] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 225.715768][ T2278] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 225.715813][ T2278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.753659][ T2278] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 225.838795][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.838843][ T9] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 225.839749][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.839812][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 225.839846][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.842926][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.842957][ T9] usb 4-1: Product: syz [ 225.842971][ T9] usb 4-1: Manufacturer: syz [ 225.842985][ T9] usb 4-1: SerialNumber: syz [ 226.223358][ T31] audit: type=1400 audit(1792103280.336:367): avc: denied { write } for pid=7397 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.324120][ T5694] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 226.347034][ T7410] ceph: Path missing in source [ 226.604215][ T5694] usb 2-1: Using ep0 maxpacket: 8 [ 226.611541][ T5694] usb 2-1: unable to get BOS descriptor or descriptor too short [ 226.611652][ T5694] usb 2-1: New USB device found, idVendor=1199, idProduct=6893, bcdDevice=16.b7 [ 226.656132][ T5694] usb 2-1: config 3 has an invalid interface number: 92 but max is 1 [ 226.656175][ T5694] usb 2-1: config 3 has an invalid interface number: 120 but max is 1 [ 226.656194][ T5694] usb 2-1: config 3 has an invalid interface number: 92 but max is 1 [ 226.656234][ T5694] usb 2-1: config 3 has no interface number 0 [ 226.656261][ T5694] usb 2-1: config 3 has no interface number 1 [ 226.656300][ T5694] usb 2-1: config 3 interface 120 altsetting 8 endpoint 0xE has invalid wMaxPacketSize 0 [ 226.656328][ T5694] usb 2-1: config 3 interface 92 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.658671][ T5694] usb 2-1: config 3 interface 92 has no altsetting 0 [ 226.658706][ T5694] usb 2-1: config 3 interface 92 has no altsetting 1 [ 226.658734][ T5694] usb 2-1: config 3 interface 120 has no altsetting 0 [ 226.681697][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.681767][ T5694] usb 2-1: Product: syz [ 226.681796][ T5694] usb 2-1: Manufacturer: syz [ 226.681821][ T5694] usb 2-1: SerialNumber: syz [ 227.573087][ T2278] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 227.573115][ T2278] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 227.574135][ T2278] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 227.601115][ T5694] usb 2-1: selecting invalid altsetting 1 [ 227.601895][ T5694] sierra 2-1:3.92: Sierra USB modem converter detected [ 227.623579][ T5694] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 227.634835][ T5694] sierra 2-1:3.120: Sierra USB modem converter detected [ 227.640600][ T5694] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 227.659669][ T5694] usb 2-1: USB disconnect, device number 17 [ 227.676037][ T5694] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 227.678044][ T5694] sierra 2-1:3.92: device disconnected [ 227.700422][ T5694] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 227.700712][ T5694] sierra 2-1:3.120: device disconnected [ 227.790457][ T2278] usb 1-1: USB disconnect, device number 25 [ 229.613572][ T31] audit: type=1400 audit(1792103283.726:368): avc: denied { mounton } for pid=7433 comm="syz.4.475" path="/92/file0" dev="tmpfs" ino=519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.653886][ T9] usb 4-1: USB disconnect, device number 25 [ 229.754150][ T5731] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 229.762717][ T7285] udevd[7285]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.946240][ T5731] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 229.954931][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.954956][ T5731] usb 2-1: Product: syz [ 229.954968][ T5731] usb 2-1: Manufacturer: syz [ 229.954981][ T5731] usb 2-1: SerialNumber: syz [ 229.972016][ T5731] usb 2-1: USB2VGA dongle found at address 18 [ 229.997965][ T5731] usb 2-1: Allocated 8 output buffers [ 230.009509][ T5731] usb 2-1: Failed to early initialize device [ 230.170629][ T5731] usb 2-1: USB disconnect, device number 18 [ 230.184766][ T5722] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 230.362832][ T7447] ceph: Path missing in source [ 230.443986][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 230.444631][ T5722] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 230.445499][ T5722] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 230.447216][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.447238][ T5722] usb 5-1: Product: syz [ 230.447251][ T5722] usb 5-1: Manufacturer: syz [ 230.447265][ T5722] usb 5-1: SerialNumber: syz [ 230.500939][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 230.507652][ T5722] usb 5-1: config 0 descriptor?? [ 230.510124][ T5722] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 230.510163][ T5722] usb 5-1: setting power ON [ 230.510177][ T5722] dvb-usb: bulk message failed: -22 (2/0) [ 230.525908][ T5722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 230.528096][ T5722] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 230.528133][ T5722] usb 5-1: media controller created [ 230.565894][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.637551][ T5722] usb 5-1: selecting invalid altsetting 6 [ 230.637576][ T5722] usb 5-1: digital interface selection failed (-22) [ 230.637589][ T5722] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 230.642630][ T5722] usb 5-1: setting power OFF [ 230.642653][ T5722] dvb-usb: bulk message failed: -22 (2/0) [ 230.642668][ T5722] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 230.642680][ T5722] (NULL device *): no alternate interface [ 230.704626][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.705801][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.705829][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.705851][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.705885][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.787007][ T9] usb 3-1: config 0 descriptor?? [ 230.868114][ T7435] dvb-usb: bulk message failed: -22 (3/0) [ 230.868147][ T7435] cxusb: i2c wr: len=80 is too big! [ 230.868147][ T7435] [ 231.898983][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 231.901149][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 231.957782][ T9] usb 3-1: USB disconnect, device number 28 [ 232.155851][ T5600] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 232.234272][ T7468] fuse: Bad value for 'user_id' [ 232.234292][ T7468] fuse: Bad value for 'user_id' [ 232.306709][ T5600] usb 2-1: Using ep0 maxpacket: 32 [ 232.307496][ T5600] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 232.309057][ T5600] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.309081][ T5600] usb 2-1: config 0 has no interfaces? [ 232.310986][ T5600] usb 2-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 232.311010][ T5600] usb 2-1: Product: syz [ 232.311023][ T5600] usb 2-1: Manufacturer: syz [ 232.311037][ T5600] usb 2-1: SerialNumber: syz [ 232.329255][ T5600] usb 2-1: config 0 descriptor?? [ 232.581127][ T5731] usb 2-1: USB disconnect, device number 19 [ 232.686255][ T5600] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 232.814897][ T5722] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 232.821208][ T5722] usb 5-1: USB disconnect, device number 27 [ 232.850897][ T5600] usb 1-1: unable to get BOS descriptor or descriptor too short [ 232.850952][ T5600] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 232.852261][ T5600] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.852327][ T5600] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 232.852363][ T5600] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.902714][ T5600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.902739][ T5600] usb 1-1: Product: syz [ 232.902751][ T5600] usb 1-1: Manufacturer: syz [ 232.902765][ T5600] usb 1-1: SerialNumber: syz [ 233.054037][ T2278] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 233.244967][ T2278] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 233.274436][ T2278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.274468][ T2278] usb 3-1: Product: syz [ 233.274503][ T2278] usb 3-1: Manufacturer: syz [ 233.274517][ T2278] usb 3-1: SerialNumber: syz [ 233.434700][ T2278] usb 3-1: USB2VGA dongle found at address 29 [ 233.939043][ T2278] usb 3-1: Allocated 8 output buffers [ 233.975367][ T2278] usb 3-1: Failed to early initialize device [ 233.997546][ T2278] usb 3-1: USB disconnect, device number 29 [ 234.151102][ T7489] ceph: Path missing in source [ 234.704066][ T5731] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 234.854744][ T5731] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 234.855786][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.887733][ T5731] usb 5-1: config 0 descriptor?? [ 235.167312][ T5731] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 235.275188][ T2278] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 235.328416][ T7507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.497'. [ 235.333387][ T7507] netlink: 'syz.3.497': attribute type 13 has an invalid length. [ 235.408634][ T5731] [drm:udl_init] *ERROR* Selecting channel failed [ 235.455018][ T2278] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.459990][ T2278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.460066][ T2278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.460101][ T2278] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.460175][ T2278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.506289][ T2278] usb 3-1: config 0 descriptor?? [ 235.558763][ T5600] usb 1-1: USB disconnect, device number 26 [ 235.763493][ T5731] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 235.763573][ T5731] [drm] Initialized udl on minor 1 [ 235.790068][ T5731] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 235.814100][ T5731] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 235.846871][ T5731] usb 5-1: USB disconnect, device number 28 [ 235.944945][ T6491] udevd[6491]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.294048][ T2278] usbhid 3-1:0.0: can't add hid device: -71 [ 236.294142][ T2278] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 236.302405][ T2278] usb 3-1: USB disconnect, device number 30 [ 237.834037][ T2278] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 237.853650][ T7530] ceph: Path missing in source [ 238.036332][ T2278] usb 4-1: not running at top speed; connect to a high speed hub [ 238.036399][ T2278] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 238.038516][ T2278] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.038632][ T2278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.096800][ T2278] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 238.497209][ T2278] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 238.501263][ T2278] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 238.501314][ T2278] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 238.502365][ T2278] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -5 [ 238.838051][ T7548] fuse: Bad value for 'fd' [ 239.510494][ T2278] usb 4-1: USB disconnect, device number 26 [ 239.784292][ T5731] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 239.912684][ T7557] netlink: 232 bytes leftover after parsing attributes in process `syz.2.514'. [ 239.938375][ T5731] usb 2-1: unable to get BOS descriptor or descriptor too short [ 239.938418][ T5731] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 239.939276][ T5731] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.939330][ T5731] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 239.939364][ T5731] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.942732][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.942758][ T5731] usb 2-1: Product: syz [ 239.942772][ T5731] usb 2-1: Manufacturer: syz [ 239.942792][ T5731] usb 2-1: SerialNumber: syz [ 240.093864][ T7562] input: syz1 as /devices/virtual/input/input18 [ 241.404221][ T5722] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 241.495340][ T2278] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 241.541403][ T31] audit: type=1400 audit(1792103295.656:369): avc: denied { ioctl } for pid=7575 comm="syz.0.520" path="socket:[18775]" dev="sockfs" ino=18775 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 241.572714][ T5722] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.583504][ T5722] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.583530][ T5722] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 241.583566][ T5722] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.583603][ T5722] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 241.583624][ T5722] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 241.637661][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.637712][ T5722] usb 4-1: Product: syz [ 241.637726][ T5722] usb 4-1: Manufacturer: syz [ 241.774727][ T5722] cdc_wdm 4-1:1.0: skipping garbage [ 241.774767][ T5722] cdc_wdm 4-1:1.0: skipping garbage [ 241.774827][ T5722] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 241.810589][ T2278] usb 3-1: unable to get BOS descriptor or descriptor too short [ 241.810625][ T2278] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 241.811587][ T2278] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.811630][ T2278] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 241.811663][ T2278] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.813063][ T2278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 241.813083][ T2278] usb 3-1: Product: syz [ 241.813095][ T2278] usb 3-1: Manufacturer: syz [ 241.824696][ T2278] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 242.674237][ T7576] nvme nvme0: failed to connect socket: -512 [ 242.817986][ T31] audit: type=1400 audit(1792103296.936:370): avc: denied { read write } for pid=7582 comm="syz.1.522" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 242.823036][ T31] audit: type=1400 audit(1792103296.936:371): avc: denied { open } for pid=7582 comm="syz.1.522" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 242.939675][ T5731] usb 2-1: USB disconnect, device number 20 [ 243.156742][ T5786] usb 4-1: USB disconnect, device number 27 [ 243.345788][ T2278] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 48: -71 (exp. 1). [ 243.347042][ T2278] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 48: -71 (exp. 1). [ 243.348898][ T2278] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 48: -71 (exp. 1). [ 243.350685][ T2278] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1). [ 243.351131][ T2278] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1). [ 243.351548][ T2278] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 48: -71 (exp. 1). [ 243.351949][ T2278] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 48: -71 (exp. 1). [ 243.352323][ T2278] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 48: -71 (exp. 1). [ 243.352638][ T2278] uvcvideo 3-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 48: -71 (exp. 1). [ 243.352976][ T2278] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1). [ 243.355603][ T2278] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 243.355966][ T2278] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 17 on unit 48: -71 (exp. 1). [ 243.356300][ T2278] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 18 on unit 48: -71 (exp. 1). [ 243.356522][ T2278] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 243.413986][ T7285] udevd[7285]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.421301][ T2278] usb 3-1: USB disconnect, device number 31 [ 243.798330][ T31] audit: type=1400 audit(1792103297.916:372): avc: denied { create } for pid=7590 comm="syz.4.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 245.504237][ T5731] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 245.570339][ T7598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.527'. [ 245.649495][ T31] audit: type=1400 audit(1792103299.766:373): avc: denied { ioctl } for pid=7600 comm="syz.4.529" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18822 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 245.681028][ T5731] usb 1-1: Using ep0 maxpacket: 8 [ 245.686794][ T5731] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 245.687666][ T5731] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.687684][ T5731] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.689320][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.689343][ T5731] usb 1-1: Product: syz [ 245.689357][ T5731] usb 1-1: Manufacturer: syz [ 245.689371][ T5731] usb 1-1: SerialNumber: syz [ 245.750202][ T5731] usb 1-1: 0:1 : does not exist [ 245.843973][ T5694] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 245.986736][ T5786] usb 1-1: USB disconnect, device number 27 [ 246.838569][ T7611] fuse: Bad value for 'user_id' [ 246.838593][ T7611] fuse: Bad value for 'user_id' [ 246.954858][ T5694] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 246.955732][ T5694] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.955776][ T5694] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 246.957057][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 246.957081][ T5694] usb 2-1: Product: syz [ 246.957094][ T5694] usb 2-1: Manufacturer: syz [ 247.266066][ T5731] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 247.380831][ T31] audit: type=1400 audit(1792103301.456:374): avc: denied { create } for pid=7613 comm="syz.2.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.380880][ T31] audit: type=1400 audit(1792103301.456:375): avc: denied { write } for pid=7613 comm="syz.2.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.380915][ T31] audit: type=1400 audit(1792103301.456:376): avc: denied { read } for pid=7613 comm="syz.2.524" lport=5220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.380950][ T31] audit: type=1400 audit(1792103301.456:377): avc: denied { ioctl } for pid=7613 comm="syz.2.524" path="socket:[19583]" dev="sockfs" ino=19583 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.483797][ T5731] usb 5-1: unable to get BOS descriptor or descriptor too short [ 247.483840][ T5731] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 247.504578][ T5731] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.504638][ T5731] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 247.504671][ T5731] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 247.506361][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.506384][ T5731] usb 5-1: Product: syz [ 247.506397][ T5731] usb 5-1: Manufacturer: syz [ 247.506410][ T5731] usb 5-1: SerialNumber: syz [ 247.674026][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 247.828652][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.833659][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.833730][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.833759][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.833825][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.289374][ T9] usb 4-1: config 0 descriptor?? [ 248.705846][ T5705] usb 2-1: USB disconnect, device number 21 [ 250.025436][ T2278] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 250.081616][ T5731] usb 5-1: USB disconnect, device number 29 [ 250.417996][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.418063][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.667318][ T5731] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 250.883866][ T5731] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 250.886555][ T5731] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 250.886584][ T5731] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.886602][ T5731] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 250.886640][ T5731] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.886663][ T5731] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.894090][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 250.894120][ T5731] usb 5-1: Product: syz [ 250.894134][ T5731] usb 5-1: Manufacturer: syz [ 251.001191][ T5731] cdc_wdm 5-1:1.0: skipping garbage [ 251.001212][ T5731] cdc_wdm 5-1:1.0: skipping garbage [ 251.019706][ T7285] udevd[7285]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.023677][ T5731] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 251.023697][ T5731] cdc_wdm 5-1:1.0: Unknown control protocol [ 251.024689][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 251.024765][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 251.027576][ T9] usb 4-1: USB disconnect, device number 28 [ 251.086533][ T5787] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 251.216184][ T7642] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 251.765566][ T7646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7646 comm=syz.3.541 [ 252.264185][ T2278] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.265077][ T2278] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 252.265102][ T2278] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 252.265118][ T2278] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.265155][ T2278] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 252.265175][ T2278] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 252.266527][ T2278] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.266550][ T2278] usb 1-1: Product: syz [ 252.266564][ T2278] usb 1-1: Manufacturer: syz [ 252.276671][ T7642] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 252.287420][ T7648] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 252.315352][ T5731] usb 5-1: USB disconnect, device number 30 [ 252.415093][ T2278] usb 1-1: can't set config #1, error -71 [ 252.417996][ T2278] usb 1-1: USB disconnect, device number 28 [ 252.430885][ T7650] netlink: 232 bytes leftover after parsing attributes in process `syz.1.543'. [ 252.894292][ T2278] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 252.953999][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 253.054074][ T2278] usb 2-1: Using ep0 maxpacket: 16 [ 253.056267][ T2278] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 253.057164][ T2278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.057195][ T2278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 253.058905][ T2278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.058925][ T2278] usb 2-1: Product: syz [ 253.058939][ T2278] usb 2-1: Manufacturer: syz [ 253.058953][ T2278] usb 2-1: SerialNumber: syz [ 253.088435][ T2278] usb 2-1: config 0 descriptor?? [ 253.108020][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 253.108785][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 254.091997][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.092015][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.107138][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.107162][ T9] usb 1-1: Product: syz [ 254.107175][ T9] usb 1-1: Manufacturer: syz [ 254.107199][ T9] usb 1-1: SerialNumber: syz [ 254.148333][ T9] usb 1-1: 0:1 : does not exist [ 254.356175][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 254.369307][ T2278] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 254.374088][ T5787] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 254.417382][ T25] usb 1-1: USB disconnect, device number 29 [ 254.426113][ T2278] imon:send_packet: packet tx failed (-71) [ 254.445684][ T2278] imon 2-1:0.0: panel buttons/knobs setup failed [ 254.534544][ T5787] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 254.535487][ T5787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.535509][ T5787] usb 3-1: config 0 has no interfaces? [ 254.537549][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.537571][ T5787] usb 3-1: Product: syz [ 254.537585][ T5787] usb 3-1: Manufacturer: syz [ 254.537598][ T5787] usb 3-1: SerialNumber: syz [ 254.541159][ T5787] usb 3-1: config 0 descriptor?? [ 254.574064][ T2278] rc_core: IR keymap rc-imon-pad not found [ 254.574083][ T2278] Registered IR keymap rc-empty [ 254.574149][ T2278] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 254.574163][ T2278] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 254.575424][ T2278] imon:send_packet: packet tx failed (-71) [ 254.594886][ T2278] imon 2-1:0.0: remote input dev register failed [ 254.595004][ T2278] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 254.679083][ T2278] imon 2-1:0.0: unable to initialize intf0, err 0 [ 254.679104][ T2278] imon:imon_probe: failed to initialize context! [ 254.679114][ T2278] imon 2-1:0.0: unable to register, err -19 [ 254.683687][ T2278] usb 2-1: USB disconnect, device number 22 [ 254.748087][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.748463][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.772542][ T5731] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 255.754660][ T5731] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 255.755571][ T5731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.755601][ T5731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.755622][ T5731] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.755658][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.761769][ T5731] usb 5-1: config 0 descriptor?? [ 255.826039][ T5722] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 255.964109][ T2278] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 255.993973][ T5722] usb 4-1: Using ep0 maxpacket: 8 [ 255.994477][ T5722] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 255.995289][ T5722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.995310][ T5722] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.996991][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.997011][ T5722] usb 4-1: Product: syz [ 255.997023][ T5722] usb 4-1: Manufacturer: syz [ 255.997036][ T5722] usb 4-1: SerialNumber: syz [ 256.009156][ T5722] usb 4-1: 0:1 : does not exist [ 256.116064][ T2278] usb 2-1: unable to get BOS descriptor or descriptor too short [ 256.116109][ T2278] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 256.117137][ T2278] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.117167][ T2278] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 256.117202][ T2278] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.118759][ T2278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 256.118780][ T2278] usb 2-1: Product: syz [ 256.118795][ T2278] usb 2-1: Manufacturer: syz [ 256.129290][ T2278] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 256.220683][ T5722] usb 4-1: USB disconnect, device number 29 [ 256.327896][ T2278] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 48: -71 (exp. 1). [ 256.329722][ T2278] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 48: -71 (exp. 1). [ 256.330219][ T2278] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 48: -71 (exp. 1). [ 256.330533][ T2278] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1). [ 256.330843][ T2278] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1). [ 256.331143][ T2278] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 48: -71 (exp. 1). [ 256.332476][ T2278] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 48: -71 (exp. 1). [ 256.332792][ T2278] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 48: -71 (exp. 1). [ 256.333085][ T2278] uvcvideo 2-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 48: -71 (exp. 1). [ 256.333389][ T2278] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1). [ 256.333694][ T2278] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 256.334149][ T2278] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 17 on unit 48: -71 (exp. 1). [ 256.334473][ T2278] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 18 on unit 48: -71 (exp. 1). [ 256.334768][ T2278] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 256.343673][ T2278] usb 2-1: USB disconnect, device number 23 [ 256.446180][ T5731] usbhid 5-1:0.0: can't add hid device: -71 [ 256.446274][ T5731] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 256.496565][ T5731] usb 5-1: USB disconnect, device number 31 [ 256.756011][ T2278] usb 3-1: USB disconnect, device number 33 [ 257.083041][ T7690] netlink: 'syz.0.564': attribute type 12 has an invalid length. [ 257.083570][ T7690] netlink: 132 bytes leftover after parsing attributes in process `syz.0.564'. [ 257.941103][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'. [ 259.633964][ T5731] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 259.997513][ T5731] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 259.998439][ T5731] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 259.998461][ T5731] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 259.998477][ T5731] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 259.998510][ T5731] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 259.998558][ T5731] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 260.037826][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 260.037843][ T5731] usb 2-1: Product: syz [ 260.037851][ T5731] usb 2-1: Manufacturer: syz [ 260.096514][ T5731] cdc_wdm 2-1:1.0: skipping garbage [ 260.096530][ T5731] cdc_wdm 2-1:1.0: skipping garbage [ 260.096567][ T5731] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 260.247801][ T7714] input: syz1 as /devices/virtual/input/input21 [ 261.067995][ T5787] usb 2-1: USB disconnect, device number 24 [ 261.313371][ T7728] input: syz1 as /devices/virtual/input/input22 [ 261.474045][ T2278] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 261.523985][ T5731] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 261.624841][ T2278] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 261.625796][ T2278] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.625811][ T2278] usb 3-1: config 0 has no interfaces? [ 261.628692][ T2278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.628708][ T2278] usb 3-1: Product: syz [ 261.628716][ T2278] usb 3-1: Manufacturer: syz [ 261.628724][ T2278] usb 3-1: SerialNumber: syz [ 261.630840][ T2278] usb 3-1: config 0 descriptor?? [ 261.643996][ T5786] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 261.700853][ T5731] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.703400][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.703433][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.703453][ T5731] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.703490][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.717477][ T5731] usb 1-1: config 0 descriptor?? [ 261.804615][ T5786] usb 4-1: Using ep0 maxpacket: 8 [ 261.805218][ T5786] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 261.808494][ T5786] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.808517][ T5786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.811475][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.811500][ T5786] usb 4-1: Product: syz [ 261.811513][ T5786] usb 4-1: Manufacturer: syz [ 261.811528][ T5786] usb 4-1: SerialNumber: syz [ 261.891223][ T5786] usb 4-1: 0:1 : does not exist [ 261.892423][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.892798][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.105095][ T2278] usb 4-1: USB disconnect, device number 30 [ 262.194007][ T5786] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 262.346391][ T5786] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 262.347251][ T5786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.347293][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.348939][ T5786] usb 2-1: config 0 descriptor?? [ 262.385728][ T5786] pwc: Askey VC010 type 2 USB webcam detected. [ 262.405361][ T5731] usbhid 1-1:0.0: can't add hid device: -71 [ 262.405444][ T5731] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 262.412044][ T5731] usb 1-1: USB disconnect, device number 30 [ 262.564056][ T2278] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 262.714487][ T2278] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 262.717118][ T2278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.717148][ T2278] usb 5-1: Product: syz [ 262.717161][ T2278] usb 5-1: Manufacturer: syz [ 262.717174][ T2278] usb 5-1: SerialNumber: syz [ 262.719643][ T2278] usb 5-1: config 0 descriptor?? [ 262.766674][ T5786] pwc: recv_control_msg error -32 req 02 val 2b00 [ 262.768658][ T5786] pwc: recv_control_msg error -32 req 02 val 2700 [ 262.769259][ T5786] pwc: recv_control_msg error -32 req 02 val 2c00 [ 262.769737][ T5786] pwc: recv_control_msg error -32 req 04 val 1000 [ 262.770285][ T5786] pwc: recv_control_msg error -32 req 04 val 1300 [ 262.771765][ T5786] pwc: recv_control_msg error -32 req 04 val 1400 [ 262.772268][ T5786] pwc: recv_control_msg error -32 req 02 val 2000 [ 262.772804][ T5786] pwc: recv_control_msg error -32 req 02 val 2100 [ 262.773286][ T5786] pwc: recv_control_msg error -32 req 04 val 1500 [ 262.773977][ T5786] pwc: recv_control_msg error -32 req 02 val 2500 [ 262.774437][ T5786] pwc: recv_control_msg error -32 req 02 val 2400 [ 262.925296][ T7737] netlink: 'syz.3.570': attribute type 12 has an invalid length. [ 262.925334][ T7737] netlink: 132 bytes leftover after parsing attributes in process `syz.3.570'. [ 262.926548][ T9] usb 5-1: USB disconnect, device number 32 [ 262.986252][ T5786] pwc: recv_control_msg error -71 req 02 val 2900 [ 262.988757][ T5786] pwc: recv_control_msg error -71 req 02 val 2800 [ 262.993279][ T5786] pwc: recv_control_msg error -71 req 04 val 1100 [ 262.993544][ T5786] pwc: recv_control_msg error -71 req 04 val 1200 [ 263.001286][ T5786] pwc: Registered as video103. [ 263.011263][ T5786] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 263.030419][ T5786] usb 2-1: USB disconnect, device number 25 [ 263.495543][ T7741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7741 comm=syz.3.571 [ 264.158641][ T5600] usb 3-1: USB disconnect, device number 34 [ 265.379851][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 266.833974][ T5722] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 266.859847][ T7766] input: syz1 as /devices/virtual/input/input24 [ 266.985905][ T5722] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 266.986744][ T5722] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 266.986768][ T5722] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 266.986785][ T5722] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 266.986817][ T5722] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 266.986831][ T5722] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 266.992780][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 266.992805][ T5722] usb 1-1: Product: syz [ 266.992813][ T5722] usb 1-1: Manufacturer: syz [ 267.030951][ T5722] cdc_wdm 1-1:1.0: skipping garbage [ 267.030969][ T5722] cdc_wdm 1-1:1.0: skipping garbage [ 267.031021][ T5722] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 267.350231][ T7776] netlink: 'syz.2.582': attribute type 12 has an invalid length. [ 267.350247][ T7776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.582'. [ 267.370885][ T2278] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 267.404044][ T5787] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 267.440980][ T5786] usb 1-1: USB disconnect, device number 31 [ 267.534025][ T2278] usb 2-1: Using ep0 maxpacket: 16 [ 267.534778][ T2278] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 267.535662][ T2278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 267.535682][ T2278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 267.537387][ T2278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.537402][ T2278] usb 2-1: Product: syz [ 267.537411][ T2278] usb 2-1: Manufacturer: syz [ 267.537419][ T2278] usb 2-1: SerialNumber: syz [ 267.539019][ T2278] usb 2-1: config 0 descriptor?? [ 267.576756][ T5787] usb 5-1: Using ep0 maxpacket: 8 [ 267.577529][ T5787] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 267.578547][ T5787] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.578565][ T5787] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.581272][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.581293][ T5787] usb 5-1: Product: syz [ 267.581305][ T5787] usb 5-1: Manufacturer: syz [ 267.581318][ T5787] usb 5-1: SerialNumber: syz [ 267.590299][ T5787] usb 5-1: 0:1 : does not exist [ 267.642117][ T5722] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 267.746262][ T2278] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input25 [ 267.797248][ T5787] usb 5-1: USB disconnect, device number 33 [ 267.816858][ T5722] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 267.817745][ T5722] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.817767][ T5722] usb 3-1: config 0 has no interfaces? [ 267.820155][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.820178][ T5722] usb 3-1: Product: syz [ 267.820192][ T5722] usb 3-1: Manufacturer: syz [ 267.820206][ T5722] usb 3-1: SerialNumber: syz [ 267.864894][ T5722] usb 3-1: config 0 descriptor?? [ 268.005046][ T2278] rc_core: IR keymap rc-imon-pad not found [ 268.005063][ T2278] Registered IR keymap rc-empty [ 268.005140][ T2278] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 268.005157][ T2278] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 268.085151][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.085564][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.166267][ T2278] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 268.167314][ T2278] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26 [ 268.169075][ T2278] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:26> initialized [ 268.247331][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 268.394450][ T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 268.396851][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.396874][ T9] usb 4-1: Product: syz [ 268.396886][ T9] usb 4-1: Manufacturer: syz [ 268.396897][ T9] usb 4-1: SerialNumber: syz [ 268.398597][ T9] usb 4-1: config 0 descriptor?? [ 268.494055][ T5600] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 268.547416][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 268.547858][ T9] usb 2-1: USB disconnect, device number 26 [ 268.618826][ T2278] usb 4-1: USB disconnect, device number 31 [ 268.748354][ T5600] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 268.765381][ T5600] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.765995][ T5600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.934840][ T5600] usb 1-1: config 0 descriptor?? [ 269.011485][ T5600] pwc: Askey VC010 type 2 USB webcam detected. [ 269.433295][ T5600] pwc: recv_control_msg error -32 req 02 val 2b00 [ 269.452912][ T5600] pwc: recv_control_msg error -32 req 02 val 2700 [ 269.453526][ T5600] pwc: recv_control_msg error -32 req 02 val 2c00 [ 269.461870][ T5600] pwc: recv_control_msg error -32 req 04 val 1000 [ 269.476296][ T5600] pwc: recv_control_msg error -32 req 04 val 1300 [ 269.488031][ T5600] pwc: recv_control_msg error -32 req 04 val 1400 [ 269.488576][ T5600] pwc: recv_control_msg error -32 req 02 val 2000 [ 269.489127][ T5600] pwc: recv_control_msg error -32 req 02 val 2100 [ 269.490101][ T5600] pwc: recv_control_msg error -32 req 04 val 1500 [ 269.491494][ T5600] pwc: recv_control_msg error -32 req 02 val 2500 [ 269.492069][ T5600] pwc: recv_control_msg error -32 req 02 val 2400 [ 270.087080][ T5600] pwc: recv_control_msg error -71 req 02 val 2900 [ 270.088088][ T5600] pwc: recv_control_msg error -71 req 02 val 2800 [ 270.089945][ T5600] pwc: recv_control_msg error -71 req 04 val 1100 [ 270.091552][ T5600] pwc: recv_control_msg error -71 req 04 val 1200 [ 270.150089][ T5600] pwc: Registered as video103. [ 270.162889][ T5600] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 270.417062][ T5600] usb 1-1: USB disconnect, device number 32 [ 270.483748][ T2278] usb 3-1: USB disconnect, device number 35 [ 270.529826][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.592'. [ 271.493990][ T5722] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 271.555979][ T2278] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 271.644198][ T5722] usb 5-1: device descriptor read/64, error -71 [ 271.704637][ T2278] usb 2-1: Using ep0 maxpacket: 8 [ 271.705089][ T2278] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 271.705922][ T2278] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 271.707612][ T2278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.707634][ T2278] usb 2-1: Product: syz [ 271.707647][ T2278] usb 2-1: Manufacturer: syz [ 271.707660][ T2278] usb 2-1: SerialNumber: syz [ 271.710662][ T2278] usb 2-1: config 0 descriptor?? [ 271.716771][ T2278] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 271.716809][ T2278] usb 2-1: setting power ON [ 271.716823][ T2278] dvb-usb: bulk message failed: -22 (2/0) [ 271.720436][ T2278] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 271.721249][ T2278] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 271.721285][ T2278] usb 2-1: media controller created [ 271.732982][ T2278] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 271.753070][ T2278] usb 2-1: selecting invalid altsetting 6 [ 271.753090][ T2278] usb 2-1: digital interface selection failed (-22) [ 271.753104][ T2278] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 271.754939][ T2278] usb 2-1: setting power OFF [ 271.754963][ T2278] dvb-usb: bulk message failed: -22 (2/0) [ 271.754975][ T2278] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 271.754985][ T2278] (NULL device *): no alternate interface [ 271.795702][ T2278] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 271.815666][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 271.964056][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 271.964509][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 271.965370][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.965384][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.967124][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.967138][ T9] usb 3-1: Product: syz [ 271.967146][ T9] usb 3-1: Manufacturer: syz [ 271.967155][ T9] usb 3-1: SerialNumber: syz [ 271.973837][ T9] usb 3-1: 0:1 : does not exist [ 271.974010][ T5722] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 272.144084][ T5722] usb 5-1: device descriptor read/64, error -71 [ 272.174143][ T2278] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 272.217339][ T5731] usb 3-1: USB disconnect, device number 36 [ 272.256542][ T5722] usb usb5-port1: attempt power cycle [ 272.325514][ T2278] usb 4-1: Using ep0 maxpacket: 8 [ 272.325983][ T2278] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 272.326820][ T2278] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.326836][ T2278] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.328439][ T2278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.328459][ T2278] usb 4-1: Product: syz [ 272.328472][ T2278] usb 4-1: Manufacturer: syz [ 272.328484][ T2278] usb 4-1: SerialNumber: syz [ 272.338194][ T2278] usb 4-1: 0:1 : does not exist [ 272.446179][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 272.540080][ T5731] usb 4-1: USB disconnect, device number 32 [ 272.594077][ T5722] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 272.594700][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 272.595592][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 272.595616][ T9] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 272.595635][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 272.595670][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 272.595713][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 272.597016][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 272.597036][ T9] usb 1-1: Product: syz [ 272.597049][ T9] usb 1-1: Manufacturer: syz [ 272.600973][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 272.600990][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 272.601051][ T9] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 272.615394][ T5722] usb 5-1: device descriptor read/8, error -71 [ 272.854940][ T5722] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 272.874432][ T5722] usb 5-1: device descriptor read/8, error -71 [ 272.996048][ T5722] usb usb5-port1: unable to enumerate USB device [ 273.011029][ T5722] usb 1-1: USB disconnect, device number 33 [ 273.084015][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 273.233987][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 273.236888][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 273.266891][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.266914][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 273.421156][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.421177][ T9] usb 3-1: Product: syz [ 273.421186][ T9] usb 3-1: Manufacturer: syz [ 273.421194][ T9] usb 3-1: SerialNumber: syz [ 273.755079][ T9] usb 3-1: config 0 descriptor?? [ 274.062493][ T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input28 [ 274.083079][ T2278] usb 2-1: USB disconnect, device number 27 [ 274.823999][ T9] rc_core: IR keymap rc-imon-pad not found [ 274.824019][ T9] Registered IR keymap rc-empty [ 274.824076][ T9] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 274.824093][ T9] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 274.856138][ T9] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 274.876697][ T5787] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 274.878769][ T9] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29 [ 274.881407][ T9] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:37> initialized [ 275.014117][ T5705] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 275.026434][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 275.026854][ T5600] usb 3-1: USB disconnect, device number 37 [ 275.047211][ T2278] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 275.047469][ T5787] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 275.049145][ T5787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.049168][ T5787] usb 4-1: config 0 has no interfaces? [ 275.054902][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.054928][ T5787] usb 4-1: Product: syz [ 275.054942][ T5787] usb 4-1: Manufacturer: syz [ 275.054956][ T5787] usb 4-1: SerialNumber: syz [ 275.112777][ T5787] usb 4-1: config 0 descriptor?? [ 276.013281][ T7835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.013478][ T7835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.030547][ T5705] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 276.030659][ T2278] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 276.051055][ T5705] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.051081][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.053321][ T5705] usb 5-1: config 0 descriptor?? [ 276.072685][ T2278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.072710][ T2278] usb 2-1: Product: syz [ 276.072718][ T2278] usb 2-1: Manufacturer: syz [ 276.072726][ T2278] usb 2-1: SerialNumber: syz [ 276.101180][ T2278] usb 2-1: config 0 descriptor?? [ 276.111194][ T5705] pwc: Askey VC010 type 2 USB webcam detected. [ 276.234037][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 276.308593][ T5600] usb 2-1: USB disconnect, device number 28 [ 276.385590][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 276.385620][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 276.386435][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.386448][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 276.386482][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.387750][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 276.387763][ T9] usb 1-1: Product: syz [ 276.387770][ T9] usb 1-1: Manufacturer: syz [ 276.393268][ T9] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 276.503709][ T5705] pwc: recv_control_msg error -32 req 02 val 2b00 [ 276.504331][ T5705] pwc: recv_control_msg error -32 req 02 val 2700 [ 276.505083][ T5705] pwc: recv_control_msg error -32 req 02 val 2c00 [ 276.505570][ T5705] pwc: recv_control_msg error -32 req 04 val 1000 [ 276.506062][ T5705] pwc: recv_control_msg error -32 req 04 val 1300 [ 276.506567][ T5705] pwc: recv_control_msg error -32 req 04 val 1400 [ 276.507034][ T5705] pwc: recv_control_msg error -32 req 02 val 2000 [ 276.507558][ T5705] pwc: recv_control_msg error -32 req 02 val 2100 [ 276.508067][ T5705] pwc: recv_control_msg error -32 req 04 val 1500 [ 276.508543][ T5705] pwc: recv_control_msg error -32 req 02 val 2500 [ 276.509067][ T5705] pwc: recv_control_msg error -32 req 02 val 2400 [ 276.594817][ T9] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 48: -71 (exp. 1). [ 276.596639][ T9] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 48: -71 (exp. 1). [ 276.596957][ T9] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 48: -71 (exp. 1). [ 276.597253][ T9] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1). [ 276.597527][ T9] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1). [ 276.598907][ T9] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 48: -71 (exp. 1). [ 276.599222][ T9] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 48: -71 (exp. 1). [ 276.599494][ T9] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 48: -71 (exp. 1). [ 276.599748][ T9] uvcvideo 1-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 48: -71 (exp. 1). [ 276.600007][ T9] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1). [ 276.600311][ T9] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 276.600584][ T9] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 17 on unit 48: -71 (exp. 1). [ 276.600843][ T9] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 18 on unit 48: -71 (exp. 1). [ 276.601023][ T9] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 276.670386][ T9] usb 1-1: USB disconnect, device number 34 [ 276.711335][ T5705] pwc: recv_control_msg error -71 req 02 val 2900 [ 276.711999][ T5705] pwc: recv_control_msg error -71 req 02 val 2800 [ 276.714705][ T5705] pwc: recv_control_msg error -71 req 04 val 1100 [ 276.716828][ T5705] pwc: recv_control_msg error -71 req 04 val 1200 [ 276.718364][ T5705] pwc: Registered as video103. [ 276.723748][ T5705] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 276.745622][ T5705] usb 5-1: USB disconnect, device number 38 [ 277.305515][ T7860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7860 comm=syz.1.612 [ 277.849614][ T5600] usb 4-1: USB disconnect, device number 33 [ 279.125918][ T5705] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 279.294292][ T5705] usb 5-1: device descriptor read/64, error -71 [ 279.534258][ T5705] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 279.651170][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.621'. [ 279.664218][ T5705] usb 5-1: device descriptor read/64, error -71 [ 279.716207][ T7882] netlink: 'syz.3.621': attribute type 13 has an invalid length. [ 279.774172][ T5705] usb usb5-port1: attempt power cycle [ 280.014011][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 280.114262][ T5705] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 280.134567][ T5705] usb 5-1: device descriptor read/8, error -71 [ 280.154057][ T5600] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 280.171569][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 280.172055][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 280.173117][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.173146][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 280.208307][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.208331][ T9] usb 3-1: Product: syz [ 280.208345][ T9] usb 3-1: Manufacturer: syz [ 280.208358][ T9] usb 3-1: SerialNumber: syz [ 280.212057][ T9] usb 3-1: config 0 descriptor?? [ 280.314790][ T5600] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 280.315805][ T5600] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 280.315823][ T5600] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 280.315836][ T5600] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 280.315871][ T5600] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 280.315894][ T5600] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 280.317155][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 280.317177][ T5600] usb 2-1: Product: syz [ 280.317190][ T5600] usb 2-1: Manufacturer: syz [ 280.325315][ T5600] cdc_wdm 2-1:1.0: skipping garbage [ 280.325333][ T5600] cdc_wdm 2-1:1.0: skipping garbage [ 280.325393][ T5600] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 280.384759][ T5705] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 280.412999][ T5722] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 280.421190][ T5705] usb 5-1: device descriptor read/8, error -71 [ 280.450595][ T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input31 [ 280.524190][ T5705] usb usb5-port1: unable to enumerate USB device [ 281.501061][ T5722] usb 1-1: Using ep0 maxpacket: 8 [ 281.506226][ T5722] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 281.512350][ T5722] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.512374][ T5722] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.520974][ T5786] usb 2-1: USB disconnect, device number 29 [ 281.527872][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.527896][ T5722] usb 1-1: Product: syz [ 281.527908][ T5722] usb 1-1: Manufacturer: syz [ 281.527921][ T5722] usb 1-1: SerialNumber: syz [ 281.551171][ T5722] usb 1-1: 0:1 : does not exist [ 281.634673][ T9] rc_core: IR keymap rc-imon-pad not found [ 281.634689][ T9] Registered IR keymap rc-empty [ 281.634748][ T9] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 281.634763][ T9] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 281.734037][ T5705] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 281.736173][ T9] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 281.739280][ T9] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 281.752989][ T9] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:38> initialized [ 281.760414][ T5786] usb 1-1: USB disconnect, device number 35 [ 281.886661][ T5705] usb 4-1: unable to get BOS descriptor or descriptor too short [ 281.886705][ T5705] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 281.887757][ T5705] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.887778][ T5705] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 281.887814][ T5705] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.889436][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 281.889456][ T5705] usb 4-1: Product: syz [ 281.889469][ T5705] usb 4-1: Manufacturer: syz [ 281.934708][ T5600] usb 3-1: USB disconnect, device number 38 [ 281.977582][ T5705] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 282.150432][ T7897] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 282.178555][ T5705] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 48: -71 (exp. 1). [ 282.180318][ T5705] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 48: -71 (exp. 1). [ 282.182648][ T5705] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 48: -71 (exp. 1). [ 282.182933][ T5705] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1). [ 282.183193][ T5705] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1). [ 282.183449][ T5705] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 48: -71 (exp. 1). [ 282.183703][ T5705] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 48: -71 (exp. 1). [ 282.184071][ T5705] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 48: -71 (exp. 1). [ 282.214824][ T5705] uvcvideo 4-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 48: -71 (exp. 1). [ 282.224861][ T5705] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1). [ 282.234900][ T5705] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 282.266377][ T5705] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 17 on unit 48: -71 (exp. 1). [ 282.286366][ T5705] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 18 on unit 48: -71 (exp. 1). [ 282.286647][ T5705] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 282.328098][ T5705] usb 4-1: USB disconnect, device number 34 [ 282.644203][ T7905] netlink: 'syz.0.628': attribute type 12 has an invalid length. [ 282.644227][ T7905] netlink: 132 bytes leftover after parsing attributes in process `syz.0.628'. [ 282.854027][ T5705] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 283.095353][ T5705] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 283.096237][ T5705] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.096258][ T5705] usb 2-1: config 0 has no interfaces? [ 283.098137][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.098162][ T5705] usb 2-1: Product: syz [ 283.098176][ T5705] usb 2-1: Manufacturer: syz [ 283.098190][ T5705] usb 2-1: SerialNumber: syz [ 283.103095][ T5705] usb 2-1: config 0 descriptor?? [ 284.908462][ T7903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.908812][ T7903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.065192][ T5705] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 285.378557][ T7913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.632'. [ 285.379934][ T7913] netlink: 'syz.0.632': attribute type 13 has an invalid length. [ 285.402037][ T5705] usb 5-1: not running at top speed; connect to a high speed hub [ 285.402057][ T5705] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 285.403199][ T5705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.403257][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.470347][ T5705] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 285.594779][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 285.771640][ T9] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 285.877498][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 285.877549][ T9] usb 3-1: Product: syz [ 285.877563][ T9] usb 3-1: Manufacturer: syz [ 286.044222][ T5705] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 286.046313][ T5705] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : 15 (exp. 26). [ 286.046364][ T5705] uvcvideo 5-1:1.1: Failed to initialize the device (-5). [ 286.046922][ T5705] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -5 [ 286.153230][ T9] scsi host1: uas [ 286.316598][ T5705] usb 5-1: USB disconnect, device number 43 [ 286.578057][ T5722] usb 2-1: USB disconnect, device number 30 [ 286.600021][ C0] usb 3-1: stat urb: status -71 [ 286.600096][ C0] usb 3-1: cmd cmplt err -71 [ 286.602939][ T9] usb 3-1: USB disconnect, device number 39 [ 286.646769][ T9] scsi 1:0:0:0: tag#20 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 286.646826][ T9] scsi 1:0:0:0: tag#20 CDB: Inquiry 12 00 00 00 24 00 [ 287.130294][ T7927] netlink: 232 bytes leftover after parsing attributes in process `syz.3.636'. [ 287.333969][ T5705] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 287.474015][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 287.475099][ T5705] usb 2-1: device descriptor read/64, error -71 [ 287.637571][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 287.640635][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 287.640663][ T9] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 287.640681][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 287.640718][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 287.640743][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 287.642085][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 287.642109][ T9] usb 5-1: Product: syz [ 287.642123][ T9] usb 5-1: Manufacturer: syz [ 287.745201][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 287.745237][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 287.745301][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 287.804006][ T5705] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 288.068175][ T5705] usb 2-1: device descriptor read/64, error -71 [ 288.176349][ T5705] usb usb2-port1: attempt power cycle [ 288.393758][ T5600] usb 5-1: USB disconnect, device number 44 [ 288.527013][ T5705] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 288.545880][ T5705] usb 2-1: device descriptor read/8, error -71 [ 288.664048][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 288.803971][ T9] usb 3-1: device descriptor read/64, error -71 [ 288.804060][ T5705] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 288.814119][ T2278] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 288.839213][ T5705] usb 2-1: device descriptor read/8, error -71 [ 288.945201][ T5705] usb usb2-port1: unable to enumerate USB device [ 288.964054][ T5787] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 288.966621][ T2278] usb 1-1: Using ep0 maxpacket: 16 [ 288.967332][ T2278] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 288.968387][ T2278] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.968414][ T2278] usb 1-1: config 0 interface 0 has no altsetting 0 [ 288.970459][ T2278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.970479][ T2278] usb 1-1: Product: syz [ 288.970492][ T2278] usb 1-1: Manufacturer: syz [ 288.970506][ T2278] usb 1-1: SerialNumber: syz [ 288.973620][ T2278] usb 1-1: config 0 descriptor?? [ 289.083971][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 289.113996][ T5787] usb 4-1: Using ep0 maxpacket: 8 [ 289.115650][ T5787] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 289.116609][ T5787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.116630][ T5787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.118451][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.118472][ T5787] usb 4-1: Product: syz [ 289.118485][ T5787] usb 4-1: Manufacturer: syz [ 289.118499][ T5787] usb 4-1: SerialNumber: syz [ 289.140253][ T5787] usb 4-1: 0:1 : does not exist [ 289.253995][ T9] usb 3-1: device descriptor read/64, error -71 [ 289.276447][ T2278] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33 [ 289.374229][ T9] usb usb3-port1: attempt power cycle [ 289.433096][ T5787] usb 4-1: USB disconnect, device number 35 [ 289.614005][ T2278] rc_core: IR keymap rc-imon-pad not found [ 289.614023][ T2278] Registered IR keymap rc-empty [ 289.614081][ T2278] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 289.614099][ T2278] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 289.688625][ T2278] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 289.705512][ T2278] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input34 [ 289.711872][ T2278] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:36> initialized [ 289.726902][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 289.754613][ T9] usb 3-1: device descriptor read/8, error -71 [ 289.933863][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 289.942245][ T2278] usb 1-1: USB disconnect, device number 36 [ 290.011849][ T7946] netlink: 'syz.4.642': attribute type 12 has an invalid length. [ 290.011872][ T7946] netlink: 132 bytes leftover after parsing attributes in process `syz.4.642'. [ 290.034461][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 290.067166][ T9] usb 3-1: device descriptor read/8, error -71 [ 290.175847][ T9] usb usb3-port1: unable to enumerate USB device [ 293.004027][ T5705] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 293.045217][ T2278] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 293.163969][ T5705] usb 5-1: Using ep0 maxpacket: 8 [ 293.164539][ T5705] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 293.165476][ T5705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.165497][ T5705] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.167338][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.167359][ T5705] usb 5-1: Product: syz [ 293.167372][ T5705] usb 5-1: Manufacturer: syz [ 293.167385][ T5705] usb 5-1: SerialNumber: syz [ 293.241758][ T2278] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 293.254434][ T2278] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.254459][ T2278] usb 4-1: config 0 has no interfaces? [ 293.256491][ T2278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.256515][ T2278] usb 4-1: Product: syz [ 293.256529][ T2278] usb 4-1: Manufacturer: syz [ 293.256544][ T2278] usb 4-1: SerialNumber: syz [ 293.263201][ T5705] usb 5-1: 0:1 : does not exist [ 293.327171][ T2278] usb 4-1: config 0 descriptor?? [ 293.557838][ T7958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.558188][ T7958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.837189][ T5705] usb 5-1: USB disconnect, device number 45 [ 294.334136][ T2278] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 294.807301][ T2278] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.807722][ T7981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.651'. [ 294.809970][ T2278] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 294.809995][ T2278] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 294.810012][ T2278] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 294.810051][ T2278] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 294.810074][ T2278] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 294.810600][ T7981] netlink: 'syz.0.651': attribute type 13 has an invalid length. [ 295.205974][ T2278] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 295.206001][ T2278] usb 2-1: Product: syz [ 295.206015][ T2278] usb 2-1: Manufacturer: syz [ 295.236663][ T2278] cdc_wdm 2-1:1.0: skipping garbage [ 295.236683][ T2278] cdc_wdm 2-1:1.0: skipping garbage [ 295.236746][ T2278] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 295.682423][ T5705] usb 2-1: USB disconnect, device number 35 [ 295.819206][ T2278] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 295.945105][ T9] usb 4-1: USB disconnect, device number 36 [ 295.974010][ T2278] usb 5-1: device descriptor read/64, error -71 [ 296.224062][ T2278] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 296.354010][ T2278] usb 5-1: device descriptor read/64, error -71 [ 296.403870][ T7989] netlink: 'syz.3.654': attribute type 12 has an invalid length. [ 296.404081][ T7989] netlink: 132 bytes leftover after parsing attributes in process `syz.3.654'. [ 296.464489][ T2278] usb usb5-port1: attempt power cycle [ 296.884006][ T2278] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 296.909731][ T2278] usb 5-1: device descriptor read/8, error -71 [ 297.643978][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 297.928286][ T2278] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 298.091781][ T2278] usb 5-1: device descriptor read/8, error -71 [ 298.114090][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 298.114900][ T9] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 298.115970][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.115997][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 298.123872][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.168927][ T9] usb 2-1: Product: syz [ 298.168947][ T9] usb 2-1: Manufacturer: syz [ 298.168961][ T9] usb 2-1: SerialNumber: syz [ 298.171351][ T9] usb 2-1: config 0 descriptor?? [ 298.194226][ T2278] usb usb5-port1: unable to enumerate USB device [ 298.868492][ T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35 [ 299.194847][ T9] rc_core: IR keymap rc-imon-pad not found [ 299.194882][ T9] Registered IR keymap rc-empty [ 299.194971][ T9] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 299.194988][ T9] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 299.259754][ T9] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 299.263591][ T9] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input36 [ 299.289341][ T9] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:36> initialized [ 299.636181][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 299.655963][ T5786] usb 2-1: USB disconnect, device number 36 [ 300.555209][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 300.560755][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 300.704044][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 300.705942][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 300.705986][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=6893, bcdDevice=16.b7 [ 300.707138][ T9] usb 5-1: config 3 has an invalid interface number: 92 but max is 1 [ 300.707161][ T9] usb 5-1: config 3 has an invalid interface number: 120 but max is 1 [ 300.707179][ T9] usb 5-1: config 3 has an invalid interface number: 92 but max is 1 [ 300.707196][ T9] usb 5-1: config 3 has no interface number 0 [ 300.707211][ T9] usb 5-1: config 3 has no interface number 1 [ 300.707259][ T9] usb 5-1: config 3 interface 120 altsetting 8 endpoint 0xE has invalid wMaxPacketSize 0 [ 300.707287][ T9] usb 5-1: config 3 interface 92 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.707310][ T9] usb 5-1: config 3 interface 92 has no altsetting 0 [ 300.707325][ T9] usb 5-1: config 3 interface 92 has no altsetting 1 [ 300.707342][ T9] usb 5-1: config 3 interface 120 has no altsetting 0 [ 300.787747][ T5705] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 300.878103][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.878128][ T9] usb 5-1: Product: syz [ 300.878142][ T9] usb 5-1: Manufacturer: syz [ 300.878156][ T9] usb 5-1: SerialNumber: syz [ 302.144098][ T5705] usb 4-1: device descriptor read/64, error -71 [ 302.515455][ T5705] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 302.540476][ T9] usb 5-1: selecting invalid altsetting 1 [ 302.540522][ T9] sierra 5-1:3.92: Sierra USB modem converter detected [ 302.568523][ T9] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 302.588382][ T9] sierra 5-1:3.120: Sierra USB modem converter detected [ 302.592153][ T9] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 302.624054][ T9] usb 5-1: USB disconnect, device number 50 [ 302.644664][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 302.645139][ T9] sierra 5-1:3.92: device disconnected [ 302.652611][ T9] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 302.680426][ T9] sierra 5-1:3.120: device disconnected [ 302.734034][ T5787] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 302.894808][ T5787] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 302.895690][ T5787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.895711][ T5787] usb 2-1: config 0 has no interfaces? [ 302.897443][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.897465][ T5787] usb 2-1: Product: syz [ 302.897479][ T5787] usb 2-1: Manufacturer: syz [ 302.897493][ T5787] usb 2-1: SerialNumber: syz [ 302.903706][ T5787] usb 2-1: config 0 descriptor?? [ 303.167889][ T8029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.168255][ T8029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.964017][ T5705] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 304.124072][ T5705] usb 5-1: Using ep0 maxpacket: 8 [ 304.124709][ T5705] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 304.125768][ T5705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.125789][ T5705] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.131026][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.131053][ T5705] usb 5-1: Product: syz [ 304.131067][ T5705] usb 5-1: Manufacturer: syz [ 304.131081][ T5705] usb 5-1: SerialNumber: syz [ 304.209202][ T5705] usb 5-1: 0:1 : does not exist [ 304.368300][ T5787] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 304.757217][ T5787] usb 4-1: Using ep0 maxpacket: 8 [ 304.848707][ T5787] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 304.849725][ T5787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.849747][ T5787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.851880][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.851902][ T5787] usb 4-1: Product: syz [ 304.851916][ T5787] usb 4-1: Manufacturer: syz [ 304.851930][ T5787] usb 4-1: SerialNumber: syz [ 304.926309][ T2278] usb 5-1: USB disconnect, device number 51 [ 306.822848][ T5787] usb 4-1: can't set config #1, error -71 [ 306.847504][ T5705] usb 2-1: USB disconnect, device number 37 [ 306.900899][ T5787] usb 4-1: USB disconnect, device number 39 [ 307.028921][ T8052] netlink: 'syz.2.672': attribute type 12 has an invalid length. [ 307.028946][ T8052] netlink: 132 bytes leftover after parsing attributes in process `syz.2.672'. [ 307.227669][ T8058] input: syz1 as /devices/virtual/input/input37 [ 307.624116][ T2278] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 307.624260][ T5787] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 307.809030][ T2278] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 307.811471][ T2278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.834261][ T5787] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 307.835150][ T2278] usb 4-1: config 0 descriptor?? [ 307.837129][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.900982][ T5787] usb 3-1: config 0 descriptor?? [ 308.102236][ T2278] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 308.146620][ T5787] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 308.148545][ T5787] [drm:udl_init] *ERROR* Selecting channel failed [ 308.220931][ T5787] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 308.220955][ T5787] [drm] Initialized udl on minor 2 [ 308.222946][ T5787] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 308.223364][ T5787] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 308.254722][ T5787] usb 3-1: USB disconnect, device number 44 [ 308.263839][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 308.304905][ T2278] [drm:udl_init] *ERROR* Selecting channel failed [ 308.327022][ T2278] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 308.327047][ T2278] [drm] Initialized udl on minor 1 [ 308.347342][ T2278] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 308.370893][ T2278] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 308.383955][ T2278] usb 4-1: USB disconnect, device number 40 [ 308.391229][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 310.638342][ T2278] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 312.035982][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.036035][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.374659][ T2278] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 312.375746][ T2278] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 312.375788][ T2278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.581929][ T2278] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 312.931975][ T5731] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 313.231600][ T5731] usb 2-1: device descriptor read/64, error -71 [ 313.613985][ T5694] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 313.637811][ T5731] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 313.652292][ T2278] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 313.652312][ T2278] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 313.823966][ T5694] usb 4-1: Using ep0 maxpacket: 8 [ 313.853370][ T5731] usb 2-1: device descriptor read/64, error -71 [ 314.194248][ T2278] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 314.194274][ T2278] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 314.220177][ T5694] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 314.232382][ T5694] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.232408][ T5694] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.395708][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.395736][ T5694] usb 4-1: Product: syz [ 314.395751][ T5694] usb 4-1: Manufacturer: syz [ 314.395764][ T5694] usb 4-1: SerialNumber: syz [ 314.516335][ T5731] usb usb2-port1: attempt power cycle [ 314.561966][ T5600] usb 3-1: USB disconnect, device number 45 [ 315.006338][ T5731] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 315.055715][ T5731] usb 2-1: device descriptor read/8, error -71 [ 315.728419][ T5731] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 316.024459][ T5731] usb 2-1: device descriptor read/8, error -71 [ 316.149028][ T5731] usb usb2-port1: unable to enumerate USB device [ 316.438088][ T5694] usb 4-1: can't set config #1, error -71 [ 316.443038][ T5694] usb 4-1: USB disconnect, device number 41 [ 316.615750][ T8111] input: syz1 as /devices/virtual/input/input38 [ 316.863981][ T2278] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 316.895473][ T8114] input: syz1 as /devices/virtual/input/input39 [ 317.039371][ T2278] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 317.042107][ T2278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.042132][ T2278] usb 1-1: Product: syz [ 317.042146][ T2278] usb 1-1: Manufacturer: syz [ 317.042160][ T2278] usb 1-1: SerialNumber: syz [ 317.122492][ T2278] usb 1-1: USB2VGA dongle found at address 37 [ 317.136346][ T2278] usb 1-1: Allocated 8 output buffers [ 317.142077][ T2278] usb 1-1: Failed to early initialize device [ 317.424125][ T2278] usb 1-1: USB disconnect, device number 37 [ 317.578088][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 318.645518][ T5694] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 318.929130][ T5694] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 318.949370][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.949396][ T5694] usb 2-1: Product: syz [ 318.949411][ T5694] usb 2-1: Manufacturer: syz [ 318.949425][ T5694] usb 2-1: SerialNumber: syz [ 318.987400][ T5694] usb 2-1: USB2VGA dongle found at address 42 [ 319.011170][ T5694] usb 2-1: Allocated 8 output buffers [ 319.020622][ T5694] usb 2-1: Failed to early initialize device [ 322.838225][ T5731] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 334.338059][ T5731] usb 1-1: device descriptor read/64, error -110 [ 339.520091][ T8138] usb 2-1: Failed to initialize device [ 340.153906][ C0] sched: DL replenish lagged too much [ 372.994571][ T5731] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 374.598523][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.604504][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.006023][ T5731] usb 1-1: device descriptor read/64, error -32 [ 391.205329][ T5731] usb usb1-port1: attempt power cycle [ 393.970038][ T8139] usb 2-1: Failed to initialize device [ 406.124245][ T8141] usb 2-1: USB disconnect, device number 42 [ 435.085930][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.097212][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.356685][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.367937][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 558.407310][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 558.418784][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.453796][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 573.460781][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5598/1:b..l [ 573.468693][ C0] rcu: (detected by 0, t=10503 jiffies, g=33341, q=4802 ncpus=2) [ 573.476519][ C0] task:syz-executor state:R running task stack:23144 pid:5598 tgid:5598 ppid:1 task_flags:0x40054c flags:0x00080003 [ 573.490051][ C0] Call Trace: [ 573.493335][ C0] [ 573.496280][ C0] __schedule+0x1259/0x6920 [ 573.500811][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 573.506632][ C0] ? __pfx___schedule+0x10/0x10 [ 573.511496][ C0] ? rcu_is_watching+0x13/0xc0 [ 573.516287][ C0] preempt_schedule_irq+0x4e/0x90 [ 573.521320][ C0] irqentry_exit+0x205/0xa10 [ 573.525922][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 573.531905][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 573.537104][ C0] Code: 05 8f 1e a6 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 9e e6 5d 10 0f 82 c9 02 00 00 8b 35 3e 18 5e 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 2d 1e a6 13 0f 85 09 03 00 00 48 83 c4 [ 573.557153][ C0] RSP: 0018:ffffc9000320f510 EFLAGS: 00000206 [ 573.563229][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 573.571206][ C0] RDX: 0000000000000000 RSI: ffffffff8e3bd2c3 RDI: ffffffff8c625580 [ 573.579197][ C0] RBP: ffffffff8fdec5e0 R08: 00000000ef9d33e4 R09: 0000000000000007 [ 573.587181][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 573.595183][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.603171][ C0] ? unwind_next_frame+0x3be/0x2090 [ 573.608382][ C0] ? unwind_next_frame+0x3be/0x2090 [ 573.613596][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 573.619758][ C0] unwind_next_frame+0xd1/0x2090 [ 573.624703][ C0] ? unwind_next_frame+0xbd/0x2090 [ 573.629822][ C0] ? do_group_exit+0xd5/0x2a0 [ 573.634515][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 573.640674][ C0] arch_stack_walk+0x94/0xf0 [ 573.645278][ C0] ? do_group_exit+0xd5/0x2a0 [ 573.649966][ C0] stack_trace_save+0x8e/0xc0 [ 573.654654][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 573.660112][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 573.665055][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 573.670868][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 573.676184][ C0] save_stack+0x162/0x1e0 [ 573.680522][ C0] ? __pfx_save_stack+0x10/0x10 [ 573.685395][ C0] ? free_pages_prepare+0x586/0xe00 [ 573.690777][ C0] ? __free_contig_range_common+0x14f/0x250 [ 573.696673][ C0] ? free_pages_bulk+0x12a/0x200 [ 573.701617][ C0] ? vm_area_free_pages+0xb2/0x2a0 [ 573.706727][ C0] ? vfree+0xf7/0x6d0 [ 573.710742][ C0] ? kcov_close+0x34/0x60 [ 573.715073][ C0] ? __fput+0x400/0xb60 [ 573.719241][ C0] ? task_work_run+0x150/0x240 [ 573.724010][ C0] ? do_exit+0x8da/0x2a50 [ 573.728340][ C0] ? do_group_exit+0xd5/0x2a0 [ 573.733020][ C0] ? page_ext_put+0x3e/0xd0 [ 573.737564][ C0] __reset_page_owner+0x84/0x190 [ 573.742522][ C0] free_pages_prepare+0x586/0xe00 [ 573.747560][ C0] ? lock_acquire+0x1d1/0x380 [ 573.752251][ C0] __free_contig_range_common+0x14f/0x250 [ 573.757995][ C0] free_pages_bulk+0x12a/0x200 [ 573.762864][ C0] vm_area_free_pages+0xb2/0x2a0 [ 573.767812][ C0] ? __pfx_kcov_close+0x10/0x10 [ 573.772668][ C0] vfree+0xf7/0x6d0 [ 573.776485][ C0] ? __pfx_kcov_close+0x10/0x10 [ 573.781339][ C0] ? rcu_is_watching+0x13/0xc0 [ 573.786115][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 573.791952][ C0] ? __pfx_kcov_close+0x10/0x10 [ 573.796810][ C0] ? __pfx_kcov_close+0x10/0x10 [ 573.801674][ C0] kcov_close+0x34/0x60 [ 573.805835][ C0] __fput+0x400/0xb60 [ 573.809863][ C0] task_work_run+0x150/0x240 [ 573.814466][ C0] ? __pfx_task_work_run+0x10/0x10 [ 573.819593][ C0] ? free_cgroup_ns+0x1d8/0x3a0 [ 573.824477][ C0] do_exit+0x8da/0x2a50 [ 573.828697][ C0] ? __pfx_do_exit+0x10/0x10 [ 573.833379][ C0] ? do_raw_spin_lock+0x128/0x260 [ 573.838427][ C0] ? find_held_lock+0x2b/0x80 [ 573.843116][ C0] ? get_signal+0x7e0/0x21e0 [ 573.847801][ C0] do_group_exit+0xd5/0x2a0 [ 573.852313][ C0] get_signal+0x1ec7/0x21e0 [ 573.856827][ C0] ? __pfx_get_signal+0x10/0x10 [ 573.861687][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 573.867239][ C0] ? __pfx___do_sys_wait4+0x10/0x10 [ 573.872444][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 573.878629][ C0] exit_to_user_mode_loop+0x139/0x700 [ 573.884026][ C0] ? rcu_is_watching+0x13/0xc0 [ 573.888802][ C0] do_syscall_64+0x661/0x790 [ 573.893492][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.899420][ C0] RIP: 0033:0x7efde9b5ed8e [ 573.903848][ C0] RSP: 002b:00007ffd154e8848 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 573.912266][ C0] RAX: fffffffffffffe00 RBX: 000055555e8c5500 RCX: 00007efde9b5ed8e [ 573.920326][ C0] RDX: 0000000040000000 RSI: 00007ffd154e88ec RDI: ffffffffffffffff [ 573.928490][ C0] RBP: 00007ffd154e88ec R08: 0000000000000000 R09: 0000000000000000 [ 573.936478][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000008f [ 573.944542][ C0] R13: 000055555e8d8a10 R14: 000000000004e160 R15: 00007ffd154e8940 [ 573.952533][ C0] [ 573.955558][ C0] rcu: rcu_preempt kthread starved for 2271 jiffies! g33341 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 573.966492][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 573.976460][ C0] rcu: RCU grace-period kthread stack dump: [ 573.982348][ C0] task:rcu_preempt state:R running task stack:28984 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 573.995848][ C0] Call Trace: [ 573.999124][ C0] [ 574.002064][ C0] __schedule+0x1259/0x6920 [ 574.006569][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 574.011525][ C0] ? __pfx___schedule+0x10/0x10 [ 574.016458][ C0] ? find_held_lock+0x2b/0x80 [ 574.021154][ C0] ? schedule+0x225/0x2c0 [ 574.025668][ C0] schedule+0xdd/0x2c0 [ 574.029745][ C0] schedule_timeout+0x127/0x280 [ 574.034595][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 574.039976][ C0] ? __pfx_process_timeout+0x10/0x10 [ 574.045264][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 574.051079][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 574.056549][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 574.061316][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 574.066608][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 574.071554][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 574.076772][ C0] ? rcu_is_watching+0x13/0xc0 [ 574.081543][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 574.087358][ C0] rcu_gp_kthread+0x17a/0x220 [ 574.092038][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 574.097238][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 574.103061][ C0] ? __kthread_parkme+0x18f/0x230 [ 574.108097][ C0] ? kthread+0x13a/0x450 [ 574.112373][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 574.117589][ C0] kthread+0x373/0x450 [ 574.121671][ C0] ? __pfx_kthread+0x10/0x10 [ 574.126275][ C0] ret_from_fork+0x730/0xd60 [ 574.130868][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 574.136000][ C0] ? __switch_to+0x800/0x10f0 [ 574.140685][ C0] ? __pfx_kthread+0x10/0x10 [ 574.145275][ C0] ret_from_fork_asm+0x1a/0x30 [ 574.150063][ C0] [ 574.153074][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 574.159385][ C0] Sending NMI from CPU 0 to CPUs 1: [ 574.164587][ C1] NMI backtrace for cpu 1 [ 574.164605][ C1] CPU: 1 UID: 0 PID: 43 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.164625][ C1] Tainted: [L]=SOFTLOCKUP [ 574.164631][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 574.164641][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 574.164668][ C1] RIP: 0010:unwind_get_return_address+0x4e/0xa0 [ 574.164693][ C1] Code: 7e 59 8b 03 85 c0 75 09 31 c0 5b 5d c3 cc cc cc cc 48 b8 00 00 00 00 00 fc ff df 48 8d 6b 48 48 89 ea 48 c1 ea 03 80 3c 02 00 <75> 36 48 8b 7b 48 e8 17 de 18 00 85 c0 74 cf 48 b8 00 00 00 00 00 [ 574.164707][ C1] RSP: 0018:ffffc90000a17b30 EFLAGS: 00000246 [ 574.164719][ C1] RAX: dffffc0000000000 RBX: ffffc90000a17b48 RCX: ffffc90000a17a9c [ 574.164729][ C1] RDX: 1ffff92000142f72 RSI: ffffffff8e3bd2c3 RDI: ffffc90000a17b48 [ 574.164739][ C1] RBP: ffffc90000a17b90 R08: 0000000000000001 R09: 0000000000000007 [ 574.164749][ C1] R10: 0000000000000200 R11: 0000000000018b50 R12: ffffffff81f620c0 [ 574.164758][ C1] R13: ffffc90000a17c08 R14: 0000000000000000 R15: ffff888021ed2580 [ 574.164769][ C1] FS: 0000000000000000(0000) GS:ffff888122a46000(0000) knlGS:0000000000000000 [ 574.164784][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.164794][ C1] CR2: 00007ffe0faa0ac0 CR3: 000000000fb96000 CR4: 00000000003526f0 [ 574.164804][ C1] Call Trace: [ 574.164809][ C1] [ 574.164816][ C1] arch_stack_walk+0xa6/0xf0 [ 574.164836][ C1] ? __set_page_owner+0x8c/0x540 [ 574.164860][ C1] stack_trace_save+0x8e/0xc0 [ 574.164876][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 574.164892][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 574.164910][ C1] ? stack_depot_save_flags+0x27/0x9f0 [ 574.164925][ C1] save_stack+0x162/0x1e0 [ 574.164945][ C1] ? __pfx_save_stack+0x10/0x10 [ 574.164968][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 574.164985][ C1] __set_page_owner+0x8c/0x540 [ 574.165006][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 574.165026][ C1] ? bad_range+0x257/0x3f0 [ 574.165045][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 574.165066][ C1] ? get_page_from_freelist+0x10e6/0x35d0 [ 574.165083][ C1] post_alloc_hook+0xfd/0x120 [ 574.165098][ C1] get_page_from_freelist+0x110d/0x35d0 [ 574.165122][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 574.165138][ C1] ? prepare_alloc_pages+0x1f0/0x5b0 [ 574.165157][ C1] ? unwind_next_frame+0x3be/0x2090 [ 574.165178][ C1] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 574.165195][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 574.165211][ C1] ? lock_acquire+0x1d1/0x380 [ 574.165226][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 574.165243][ C1] ? arch_stack_walk+0x94/0xf0 [ 574.165262][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 574.165280][ C1] ? stack_trace_save+0x8e/0xc0 [ 574.165294][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 574.165307][ C1] ? unwind_next_frame+0x3c8/0x2090 [ 574.165327][ C1] ? stack_depot_save_flags+0x27/0x9f0 [ 574.165342][ C1] ? kasan_save_stack+0x3f/0x50 [ 574.165361][ C1] ? synproxy_send_client_synack_ipv6+0x19f/0x7a0 [ 574.165378][ C1] ? nft_synproxy_do_eval+0x95f/0xd30 [ 574.165394][ C1] ? nft_do_chain+0x2e5/0x19d0 [ 574.165409][ C1] ? nft_do_chain_inet+0xf3/0x400 [ 574.165423][ C1] ? nf_hook_slow+0xbf/0x220 [ 574.165442][ C1] ? nf_hook.constprop.0+0x2a6/0x750 [ 574.165459][ C1] ? ip6_input+0xe0/0x2f0 [ 574.165474][ C1] ? ipv6_rcv+0x263/0x3d0 [ 574.165489][ C1] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 574.165509][ C1] ? __netif_receive_skb+0x1f/0x120 [ 574.165528][ C1] ? process_backlog+0x487/0x1600 [ 574.165552][ C1] ? net_rx_action+0xa40/0xf20 [ 574.165572][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 574.165589][ C1] new_slab+0xa9/0x6e0 [ 574.165605][ C1] refill_objects+0xe3/0x410 [ 574.165624][ C1] __pcs_replace_empty_main+0x35e/0x650 [ 574.165641][ C1] kmem_cache_alloc_node_noprof+0x4f2/0x6e0 [ 574.165658][ C1] ? trace_kmem_cache_alloc+0xdd/0x100 [ 574.165678][ C1] ? kmalloc_reserve+0x148/0x350 [ 574.165698][ C1] kmalloc_reserve+0x148/0x350 [ 574.165716][ C1] __alloc_skb+0x185/0x710 [ 574.165736][ C1] ? __alloc_skb+0x5b7/0x710 [ 574.165757][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 574.165777][ C1] ? kfree_skbmem+0x19a/0x210 [ 574.165794][ C1] ? mark_held_locks+0x40/0x70 [ 574.165812][ C1] synproxy_send_client_synack_ipv6+0x19f/0x7a0 [ 574.165829][ C1] ? psi_cgroup_alloc+0x60/0x2d0 [ 574.165843][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 574.165859][ C1] ? net_generic+0xea/0x2a0 [ 574.165877][ C1] nft_synproxy_do_eval+0x95f/0xd30 [ 574.165894][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 574.165911][ C1] ? lock_acquire+0x1d1/0x380 [ 574.165929][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 574.165946][ C1] nft_do_chain+0x2e5/0x19d0 [ 574.165962][ C1] ? ip6t_do_table+0xbed/0x1c90 [ 574.165976][ C1] ? __local_bh_enable_ip+0xa5/0x120 [ 574.165994][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 574.166011][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 574.166031][ C1] ? nf_nat_inet_fn+0x530/0xb50 [ 574.166052][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 574.166073][ C1] nft_do_chain_inet+0xf3/0x400 [ 574.166088][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 574.166103][ C1] ? nf_nat_ipv6_local_in+0x4b5/0x6c0 [ 574.166123][ C1] ? lock_acquire+0x1d1/0x380 [ 574.166139][ C1] ? nf_hook.constprop.0+0x98/0x750 [ 574.166157][ C1] nf_hook_slow+0xbf/0x220 [ 574.166178][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 574.166194][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 574.166212][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 574.166229][ C1] ? lock_acquire+0x1d1/0x380 [ 574.166245][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 574.166264][ C1] ip6_input+0xe0/0x2f0 [ 574.166280][ C1] ? __pfx_ip6_input+0x10/0x10 [ 574.166296][ C1] ipv6_rcv+0x263/0x3d0 [ 574.166313][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 574.166329][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 574.166350][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 574.166371][ C1] ? lock_acquire+0x1d1/0x380 [ 574.166388][ C1] ? process_backlog+0x437/0x1600 [ 574.166408][ C1] ? process_backlog+0x437/0x1600 [ 574.166426][ C1] __netif_receive_skb+0x1f/0x120 [ 574.166445][ C1] process_backlog+0x487/0x1600 [ 574.166467][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 574.166487][ C1] net_rx_action+0xa40/0xf20 [ 574.166510][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 574.166528][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 574.166553][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 574.166571][ C1] ? sched_clock+0x3a/0x60 [ 574.166585][ C1] ? sched_clock_cpu+0x6c/0x570 [ 574.166603][ C1] ? mark_held_locks+0x40/0x70 [ 574.166620][ C1] handle_softirqs+0x1e6/0x9d0 [ 574.166635][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 574.166650][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 574.166664][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 574.166680][ C1] ? cfg80211_inform_single_bss_data+0x959/0x1dc0 [ 574.166702][ C1] do_softirq+0xaf/0xf0 [ 574.166716][ C1] [ 574.166721][ C1] [ 574.166726][ C1] __local_bh_enable_ip+0xff/0x120 [ 574.166741][ C1] cfg80211_inform_single_bss_data+0x959/0x1dc0 [ 574.166762][ C1] ? find_held_lock+0x2b/0x80 [ 574.166784][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 574.166805][ C1] ? unwind_next_frame+0x3c8/0x2090 [ 574.166824][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 574.166846][ C1] ? stack_trace_save+0x8e/0xc0 [ 574.166860][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 574.166876][ C1] ? cfg80211_inform_bss_data+0x230/0x3c20 [ 574.166895][ C1] cfg80211_inform_bss_data+0x230/0x3c20 [ 574.166916][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 574.166933][ C1] ? __kmalloc_noprof+0x32f/0x840 [ 574.166949][ C1] ? ieee80211_iface_work+0xa9a/0x1070 [ 574.166964][ C1] ? cfg80211_wiphy_work+0x2b7/0x550 [ 574.166983][ C1] ? process_one_work+0xac7/0x1b10 [ 574.167004][ C1] ? worker_thread+0x5ef/0xe50 [ 574.167015][ C1] ? kthread+0x373/0x450 [ 574.167034][ C1] ? ret_from_fork+0x730/0xd60 [ 574.167049][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 574.167066][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 574.167088][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 574.167105][ C1] ? _ieee802_11_parse_elems_full+0x687/0x51c0 [ 574.167123][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 574.167138][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 574.167157][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 574.167173][ C1] ? find_held_lock+0x2b/0x80 [ 574.167193][ C1] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 574.167215][ C1] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 574.167240][ C1] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 574.167264][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 574.167280][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 574.167298][ C1] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 574.167318][ C1] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 574.167335][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 574.167359][ C1] ? kcov_remote_start+0x3bf/0x6d0 [ 574.167376][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 574.167397][ C1] ieee80211_iface_work+0xa9a/0x1070 [ 574.167414][ C1] cfg80211_wiphy_work+0x2b7/0x550 [ 574.167435][ C1] process_one_work+0xac7/0x1b10 [ 574.167461][ C1] ? __pfx_process_one_work+0x10/0x10 [ 574.167482][ C1] ? lock_acquire+0x1d1/0x380 [ 574.167500][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 574.167523][ C1] worker_thread+0x5ef/0xe50 [ 574.167538][ C1] ? __pfx_worker_thread+0x10/0x10 [ 574.167556][ C1] ? kthread+0x13a/0x450 [ 574.167575][ C1] ? __pfx_worker_thread+0x10/0x10 [ 574.167587][ C1] kthread+0x373/0x450 [ 574.167605][ C1] ? __pfx_kthread+0x10/0x10 [ 574.167624][ C1] ret_from_fork+0x730/0xd60 [ 574.167640][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 574.167656][ C1] ? __switch_to+0x800/0x10f0 [ 574.167675][ C1] ? __pfx_kthread+0x10/0x10 [ 574.167693][ C1] ret_from_fork_asm+0x1a/0x30 [ 574.167713][ C1]