last executing test programs: 21m34.063812835s ago: executing program 4 (id=450): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, &(0x7f0000000440)={0x5, 0x2, 0x1, 0x2}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r4, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) ptrace$setregset(0x4205, r4, 0x3, &(0x7f0000000040)={&(0x7f0000000380)="d86edc7bb662a57f4acb84c12f5626dbc0881e397a4f0e843260cecd9f4775a449cabe68b3c7b8f9e0afbd83683aeaf94dc012b839bb113a518803e77c80603c56626b3412a5735f305c797a865b59f405d8e349a4bf2a848f3ab790a54a0f8ac29db03611cd6b63c9f459e50acaec0b75ef09a2590a63d4e36eac5dd0fdadd3b1e04d2c4fb8c4383124dc07459ba140733775f8f809a719816008e02cf94469cb9c3c2c5a124e699d1a1a7b278e8e5f06fa0801a2e7948f34f1", 0xba}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x3, 0x30}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={r5, 0x7c7b912c}, &(0x7f0000000340)=0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x20, 0x1d3, "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"}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r9 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5a5, 0xfffffffffffffffb) keyctl$update(0x2, r9, &(0x7f0000000000)="11868a0fceae284c00000001000000", 0xf) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4004) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 21m32.260192371s ago: executing program 4 (id=454): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x80}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000000020304050607fd6ea6f40c0d0e0f1011121314ba0b4d149905df9c202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40e2953090b015ee17b76f98f6ef69df92adead314629b16c6e4470843151e6496553712292fc360cca00f99ccb8d4a6ac7ccd4affee544400000000000000"], 0x48, 0xfffffffffffffffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000200000008001240000000000500050002000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0xfffffd02, 0x0, 0x0, &(0x7f0000000140)=""/55, 0x37}, 0x202) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) close_range(r3, 0xffffffffffffffff, 0x0) 21m29.572382369s ago: executing program 4 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001a00010026bd7000ffdbdf251c2080050100000a800200000800010000"], 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x4000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x10, 0x4) r4 = socket(0x22, 0x4, 0x4000000) r5 = socket(0x1e, 0x4, 0x0) r6 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r9 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(r9, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r5) sendmsg$DEVLINK_CMD_TRAP_SET(r9, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x9c, r10, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) io_uring_enter(r6, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x4, 0x80000000, 0xa92, 0x1, 0xa, 0xc7, 0x8}, 0x1c) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r11 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffe]}, 0x0, 0x0, 0x8) tkill(r11, 0x15) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3, 0x80000000}, 0x10) 21m28.828943497s ago: executing program 4 (id=464): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000280)=""/110, 0x6e}, {&(0x7f0000000340)=""/86, 0x56}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/155, 0x9b}, {&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000680)=""/158, 0x9e}, {&(0x7f0000000740)=""/157, 0x9d}, {&(0x7f0000000800)=""/196, 0xc4}], 0x8, &(0x7f0000000980)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505a1a44000010203010902"], 0xfffffffffffffffc) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) dup2(r5, r3) 21m23.518908266s ago: executing program 4 (id=474): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)='./file0\x00', 0x8, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r3, 0xe7d4c009da6c1985}, {r3, 0x201}], 0x2, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r4, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0x8c1}) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 21m22.680901634s ago: executing program 4 (id=476): syz_emit_ethernet(0x4a, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0xa040) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000280)=""/108) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4010) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000700)={0x0, 0xfffffffe, 0x100, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47f5, 0x6021, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) chdir(&(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3a}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r9, r8}) sendmsg$kcm(r7, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) 21m21.877805248s ago: executing program 32 (id=476): syz_emit_ethernet(0x4a, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0xa040) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000280)=""/108) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4010) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000700)={0x0, 0xfffffffe, 0x100, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47f5, 0x6021, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) chdir(&(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3a}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r9, r8}) sendmsg$kcm(r7, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) 14.96592548s ago: executing program 5 (id=4175): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = dup(r4) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0xffffffffffffffd6}}, 0xfffffe38) 9.943376173s ago: executing program 3 (id=4225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602", 0x11}], 0x1) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 9.835112786s ago: executing program 3 (id=4226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="f36dc744240015000000c34424020e000000c7442406000000000f0114240f01dfb9b8020000b8494d0000ba000000000f30c4c37d044a08040fff090f8e43d399ad66baf80cb802028e8cef66bafc0c66b8010066efc4c1e956c80fc77cc187", 0x60}], 0x1, 0x55, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.730386494s ago: executing program 5 (id=4227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000f67000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9ea97000000b2001bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000004b25660fc775022ef3ad0f320f350f00d0", 0x43}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.709314719s ago: executing program 3 (id=4228): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 8.314718976s ago: executing program 5 (id=4231): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$admmidi(&(0x7f0000000040), 0x9, 0x400400) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, 0x0) 6.72896024s ago: executing program 3 (id=4236): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x240000c5, &(0x7f0000000040)={0xa, 0x2, 0x2, @empty, 0x20000}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)='&', 0x1}], 0x1) 6.551215429s ago: executing program 3 (id=4237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310301000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) 6.397601853s ago: executing program 3 (id=4238): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = dup(r4) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0xffffffffffffffd6}}, 0xfffffe38) 6.26063397s ago: executing program 5 (id=4240): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010100000000ffdbdf252b00000008000300", @ANYRES32=r1, @ANYBLOB="0a003400010101110101000008002600b409"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) 4.976728047s ago: executing program 0 (id=4245): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x9f1}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_open_dev$usbmon(0x0, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x44084) 4.975847376s ago: executing program 5 (id=4246): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000280)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.675572968s ago: executing program 1 (id=4247): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a300000000008000540"], 0x6c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 4.348884396s ago: executing program 1 (id=4248): socket$alg(0x26, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setresuid(0xee01, 0xee00, 0x0) madvise(&(0x7f0000bde000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) 3.372906922s ago: executing program 1 (id=4250): r0 = socket(0x15, 0x5, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200480d1}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) close_range(r1, 0xffffffffffffffff, 0x0) 2.775890263s ago: executing program 1 (id=4251): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x50c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x4d0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0x274, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x240, 0x1b, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x1}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x1a1, 0x6, "eb40acabacf633d64a35fa2954e1d3bdb945202ed0be11d9c5d5c6cf5110ad8dbbba99cced2d3940b454d88a9f9f91c798e0d919a753e9ac68e1b761dec7e01233ca65bc70eb9a72be700a30e64f28cac551a739d7549acd50403e78cda6b77023ce37b927c8b5c18fea8002a892f9f75a88eedff351be628e3656167752ac1709774d817e5476a7baf26093a4bd1d28ee9b98820f9880f44ce5b064791393b7362b2dd34c3b66970920dcb3b15404b9f6267a7b707e17875f5ace4fa6a70ead3508d4613cab70889360d0f0f6adb8c73fcf000000000e92053556ba7eca201497ba0b1dbd96be385b49005c8c8e41002d81758dca127df597f75ee47cbc0d72223581029e9ead57c3123c4a78121bc38e6b86a2c93121d1d60d27ae08dda75ff2791479389da77714d517850e7ecd81193386cc669d72a633fdee8066679636f7400a52d7bf38cf7f308099bdefc7bcb8947d99c427f526d2397c08b00525efc6efc96a479d5605fb9212831ba1c4930f3d66fca716ccaf6406d98f0e2c698ccdb68e2076c3096091f27d1f9f197a9356cbdf924a7877000448a0e133"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x234, 0x1, [@m_connmark={0x168, 0x7, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xf, 0xb411d50005397f39, 0xa, 0x10001}, 0x9e61}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ce, 0xa, 0x0, 0x5, 0x1}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfe1, 0xc0000, 0x1, 0x3, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x28d4483e, 0xa41, 0x20000000, 0x8, 0x14eb}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a3, 0x6, 0x7, 0x1c05, 0x4}, 0x1000}}]}, {0xa9, 0x6, "79bfcd7af533d072a8c29f36e68ab9904831686d6cd3390377cca5e53a8926070630448b3fc4cd7c92ec53371be4232497d515edab99ceda9fe783a4517aa76f458d17bb770e71e0ba14efb8375ac49ead1660b083f443d1ffcecd5197019986b82c2d3c1f0d2b0de14eead0041991bd7874be9402d799e64d44c3fe6d48dd4a8f6782a95c290cea018ba0470c73b3032f66a39bf3cba21d7301df8362d3324b6a18d46ba1"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x9c, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0x6d, 0x6, "01f4310969d021b8053bb1aca7e8d7615c1d03580900c583f834dae8ea05e484960378a34a6b952d073cc12d15ce11e941d47c907715c5f99ee7525bcab58cfe612fa780af8ced2963cf55b3491748a46eec685aebc1e625b20a01ecf302ae7d7ed9067bf6c6e18ea5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x50c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.541086289s ago: executing program 0 (id=4252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x20, r1, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) 2.308207294s ago: executing program 2 (id=4253): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}}, 0x18, 0x0}, 0x0) 1.667940933s ago: executing program 5 (id=4254): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000001e80), 0x1, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0xfff9, 0x801, 0x0, 0x0}, {0xffff, 0x4000, 0x0, 0x0}], 0x2}) 1.02680438s ago: executing program 2 (id=4255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008"], 0x0) 977.64182ms ago: executing program 0 (id=4256): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1c, 0x2, @mcast1, 0xc}, 0x1c) 920.261246ms ago: executing program 1 (id=4257): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r0, &(0x7f000000c400)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) 856.136042ms ago: executing program 2 (id=4258): r0 = socket(0x10, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01030300ff"], 0x38}}, 0x40084c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 787.844372ms ago: executing program 0 (id=4259): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x2b, @empty, @empty, 0x0, 0x10, 0x200, 0xa}}) 711.213876ms ago: executing program 2 (id=4260): syz_emit_ethernet(0x4e, &(0x7f0000000c00)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x1, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}}}}}, 0x0) 684.660279ms ago: executing program 0 (id=4261): 484.983564ms ago: executing program 0 (id=4262): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1) 484.632799ms ago: executing program 2 (id=4263): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{}, {&(0x7f0000000280)="ca70", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 416.275037ms ago: executing program 2 (id=4264): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4ea0, @empty}, 0x12a6ae1996cf1162) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) io_uring_setup(0x93d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = socket(0x23, 0x80805, 0x0) bind$alg(r7, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) 0s ago: executing program 1 (id=4265): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) kernel console output (not intermixed with test programs): 81 - 0 [ 1499.059747][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.109421][ T10] usb 2-1: config 0 descriptor?? [ 1499.253766][T18098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1499.275526][T18098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.389299][T18098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1499.406763][T18098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.732698][T22284] chnl_net:caif_netlink_parms(): no params data found [ 1499.933474][T22303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3459'. [ 1499.956428][T11626] gspca_vc032x: reg_w err -71 [ 1499.983012][T11626] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 1500.004516][T11626] usb 1-1: USB disconnect, device number 38 [ 1500.556956][ T5866] Bluetooth: hci0: command tx timeout [ 1500.781777][ T5854] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1500.937477][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1500.960187][ T5854] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 1500.970379][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.983203][ T5854] usb 6-1: Product: syz [ 1500.987489][ T5854] usb 6-1: Manufacturer: syz [ 1500.994890][ T5854] usb 6-1: SerialNumber: syz [ 1501.028915][ T5854] usb 6-1: config 0 descriptor?? [ 1501.199447][ T5854] viperboard 6-1:0.0: version 0.00 found at bus 006 address 015 [ 1501.211767][ T5854] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1501.223523][ T5854] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1501.291120][T18836] usb 2-1: USB disconnect, device number 61 [ 1501.323704][ T5854] usb 6-1: USB disconnect, device number 15 [ 1501.540136][T18098] bond0 (unregistering): Released all slaves [ 1501.580855][T18098] bond1 (unregistering): Released all slaves [ 1501.625173][T18098] bond2 (unregistering): Released all slaves [ 1501.697069][T18098] bond3 (unregistering): Released all slaves [ 1501.750036][T18098] bond4 (unregistering): Released all slaves [ 1501.835207][T18098] bond5 (unregistering): Released all slaves [ 1501.895031][T18098] bond6 (unregistering): Released all slaves [ 1501.985866][T18098] bond7 (unregistering): Released all slaves [ 1502.018263][T18098] bond8 (unregistering): Released all slaves [ 1502.050178][T18098] bond9 (unregistering): Released all slaves [ 1502.105367][T18098] bond10 (unregistering): Released all slaves [ 1502.139125][T18098] bond11 (unregistering): Released all slaves [ 1502.188574][T18098] bond12 (unregistering): Released all slaves [ 1502.208598][T22329] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3468'. [ 1502.246743][T18098] bond13 (unregistering): Released all slaves [ 1502.271249][T18098] bond14 (unregistering): Released all slaves [ 1502.300446][T18098] bond15 (unregistering): Released all slaves [ 1502.326147][T18098] bond16 (unregistering): Released all slaves [ 1502.347204][T18098] bond17 (unregistering): Released all slaves [ 1502.378670][T18098] bond18 (unregistering): Released all slaves [ 1502.411109][T18098] bond19 (unregistering): Released all slaves [ 1502.441547][T18098] bond20 (unregistering): Released all slaves [ 1502.631756][ T5866] Bluetooth: hci0: command tx timeout [ 1503.216696][ T5854] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1503.241794][ T5854] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1503.281532][T18836] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1503.443217][T18836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1503.462974][T18836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1503.481638][T18836] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1503.520999][T18836] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 1503.542439][T18836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.569371][T18836] usb 2-1: config 0 descriptor?? [ 1503.997724][T18836] hid (null): invalid report_count -2045219888 [ 1504.050679][T18836] itetech 0003:048D:8595.0012: invalid report_count -2045219888 [ 1504.132452][T18836] itetech 0003:048D:8595.0012: item 0 4 1 9 parsing failed [ 1504.140747][T18836] itetech 0003:048D:8595.0012: probe with driver itetech failed with error -22 [ 1504.195600][T22284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.230286][T22284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.242262][T22284] bridge_slave_0: entered allmulticast mode [ 1504.251190][T22284] bridge_slave_0: entered promiscuous mode [ 1504.371895][T18098] tipc: Left network mode [ 1504.384313][ T5854] usb 2-1: USB disconnect, device number 62 [ 1504.392000][T22284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.409946][T22284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.438280][T22284] bridge_slave_1: entered allmulticast mode [ 1504.452777][T22357] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3473'. [ 1504.521856][T22284] bridge_slave_1: entered promiscuous mode [ 1504.699532][T22284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.711915][ T5866] Bluetooth: hci0: command tx timeout [ 1504.840240][T18836] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1504.847964][T11012] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1504.934713][T22284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1505.021605][T18836] usb 1-1: Using ep0 maxpacket: 16 [ 1505.028608][T18836] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.039800][T18836] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.049892][T18836] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1505.057843][T18836] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1505.058687][T11012] usb 4-1: config 0 has no interfaces? [ 1505.086911][T11012] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1505.107885][T11012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.132253][T18836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.146800][T11012] usb 4-1: Product: syz [ 1505.165355][T11012] usb 4-1: Manufacturer: syz [ 1505.169970][T11012] usb 4-1: SerialNumber: syz [ 1505.200224][T18836] usb 1-1: config 0 descriptor?? [ 1505.227831][T11012] usb 4-1: config 0 descriptor?? [ 1505.254283][ T30] audit: type=1326 audit(1753430237.477:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22365 comm="syz.1.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa25f8e9a9 code=0x7ffc0000 [ 1505.296728][ T30] audit: type=1326 audit(1753430237.477:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22365 comm="syz.1.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa25f8e9a9 code=0x7ffc0000 [ 1505.348225][T22284] team0: Port device team_slave_0 added [ 1505.393127][T18098] hsr_slave_0: left promiscuous mode [ 1505.407158][ T30] audit: type=1326 audit(1753430237.477:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22365 comm="syz.1.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa25f8e9a9 code=0x7ffc0000 [ 1505.434849][T22360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1505.491906][T22360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1505.566329][ T30] audit: type=1326 audit(1753430237.477:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22365 comm="syz.1.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa25f8e9a9 code=0x7ffc0000 [ 1505.589536][T18098] hsr_slave_1: left promiscuous mode [ 1505.678940][T18098] veth1_macvtap: left promiscuous mode [ 1505.751509][T18098] veth0_macvtap: left promiscuous mode [ 1505.795634][ T30] audit: type=1326 audit(1753430237.477:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22365 comm="syz.1.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa25f8e9a9 code=0x7ffc0000 [ 1505.823458][T18098] veth1_vlan: left promiscuous mode [ 1506.101152][T18836] hid (null): global environment stack underflow [ 1506.123124][T18098] veth0_vlan: left promiscuous mode [ 1506.141159][T18836] hid (null): bogus close delimiter [ 1506.174255][T18836] cougar 0003:060B:500A.0013: unexpected long global item [ 1506.191751][ T30] audit: type=1326 audit(1753430237.477:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22365 comm="syz.1.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7faa25f8e9a9 code=0x7ffc0000 [ 1506.232817][T18836] cougar 0003:060B:500A.0013: parse failed [ 1506.250263][T18836] cougar 0003:060B:500A.0013: probe with driver cougar failed with error -22 [ 1506.271646][ T30] audit: type=1326 audit(1753430237.477:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22365 comm="syz.1.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa25f8e9a9 code=0x7ffc0000 [ 1506.453605][ T30] audit: type=1326 audit(1753430237.477:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22365 comm="syz.1.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa25f8e9a9 code=0x7ffc0000 [ 1506.598175][ T30] audit: type=1326 audit(1753430237.477:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22365 comm="syz.1.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa25f8e9a9 code=0x7ffc0000 [ 1506.752385][ T30] audit: type=1326 audit(1753430237.477:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22365 comm="syz.1.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa25f8e9a9 code=0x7ffc0000 [ 1506.792736][ T5866] Bluetooth: hci0: command tx timeout [ 1506.870769][T22390] usb usb8: check_ctrlrecip: process 22390 (syz.5.3479) requesting ep 01 but needs 81 [ 1506.909624][T22390] usb usb8: usbfs: process 22390 (syz.5.3479) did not claim interface 0 before use [ 1506.952959][T22390] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1507.681155][T18836] usb 4-1: USB disconnect, device number 50 [ 1507.766607][T11012] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1507.923274][T11012] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1507.956748][T11012] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1507.966884][T11012] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1507.995083][T18836] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1508.002774][T11012] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1508.015723][T11012] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1508.023475][T11626] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1508.033229][T11012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.041900][T11012] usb 2-1: Product: syz [ 1508.061634][T11012] usb 2-1: Manufacturer: syz [ 1508.066377][T11012] usb 2-1: SerialNumber: syz [ 1508.086150][T11012] usb 2-1: config 0 descriptor?? [ 1508.094610][T11012] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 1508.183987][T18836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.199493][T18836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1508.209400][T18836] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1508.217806][T11626] usb 6-1: Using ep0 maxpacket: 32 [ 1508.222760][T18836] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 1508.233449][T11626] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1508.236638][T18836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.258660][T11626] usb 6-1: config 0 has no interface number 0 [ 1508.267579][T18836] usb 4-1: config 0 descriptor?? [ 1508.291177][T11626] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1508.310219][T11012] scsi host1: usb-storage 2-1:0.0 [ 1508.324172][T11012] usb 2-1: USB disconnect, device number 63 [ 1508.348132][T11626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.357987][T11626] usb 6-1: Product: syz [ 1508.373307][T11626] usb 6-1: Manufacturer: syz [ 1508.378658][T11626] usb 6-1: SerialNumber: syz [ 1508.387885][T11626] usb 6-1: config 0 descriptor?? [ 1508.410429][T11626] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1508.625411][T11626] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1508.657454][T11626] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1508.688363][T18836] hid (null): invalid report_count -2045219888 [ 1508.709131][T18836] itetech 0003:048D:8595.0014: invalid report_count -2045219888 [ 1508.730252][T18836] itetech 0003:048D:8595.0014: item 0 4 1 9 parsing failed [ 1508.739553][T18836] itetech 0003:048D:8595.0014: probe with driver itetech failed with error -22 [ 1508.785169][T22284] team0: Port device team_slave_1 added [ 1508.915602][ T9] usb 1-1: USB disconnect, device number 39 [ 1508.953400][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 32 [ 1509.005961][T22284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1509.014957][T22284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.042421][T22284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.055320][T11626] usb 4-1: USB disconnect, device number 51 [ 1509.055620][T22284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.081195][T22284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.115169][T22284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.234918][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1509.241625][T18836] usb 6-1: USB disconnect, device number 16 [ 1509.255808][T18836] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1509.281510][T22418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3488'. [ 1509.312906][T11012] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1509.348893][T18836] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1509.377751][T22284] hsr_slave_0: entered promiscuous mode [ 1509.399121][T22284] hsr_slave_1: entered promiscuous mode [ 1509.406334][T18836] quatech2 6-1:0.51: device disconnected [ 1509.411042][T22284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1509.420763][T22284] Cannot create hsr debugfs directory [ 1509.471609][T11012] usb 2-1: Using ep0 maxpacket: 16 [ 1509.493634][T11012] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1509.531533][T11012] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1509.543592][T18098] IPVS: stop unused estimator thread 0... [ 1509.568377][T11012] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1509.585531][T11012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.606021][T11012] usb 2-1: Product: syz [ 1509.617692][T11012] usb 2-1: Manufacturer: syz [ 1509.652151][T11012] usb 2-1: SerialNumber: syz [ 1509.677764][T11012] usb 2-1: config 0 descriptor?? [ 1509.708601][T11012] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1509.746722][T11012] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1509.756225][T22423] usb usb8: check_ctrlrecip: process 22423 (syz.3.3489) requesting ep 01 but needs 81 [ 1509.878118][T22423] usb usb8: usbfs: process 22423 (syz.3.3489) did not claim interface 0 before use [ 1509.919501][T22423] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1510.309362][T11012] em28xx 2-1:0.0: chip ID is em28178 [ 1510.941543][T11012] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1510.961707][ T3092] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1511.014019][T22284] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1511.066277][T22284] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1511.089008][T22284] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1511.095347][T11012] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1511.112893][T11012] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1511.121692][T22284] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1511.131364][ T3092] usb 6-1: Using ep0 maxpacket: 32 [ 1511.169049][ T3092] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1511.212800][T11012] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1511.225635][ T3092] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1511.241394][T11012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.265714][ T3092] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1511.294030][ T3092] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.366718][ T3092] usb 6-1: Product: syz [ 1511.420572][T22284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.429760][ T3092] usb 6-1: Manufacturer: syz [ 1511.435268][ T3092] usb 6-1: SerialNumber: syz [ 1511.458535][ T3092] usb 6-1: config 0 descriptor?? [ 1511.475879][ T3092] usb 6-1: no audio or video endpoints found [ 1511.514323][T11012] usb 4-1: usb_control_msg returned -32 [ 1511.526314][T11012] usbtmc 4-1:16.0: can't read capabilities [ 1511.533444][T22284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1511.611869][T18098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.619069][T18098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1511.714666][ T10] usb 6-1: USB disconnect, device number 17 [ 1511.779419][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.786642][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1512.194783][T22284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1512.495471][T22284] veth0_vlan: entered promiscuous mode [ 1512.578650][T22284] veth1_vlan: entered promiscuous mode [ 1512.645719][T11012] usb 2-1: USB disconnect, device number 64 [ 1512.674401][T11626] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1512.678404][T11012] em28xx 2-1:0.0: Disconnecting em28xx [ 1512.686632][T22284] veth0_macvtap: entered promiscuous mode [ 1512.713543][T11012] em28xx 2-1:0.0: Freeing device [ 1512.732397][T22284] veth1_macvtap: entered promiscuous mode [ 1512.770605][T22284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1512.796821][T22284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1512.811452][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1512.827408][T22284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.838925][T22284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.853538][T22284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.864921][T22284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.877336][T11626] usb 1-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1512.892085][T11626] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1512.913554][T11626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 24929, setting to 64 [ 1512.956791][T11626] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1513.000858][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1513.025310][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1513.037995][T11626] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1513.050863][T18573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1513.061336][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1513.076941][T18573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.078767][T11626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1513.110689][ T10] usb 6-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 1513.120040][T11626] usb 1-1: Product: syz [ 1513.127782][T11626] usb 1-1: Manufacturer: syz [ 1513.131979][T11012] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1513.146675][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.155097][T11626] usb 1-1: SerialNumber: syz [ 1513.169012][T18585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1513.172251][T11626] usb 1-1: config 0 descriptor?? [ 1513.183923][ T10] usb 6-1: config 0 descriptor?? [ 1513.197323][T22488] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1513.205959][T18585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.311816][T11012] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1513.349696][T11012] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1513.374752][T11012] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1513.393178][T11012] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.416536][T22496] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1513.418640][T11626] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1513.427711][T11012] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1513.464473][T11626] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1513.598113][ T10] hid (null): invalid report_count -2045219888 [ 1513.619211][T11626] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 1513.652367][ T10] itetech 0003:048D:8595.0015: invalid report_count -2045219888 [ 1513.660064][ T10] itetech 0003:048D:8595.0015: item 0 4 1 9 parsing failed [ 1513.688000][T11626] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1513.716805][T22499] usb 4-1: USB disconnect, device number 52 [ 1513.725716][ T10] itetech 0003:048D:8595.0015: probe with driver itetech failed with error -22 [ 1513.739536][T11626] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1513.832883][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1513.832898][ T30] audit: type=1326 audit(1753430246.057:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22513 comm="syz.2.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a218e9a9 code=0x7ffc0000 [ 1513.832904][ T10] usb 6-1: USB disconnect, device number 18 [ 1513.882761][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1513.889410][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1513.896031][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1513.896439][T11012] usb 2-1: USB disconnect, device number 65 [ 1513.902688][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1513.902892][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1513.923884][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1513.930525][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1513.937191][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1513.945463][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1513.952652][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1513.959274][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1513.965939][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1513.972577][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1513.979208][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1513.985876][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1513.992615][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1513.999651][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.006299][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.012938][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.019562][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.026423][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.033069][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.039690][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.047255][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.053902][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.060679][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.067283][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.074006][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.080636][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.087227][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.093850][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.100432][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.107150][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.114004][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.120683][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.127310][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.141009][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.151986][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.161715][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.171392][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.171742][ T30] audit: type=1326 audit(1753430246.057:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22513 comm="syz.2.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd0a218e9a9 code=0x7ffc0000 [ 1514.181390][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.211419][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.221389][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.231413][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.241414][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.251851][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.258994][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.265739][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.281395][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.288404][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.301451][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.311428][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.321373][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.328652][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.335459][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.342272][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.349267][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.356374][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.363660][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.371338][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.379236][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.385857][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.401419][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.409275][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.421361][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.428190][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.434997][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.441827][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.448845][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.461884][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.470099][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.477396][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.484180][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.490810][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.497552][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.504215][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.510809][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.517594][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.524380][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.531179][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.538021][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.541648][ T30] audit: type=1326 audit(1753430246.057:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22513 comm="syz.2.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a218e9a9 code=0x7ffc0000 [ 1514.544859][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.574988][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.582295][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.589086][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.595757][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.602435][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.609039][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.615657][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.622324][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.628922][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.635616][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.642245][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.648865][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.655544][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.662439][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.669253][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.675880][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.682539][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.689122][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.695958][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.702698][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.709300][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.715928][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.722549][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.729126][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.735752][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.742405][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.748991][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.755999][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.763106][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.769968][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.776642][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.783265][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.789846][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.796665][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.803303][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.809891][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.816522][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.823204][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.829813][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.836812][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.843896][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.851658][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.858413][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.865797][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.873203][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.879961][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.886798][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.893606][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.901319][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.908490][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.921365][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.928362][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.935565][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.951148][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.962069][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.971983][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.981882][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.989558][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1514.996226][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.002895][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.009500][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.016116][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.022743][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.029362][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.035997][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.042625][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.049223][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.055857][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.062469][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.069829][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.076466][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.083086][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.089693][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.096329][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.102965][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.109594][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.116479][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.123118][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.129725][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.136328][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.142956][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.149583][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.156185][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.162810][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.169412][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.176659][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.183753][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.190362][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.196976][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.203588][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.210201][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.216810][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.223425][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.230031][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.236688][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.243301][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.249901][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.256522][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.263125][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.269728][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.277057][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.284082][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.290686][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.297313][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.303941][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.310556][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.317180][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.323795][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.330401][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.336996][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.343611][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.350228][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.357058][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.363654][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.370259][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.377554][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.384577][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.391185][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.397817][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.404422][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.411021][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.417648][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.424269][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.430887][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.437505][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.444129][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.450728][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.457328][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.463961][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.470564][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.477895][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.484899][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.491522][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.498116][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.504710][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.511324][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.517923][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.524542][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.531137][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.537755][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.544369][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.550976][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.557584][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.564207][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.570803][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.577404][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.584724][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.592421][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.599018][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.605630][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.612265][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.618863][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.625485][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.632082][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.638677][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.645297][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.651925][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.658521][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.665116][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.671806][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.678403][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.685656][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.693033][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.699643][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.706253][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.712866][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.719466][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.726075][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.732673][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.739273][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.745881][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.752836][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.759439][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.766053][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.772674][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.779276][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.786558][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.793565][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.800171][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.806797][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.813397][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.819994][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.826624][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.833248][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.839847][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.846443][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.853041][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.859639][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.866248][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.872847][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.879445][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.886042][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.893373][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.900257][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.906871][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.913497][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.920097][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.926712][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.933320][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.939922][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.946549][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.953191][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.959794][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.966395][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.973029][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.979636][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.986262][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1515.993609][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.000680][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.007298][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.013951][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.020558][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.027158][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.033781][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.040382][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.047002][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.053600][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.060198][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.066797][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.073431][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.080050][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.086686][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.094083][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.100996][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.107622][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.114221][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.120817][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.127413][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.134038][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.140642][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.147283][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.153936][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.160532][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.167157][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.173780][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.180380][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.186979][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.194927][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.201901][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.208500][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.215113][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.221713][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.228313][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.234931][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.241545][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.248152][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.254762][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.261359][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.267959][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.274558][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.281154][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.287770][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.294382][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.302196][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.308806][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.315443][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.322082][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.328681][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.335325][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.341976][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.348652][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.355291][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.361846][T11626] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1516.361944][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.370751][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.377285][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.383769][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.390233][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.396940][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.403428][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.417267][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.423746][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.430192][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.436753][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.443218][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.449676][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.456142][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.462662][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.469180][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.475763][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.482316][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.488833][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.495391][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.501952][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.509850][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.516471][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.523115][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.529793][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.536409][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.543052][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.549671][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.556393][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.563007][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.569646][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.576259][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.582874][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.589481][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.596105][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.602729][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.610284][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.611664][ T30] audit: type=1326 audit(1753430246.057:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22513 comm="syz.2.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd0a218e9a9 code=0x7ffc0000 [ 1516.616893][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.645642][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.652255][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.658895][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.665522][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.672134][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.678767][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.685398][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.692014][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.698636][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.705465][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.713191][T11626] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1516.722347][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.729341][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.735932][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.742448][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.748897][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.755400][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.762030][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.768482][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.774980][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.781453][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.787895][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.794442][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.800883][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.807338][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.813811][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.821453][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.828064][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.834713][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.841369][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.849664][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.856414][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.863068][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.869685][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.876329][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.882964][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.886352][ T30] audit: type=1326 audit(1753430246.057:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22513 comm="syz.2.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a218e9a9 code=0x7ffc0000 [ 1516.889561][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.919055][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.926265][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.932884][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.939570][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.946177][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.952793][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.959427][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.966068][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.972723][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.979323][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.985911][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.992520][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1516.999086][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.005667][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.012243][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.019261][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.025872][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.033451][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.040064][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.046943][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.054538][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.061331][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.068058][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.074665][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.081318][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.087970][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.094592][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.101219][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.107872][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.114565][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.122097][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.128749][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.135384][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.142007][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.148662][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.155275][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.161924][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.169400][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.176084][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.182703][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.189322][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.196576][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.203217][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.209827][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.216480][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.224012][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.230698][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.238206][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.244825][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.251714][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.258597][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.265233][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.271876][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.278491][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.285119][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.291749][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.298379][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.305036][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.311723][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.318346][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.327586][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.334749][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.341405][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.348022][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.355246][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.355588][ T30] audit: type=1326 audit(1753430246.057:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22513 comm="syz.2.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd0a218e9a9 code=0x7ffc0000 [ 1517.362991][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.392236][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.398844][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.401785][ T3092] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1517.405447][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.421371][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.430713][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.438103][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.445161][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.451820][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.458432][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.465053][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.471692][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.478283][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.484912][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.491559][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.498138][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.504694][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.511257][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.517850][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.524412][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.531676][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.538310][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.544910][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.551508][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.558069][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.564657][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.571215][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.577788][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.584346][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.590910][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.597644][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.604322][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.610887][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.617448][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.624018][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.631766][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.638516][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.645093][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.651664][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.658223][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.664787][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.672135][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.678789][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.685381][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.691967][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.698631][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.705231][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.711813][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.718369][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.724942][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.741610][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.748341][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.755145][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.761741][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.768318][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.774884][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.781478][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.788059][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.794635][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.801185][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.807745][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.814304][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.820861][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.827417][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.834396][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.840954][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.847524][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.854087][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.860640][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.867189][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.873763][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.880318][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.886880][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.893435][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.899990][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.906547][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.913111][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.919680][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.926243][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.932801][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.939878][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.946471][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.953030][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.959583][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.966136][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.972692][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.979249][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.985807][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.992500][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1517.999061][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.005621][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.012179][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.018731][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.025302][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.031865][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.038955][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.045515][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.052068][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.058620][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.065185][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.071739][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.078289][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.084850][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.091419][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.098735][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.105298][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.111859][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.118432][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.125064][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.131783][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.138442][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.146130][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.153008][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.159624][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.166285][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.172931][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.180488][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.187157][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.193914][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.200493][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.207488][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.214186][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.221333][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.231408][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.241346][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.248370][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.255299][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.262116][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.268777][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.275439][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.282123][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.288726][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.295376][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.302045][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.308615][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.315313][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.322132][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.328768][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.335420][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.342026][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.349347][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.356279][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.362926][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.369529][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.376237][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.382927][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.389547][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.396220][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.402861][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.409480][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.416135][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.422766][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.429339][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.435976][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.442608][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.449436][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.456298][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.462936][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.469512][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.476147][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.482778][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.489351][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.496006][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.502631][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.509212][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.515881][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.522517][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.529107][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.535827][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.542490][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.549555][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.556462][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.563107][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.569720][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.576462][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.583100][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.589704][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.596447][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.603120][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.609717][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.616340][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.622915][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.629564][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.636988][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.643812][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.650579][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.657888][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.664648][T11626] usb 1-1: USB disconnect, device number 40 [ 1518.671694][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1518.678102][ C0] radio-si470x 1-1:0.0: resubmitting urb failed (-19) [ 1518.693428][T22531] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3504'. [ 1518.731701][ T3092] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1518.806920][ T3092] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1518.820152][ T3092] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1518.835247][ T3092] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1518.854488][ T3092] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1518.867416][ T3092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.881544][ T3092] usb 2-1: Product: syz [ 1518.887730][ T3092] usb 2-1: Manufacturer: syz [ 1518.894953][ T3092] usb 2-1: SerialNumber: syz [ 1518.917680][ T3092] usb 2-1: config 0 descriptor?? [ 1518.928417][ T3092] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 1519.133350][ T3092] scsi host1: usb-storage 2-1:0.0 [ 1519.176561][T22541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1519.423402][T11626] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1519.441885][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1519.450626][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1519.461523][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1519.474055][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1519.482195][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1519.709015][ T1129] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1519.775273][T11626] usb 1-1: Using ep0 maxpacket: 32 [ 1519.815876][T11626] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.866935][T11626] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1519.918722][T11626] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1519.970800][T11626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.033477][T11626] usb 1-1: config 0 descriptor?? [ 1520.123332][ T1129] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1520.169939][T18836] ums-isd200 2-1:0.0: Max LUN 248 is not valid, using 0 instead [ 1520.347579][T11626] usb 1-1: USB disconnect, device number 41 [ 1520.361888][T22540] usb 2-1: reset high-speed USB device number 66 using dummy_hcd [ 1520.438120][ T1129] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1520.590215][ T1129] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1520.891912][ T3092] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1520.930496][T22545] chnl_net:caif_netlink_parms(): no params data found [ 1521.121434][ T3092] usb 6-1: Using ep0 maxpacket: 16 [ 1521.133122][ T3092] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.220988][ T3092] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1521.232294][T18836] usb 2-1: USB disconnect, device number 66 [ 1521.263034][T22594] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 1521.310690][T22593] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 1521.331879][ T3092] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1521.424152][ T3092] usb 6-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 1521.449244][ T3092] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.471185][ T3092] usb 6-1: Product: syz [ 1521.488311][ T3092] usb 6-1: Manufacturer: syz [ 1521.499272][ T3092] usb 6-1: SerialNumber: syz [ 1521.512592][ T51] Bluetooth: hci1: command tx timeout [ 1521.564981][ T1129] bridge_slave_1: left allmulticast mode [ 1521.570634][ T1129] bridge_slave_1: left promiscuous mode [ 1521.596006][ T3092] usb 6-1: config 0 descriptor?? [ 1521.607231][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.653874][ T1129] bridge_slave_0: left allmulticast mode [ 1521.675952][ T1129] bridge_slave_0: left promiscuous mode [ 1521.682256][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.689532][T22608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3513'. [ 1522.588138][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1522.598612][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1522.608597][ T1129] bond0 (unregistering): Released all slaves [ 1522.625295][ T1129] bond1 (unregistering): Released all slaves [ 1522.642616][ T1129] bond2 (unregistering): Released all slaves [ 1522.676203][ T1129] bond3 (unregistering): Released all slaves [ 1522.695654][ T1129] bond4 (unregistering): Released all slaves [ 1522.715907][ T1129] bond5 (unregistering): Released all slaves [ 1522.731140][ T1129] bond6 (unregistering): Released all slaves [ 1522.746460][ T1129] bond7 (unregistering): Released all slaves [ 1522.777898][ T1129] bond8 (unregistering): Released all slaves [ 1522.796285][ T1129] bond9 (unregistering): Released all slaves [ 1522.818999][ T1129] bond10 (unregistering): Released all slaves [ 1522.835548][ T1129] bond11 (unregistering): Released all slaves [ 1522.862404][ T1129] bond12 (unregistering): Released all slaves [ 1522.879867][ T1129] bond13 (unregistering): Released all slaves [ 1522.898855][ T1129] bond14 (unregistering): Released all slaves [ 1522.924987][ T1129] bond15 (unregistering): Released all slaves [ 1522.946136][ T1129] bond16 (unregistering): Released all slaves [ 1522.963450][ T1129] bond17 (unregistering): Released all slaves [ 1522.979142][ T1129] bond18 (unregistering): Released all slaves [ 1523.116480][ T1129] bond19 (unregistering): Released all slaves [ 1523.198822][ T3092] peak_usb 6-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 1523.233840][ T3092] peak_usb 6-1:0.0: unable to read PCAN-USB serial number (err -8) [ 1523.400969][ T3092] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -8 [ 1523.438806][T22545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.463608][T22545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.481620][T22545] bridge_slave_0: entered allmulticast mode [ 1523.500760][T22545] bridge_slave_0: entered promiscuous mode [ 1523.592288][ T51] Bluetooth: hci1: command tx timeout [ 1523.635819][ T3092] usb 6-1: USB disconnect, device number 19 [ 1523.745245][T22545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.762250][T22545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.783257][T22545] bridge_slave_1: entered allmulticast mode [ 1523.798563][T22545] bridge_slave_1: entered promiscuous mode [ 1524.203535][ T1129] mac80211_hwsim hwsim5 wlan0 (unregistering): left allmulticast mode [ 1524.328539][T22648] tipc: Enabling of bearer rejected, failed to enable media [ 1524.357122][T22545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.390963][T22648] syzkaller0: entered promiscuous mode [ 1524.409740][T22648] syzkaller0: entered allmulticast mode [ 1524.433697][T22545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.648270][ T1129] hsr_slave_0: left promiscuous mode [ 1524.657520][ T1129] hsr_slave_1: left promiscuous mode [ 1524.666217][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1524.677964][ T1129] hsr0: left allmulticast mode [ 1524.683005][ T1129] hsr0: left promiscuous mode [ 1524.983634][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 1525.029396][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 1525.480338][T22545] team0: Port device team_slave_0 added [ 1525.647696][T22545] team0: Port device team_slave_1 added [ 1525.671482][ T51] Bluetooth: hci1: command tx timeout [ 1525.852692][T22545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.877098][T22545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.912393][T22545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.928187][T22545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.949828][T22677] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1525.962847][T22545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.990106][T22545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1526.269710][T22545] hsr_slave_0: entered promiscuous mode [ 1526.292515][T22545] hsr_slave_1: entered promiscuous mode [ 1526.298809][T22545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1526.339295][T22545] Cannot create hsr debugfs directory [ 1526.543870][T22700] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20003 [ 1526.563754][T22700] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3541'. [ 1526.625118][ T1129] IPVS: stop unused estimator thread 0... [ 1526.945702][T22718] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3546'. [ 1527.753341][ T51] Bluetooth: hci1: command tx timeout [ 1527.817367][T22545] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1527.864665][T22545] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1527.916882][T22545] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1527.939561][T22545] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1528.207818][T22545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1528.267164][T22545] 8021q: adding VLAN 0 to HW filter on device team0 [ 1528.321805][T18590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.328992][T18590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1528.401506][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.408653][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1528.541176][T22545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1528.589582][T22545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1528.808473][T22545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1529.085064][T22808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3572'. [ 1529.157568][T22545] veth0_vlan: entered promiscuous mode [ 1529.226527][T22811] tipc: Started in network mode [ 1529.251803][T22811] tipc: Node identity 4, cluster identity 4711 [ 1529.268303][T22811] tipc: Node number set to 4 [ 1529.344620][T22545] veth1_vlan: entered promiscuous mode [ 1529.471810][T22545] veth0_macvtap: entered promiscuous mode [ 1529.524683][T22545] veth1_macvtap: entered promiscuous mode [ 1529.596288][T22545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1529.698010][T22545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1529.810891][T22545] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.834129][T22545] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.856108][T22545] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.868411][T22545] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.235587][T18590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.271212][T18590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.486226][T18590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.549034][T18590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.612523][T22862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3590'. [ 1530.687742][T22862] vlan2: entered allmulticast mode [ 1530.702367][T22866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3591'. [ 1530.742272][T22862] veth1: entered allmulticast mode [ 1530.766446][T22870] netlink: 'syz.0.3591': attribute type 10 has an invalid length. [ 1530.825910][T22871] veth0: entered promiscuous mode [ 1530.836995][T22871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3592'. [ 1530.854281][T22870] team0: Device veth1_macvtap failed to register rx_handler [ 1531.305668][T22893] vxcan1: tx address claim with different name [ 1532.332659][T22922] xt_CT: No such helper "syz0" [ 1532.499757][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1532.511079][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1532.520915][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1532.530566][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1532.539014][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1532.633039][T22940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3617'. [ 1533.111599][T22936] chnl_net:caif_netlink_parms(): no params data found [ 1533.409794][T22982] vxcan1: tx address claim with dest, not broadcast [ 1533.427438][T22978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1533.484520][T22936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.505457][T22936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.534122][T22936] bridge_slave_0: entered allmulticast mode [ 1533.562576][T22936] bridge_slave_0: entered promiscuous mode [ 1533.574222][T22936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.602905][T22936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.610120][T22936] bridge_slave_1: entered allmulticast mode [ 1533.639001][T22936] bridge_slave_1: entered promiscuous mode [ 1533.757269][T22936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1533.794162][T22936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1533.986468][T22936] team0: Port device team_slave_0 added [ 1534.101505][T22936] team0: Port device team_slave_1 added [ 1534.189679][T23005] vxcan1: tx address claim with dest, not broadcast [ 1534.219103][T22936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1534.249883][T22936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1534.401978][T22936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1534.444166][T22936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1534.475855][T22936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1534.554411][T22936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1534.632473][ T5866] Bluetooth: hci3: command tx timeout [ 1534.879834][T22936] hsr_slave_0: entered promiscuous mode [ 1534.896107][T22936] hsr_slave_1: entered promiscuous mode [ 1534.910395][T22936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1534.927423][T22936] Cannot create hsr debugfs directory [ 1535.759888][T22936] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.832793][T22499] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1535.904179][T22936] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.012876][T22499] usb 3-1: Using ep0 maxpacket: 8 [ 1536.044092][T22499] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1536.053458][T22499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.063190][T22936] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.078622][T22499] usb 3-1: config 0 descriptor?? [ 1536.226874][T22936] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.475881][T22936] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1536.496408][T22936] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1536.509761][T22936] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1536.526682][T22936] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1536.701110][T22936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1536.712354][ T5866] Bluetooth: hci3: command tx timeout [ 1536.743373][T22936] 8021q: adding VLAN 0 to HW filter on device team0 [ 1536.761708][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.768875][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1536.789186][T18585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.796348][T18585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1536.989853][T22936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1537.071844][T22936] veth0_vlan: entered promiscuous mode [ 1537.087557][T22936] veth1_vlan: entered promiscuous mode [ 1537.149463][T22936] veth0_macvtap: entered promiscuous mode [ 1537.167588][T22936] veth1_macvtap: entered promiscuous mode [ 1537.202729][T22936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1537.225539][T22936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1537.247312][T22936] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.262177][T22936] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.270887][T22936] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.301873][T22936] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.443569][T18585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.467889][T18585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.509950][T18585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.549245][T18585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.572946][T23094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3681'. [ 1537.713191][T23099] tipc: Enabling of bearer rejected, failed to enable media [ 1538.009996][T23111] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20003 [ 1538.107473][T23118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3692'. [ 1538.141062][T22499] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1538.148168][T23118] openvswitch: netlink: Flow actions attr not present in new flow. [ 1538.164908][T22499] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1538.199591][T22499] usb 3-1: USB disconnect, device number 78 [ 1538.389842][T23130] vivid-002: disconnect [ 1538.402757][T23130] vivid-002: reconnect [ 1538.659982][T23144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3705'. [ 1538.680157][T23144] openvswitch: netlink: Flow actions attr not present in new flow. [ 1538.794404][ T5866] Bluetooth: hci3: command tx timeout [ 1539.636803][ T3092] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1539.802146][ T3092] usb 3-1: Using ep0 maxpacket: 32 [ 1539.818525][ T3092] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1539.846532][ T3092] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1539.864888][ T3092] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1539.890425][ T3092] usb 3-1: Product: syz [ 1539.907064][ T3092] usb 3-1: Manufacturer: syz [ 1539.918320][ T3092] usb 3-1: SerialNumber: syz [ 1539.936840][ T3092] usb 3-1: config 0 descriptor?? [ 1539.945353][T23177] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1540.073292][T15586] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1540.354351][T22499] usb 3-1: USB disconnect, device number 79 [ 1540.631928][T15586] usb 4-1: Using ep0 maxpacket: 8 [ 1540.639209][T15586] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1540.650081][T15586] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1540.660335][T15586] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1 [ 1540.673728][T15586] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1540.710412][T15586] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1540.755355][T15586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.874584][ T5866] Bluetooth: hci3: command tx timeout [ 1541.011668][T15586] usb 4-1: GET_CAPABILITIES returned 0 [ 1541.017200][T15586] usbtmc 4-1:16.0: can't read capabilities [ 1541.204797][T18836] usb 4-1: USB disconnect, device number 53 [ 1542.051035][T23245] hub 6-0:1.0: USB hub found [ 1542.089971][T23249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3752'. [ 1542.109711][T23245] hub 6-0:1.0: 1 port detected [ 1542.118846][T23249] openvswitch: netlink: Flow actions attr not present in new flow. [ 1544.059476][T23300] loop6: detected capacity change from 0 to 524287999 [ 1544.995703][T23337] usb usb1: usbfs: process 23337 (syz.3.3790) did not claim interface 1 before use [ 1545.080315][T23339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3792'. [ 1545.140495][T23339] openvswitch: netlink: Flow actions attr not present in new flow. [ 1545.241942][T23345] input: syz0 as /devices/virtual/input/input135 [ 1545.700436][T23353] vxcan1: tx address claim with dest, not broadcast [ 1545.781342][T15586] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1545.835274][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.861324][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.964436][T15586] usb 4-1: Using ep0 maxpacket: 8 [ 1546.006628][T15586] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1546.021908][T15586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.040153][T15586] usb 4-1: Product: syz [ 1546.044998][T15586] usb 4-1: Manufacturer: syz [ 1546.049612][T15586] usb 4-1: SerialNumber: syz [ 1546.070972][T15586] usb 4-1: config 0 descriptor?? [ 1546.289852][T15586] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1546.942714][T23390] tipc: Started in network mode [ 1546.955207][T15586] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1546.977269][T23390] tipc: Node identity e29cde86baa2, cluster identity 4711 [ 1546.979744][T15586] usb 4-1: USB disconnect, device number 54 [ 1547.019155][T23390] tipc: Enabled bearer , priority 0 [ 1547.059352][T23391] syzkaller0: entered promiscuous mode [ 1547.082798][T23391] syzkaller0: entered allmulticast mode [ 1547.112980][T23390] tipc: Resetting bearer [ 1547.120891][T23389] tipc: Resetting bearer [ 1547.160622][T23389] tipc: Disabling bearer [ 1547.842835][T23399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3814'. [ 1548.914542][T23432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3836'. [ 1548.971463][T23432] openvswitch: netlink: Flow actions attr not present in new flow. [ 1549.541943][T23458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3849'. [ 1549.594782][T23460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3850'. [ 1549.625982][T23460] openvswitch: netlink: Flow actions attr not present in new flow. [ 1549.860330][T23466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3853'. [ 1550.431336][T22499] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1550.683942][T22499] usb 6-1: Using ep0 maxpacket: 8 [ 1550.764080][T22499] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1550.778385][T22499] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1550.789734][T22499] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1550.856107][T22499] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1550.921478][T23501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3869'. [ 1550.938886][T22499] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1550.967176][T22499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.130980][T23509] tipc: Started in network mode [ 1551.136177][T23509] tipc: Node identity 96b38cb83f24, cluster identity 4711 [ 1551.145209][T23509] tipc: Enabled bearer , priority 0 [ 1551.153452][T23509] syzkaller0: entered promiscuous mode [ 1551.161539][T23509] syzkaller0: entered allmulticast mode [ 1551.184644][T23509] tipc: Resetting bearer [ 1551.196485][T23508] tipc: Resetting bearer [ 1551.209572][T22499] usb 6-1: GET_CAPABILITIES returned 0 [ 1551.241442][T22499] usbtmc 6-1:16.0: can't read capabilities [ 1551.273711][T23508] tipc: Disabling bearer [ 1551.408219][T22499] usb 6-1: USB disconnect, device number 20 [ 1551.779736][T23533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3883'. [ 1552.216766][T23545] tipc: Started in network mode [ 1552.228713][T23545] tipc: Node identity a28353772aa8, cluster identity 4711 [ 1552.242203][T23545] tipc: Enabled bearer , priority 0 [ 1552.252271][T23545] syzkaller0: entered promiscuous mode [ 1552.257770][T23545] syzkaller0: entered allmulticast mode [ 1552.308228][T23545] tipc: Resetting bearer [ 1552.423087][T23544] tipc: Resetting bearer [ 1552.484861][T23544] tipc: Disabling bearer [ 1553.466908][T23579] xt_CT: No such helper "syz0" [ 1553.917483][T23604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3916'. [ 1554.428193][T23619] xt_CT: No such helper "syz0" [ 1554.582598][T22499] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1554.799401][T22499] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.842786][T22499] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1554.855049][T22499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.883993][T22499] usb 3-1: config 0 descriptor?? [ 1554.939588][T22499] pwc: Askey VC010 type 2 USB webcam detected. [ 1555.101923][T23631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3928'. [ 1555.384426][T22499] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1555.396221][T22499] pwc: recv_control_msg error -32 req 02 val 2700 [ 1555.441086][T22499] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1555.450182][T22499] pwc: recv_control_msg error -32 req 04 val 1000 [ 1555.460440][T23643] xt_CT: No such helper "syz0" [ 1555.463438][T22499] pwc: recv_control_msg error -32 req 04 val 1300 [ 1555.499934][T22499] pwc: recv_control_msg error -32 req 04 val 1400 [ 1555.512655][T22499] pwc: recv_control_msg error -71 req 02 val 2000 [ 1555.530234][T22499] pwc: recv_control_msg error -71 req 02 val 2100 [ 1555.552321][T22499] pwc: recv_control_msg error -71 req 04 val 1500 [ 1555.572778][T22499] pwc: recv_control_msg error -71 req 02 val 2500 [ 1555.579647][T22499] pwc: recv_control_msg error -71 req 02 val 2400 [ 1555.609705][T22499] pwc: recv_control_msg error -71 req 02 val 2600 [ 1555.646311][T22499] pwc: recv_control_msg error -71 req 02 val 2900 [ 1555.667219][T22499] pwc: recv_control_msg error -71 req 02 val 2800 [ 1555.682940][T22499] pwc: recv_control_msg error -71 req 04 val 1100 [ 1555.697039][T22499] pwc: recv_control_msg error -71 req 04 val 1200 [ 1555.746302][T22499] pwc: Registered as video103. [ 1555.824322][T22499] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input136 [ 1555.907519][T22499] usb 3-1: USB disconnect, device number 80 [ 1556.666503][T23675] vxcan1: tx address claim with different name [ 1556.983619][T23682] xt_CT: No such helper "syz0" [ 1557.398661][T23698] tipc: Enabled bearer , priority 0 [ 1557.427776][T23698] syzkaller0: entered promiscuous mode [ 1557.474115][T23698] syzkaller0: entered allmulticast mode [ 1557.589135][T23697] tipc: Resetting bearer [ 1557.758000][T23697] tipc: Disabling bearer [ 1559.382693][T23781] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3980'. [ 1559.462509][T18836] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1559.642297][T18836] usb 2-1: Using ep0 maxpacket: 8 [ 1559.675318][T18836] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1559.712613][T18836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.731216][T18836] usb 2-1: Product: syz [ 1559.751184][T18836] usb 2-1: Manufacturer: syz [ 1559.766808][T18836] usb 2-1: SerialNumber: syz [ 1559.793164][T18836] usb 2-1: config 0 descriptor?? [ 1560.018401][T18836] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1560.508393][T18836] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1560.534791][T18836] usb 2-1: USB disconnect, device number 67 [ 1561.139443][T23807] xt_nfacct: accounting object `syz1' does not exists [ 1561.252637][T18836] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1561.414838][T18836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1561.430955][T18836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1561.454662][T18836] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1561.480479][T18836] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1561.481468][T23822] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4014'. [ 1561.516712][T18836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.539563][T18836] usb 6-1: config 0 descriptor?? [ 1562.053657][T18836] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1562.439539][T23844] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4023'. [ 1562.469718][T23844] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4023'. [ 1562.601084][ C1] plantronics 0003:047F:FFFF.0016: hid_field_extract() called with n (132) > 32! (syz.5.4006) [ 1562.816398][T22499] usb 6-1: USB disconnect, device number 21 [ 1563.083719][T23875] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4038'. [ 1563.099334][T23875] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4038'. [ 1563.653987][T23899] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4048'. [ 1563.713022][T23865] ALSA: mixer_oss: invalid OSS volume '' [ 1564.302683][T23922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4059'. [ 1564.752380][T23934] vxcan1: tx address claim with dest, not broadcast [ 1565.318558][T23954] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4073'. [ 1565.499853][T23961] tipc: Enabling of bearer rejected, media not registered [ 1566.286458][T15586] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1566.556454][T15586] usb 3-1: Using ep0 maxpacket: 8 [ 1566.570595][T15586] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1566.583466][T15586] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.609859][T15586] usb 3-1: Product: syz [ 1566.619354][T15586] usb 3-1: Manufacturer: syz [ 1566.649790][T15586] usb 3-1: SerialNumber: syz [ 1566.811076][T15586] usb 3-1: config 0 descriptor?? [ 1567.067744][T15586] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1567.205406][T24000] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4095'. [ 1567.236032][T24000] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4095'. [ 1567.307783][T15586] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1567.363242][T15586] usb 3-1: USB disconnect, device number 81 [ 1567.839356][T24026] pimreg3: entered allmulticast mode [ 1568.245054][T24026] nvme_fabrics: missing parameter 'transport=%s' [ 1568.262776][T24026] nvme_fabrics: missing parameter 'nqn=%s' [ 1568.297279][T24031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4105'. [ 1569.022417][T24048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4113'. [ 1569.092124][T24048] openvswitch: netlink: Flow actions attr not present in new flow. [ 1569.763314][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1569.922913][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1569.936680][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1569.955530][ T9] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1569.971331][ T9] usb 6-1: string descriptor 0 read error: -22 [ 1569.983067][ T9] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1570.003680][ T9] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1570.057933][ T9] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1570.090569][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1570.117936][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1570.136497][ T9] usb 6-1: media controller created [ 1570.200984][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1570.591941][ T5854] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1570.754567][ T5854] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.777900][ T5854] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1570.807823][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.812668][T24100] dvmrp8: entered allmulticast mode [ 1570.835146][ T5854] usb 4-1: config 0 descriptor?? [ 1570.850649][ T5854] pwc: Askey VC010 type 2 USB webcam detected. [ 1571.274351][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 1571.288314][ T5854] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1571.386765][ T5854] pwc: recv_control_msg error -32 req 02 val 2700 [ 1571.474086][ T9] usb 6-1: USB disconnect, device number 22 [ 1571.639240][ T5854] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1571.662370][ T5854] pwc: recv_control_msg error -32 req 04 val 1000 [ 1571.682466][ T5854] pwc: recv_control_msg error -32 req 04 val 1300 [ 1571.890442][ T5854] pwc: recv_control_msg error -71 req 02 val 2000 [ 1571.907739][ T5854] pwc: recv_control_msg error -71 req 02 val 2100 [ 1571.928305][ T5854] pwc: recv_control_msg error -71 req 04 val 1500 [ 1571.957231][ T5854] pwc: recv_control_msg error -71 req 02 val 2500 [ 1571.976886][ T5854] pwc: recv_control_msg error -71 req 02 val 2400 [ 1571.985300][ T5854] pwc: recv_control_msg error -71 req 02 val 2600 [ 1572.008109][ T5854] pwc: recv_control_msg error -71 req 02 val 2900 [ 1572.022412][ T5854] pwc: recv_control_msg error -71 req 02 val 2800 [ 1572.055448][T24120] netlink: 'syz.2.4144': attribute type 1 has an invalid length. [ 1572.068633][ T5854] pwc: recv_control_msg error -71 req 04 val 1100 [ 1572.122278][ T5854] pwc: recv_control_msg error -71 req 04 val 1200 [ 1572.133095][ T5854] pwc: Registered as video103. [ 1572.173733][ T5854] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input137 [ 1572.254182][ T5854] usb 4-1: USB disconnect, device number 55 [ 1572.911843][ T5854] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1573.154633][ T5854] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.175271][ T5854] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1573.392702][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.442943][ T5854] usb 4-1: config 0 descriptor?? [ 1573.513867][ T5854] pwc: Askey VC010 type 2 USB webcam detected. [ 1573.637070][T24155] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4159'. [ 1573.732395][T22499] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1573.864710][ T5854] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1573.892700][ T5854] pwc: recv_control_msg error -32 req 02 val 2700 [ 1573.899943][ T5854] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1573.912810][T22499] usb 1-1: Using ep0 maxpacket: 32 [ 1573.919963][T22499] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.943005][ T5854] pwc: recv_control_msg error -32 req 04 val 1000 [ 1573.950041][T22499] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1573.953265][ T5854] pwc: recv_control_msg error -32 req 04 val 1300 [ 1573.976431][ T5854] pwc: recv_control_msg error -32 req 04 val 1400 [ 1573.985562][ T5854] pwc: recv_control_msg error -32 req 02 val 2000 [ 1573.990866][T22499] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1574.006661][ T5854] pwc: recv_control_msg error -71 req 02 val 2100 [ 1574.014554][T22499] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.034104][ T5854] pwc: recv_control_msg error -71 req 04 val 1500 [ 1574.040656][T22499] usb 1-1: Product: syz [ 1574.066539][ T5854] pwc: recv_control_msg error -71 req 02 val 2500 [ 1574.071338][T22499] usb 1-1: Manufacturer: syz [ 1574.084706][ T5854] pwc: recv_control_msg error -71 req 02 val 2400 [ 1574.117493][T22499] usb 1-1: SerialNumber: syz [ 1574.134813][ T5854] pwc: recv_control_msg error -71 req 02 val 2600 [ 1574.158512][ T5854] pwc: recv_control_msg error -71 req 02 val 2900 [ 1574.197617][ T5854] pwc: recv_control_msg error -71 req 02 val 2800 [ 1574.205226][ T5854] pwc: recv_control_msg error -71 req 04 val 1100 [ 1574.224082][ T5854] pwc: recv_control_msg error -71 req 04 val 1200 [ 1574.252623][ T5854] pwc: Registered as video103. [ 1574.273355][ T5854] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input138 [ 1574.342314][T24153] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1574.352173][ T5854] usb 4-1: USB disconnect, device number 56 [ 1574.622173][T15309] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1574.802561][T15309] usb 2-1: Using ep0 maxpacket: 8 [ 1574.815597][T15309] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1574.835676][T15309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.848450][T24180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1574.860781][T15309] usb 2-1: Product: syz [ 1574.866159][T15309] usb 2-1: Manufacturer: syz [ 1574.872425][T15309] usb 2-1: SerialNumber: syz [ 1574.892967][T15309] usb 2-1: config 0 descriptor?? [ 1574.914161][T24180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1574.983971][T24153] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1574.998954][T24187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1575.108139][T15309] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1575.197049][T22499] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1575.215745][T22499] cdc_ncm 1-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 1575.233628][T22499] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1575.338089][T15309] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1575.377583][T15309] usb 2-1: USB disconnect, device number 68 [ 1575.406067][T22499] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1575.427253][T22499] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1575.485860][T22499] usb 1-1: USB disconnect, device number 42 [ 1575.508341][T24197] loop6: detected capacity change from 0 to 524287999 [ 1575.515832][T22499] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 1576.092400][T24206] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4182'. [ 1576.140138][T24206] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4182'. [ 1576.312380][T15309] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1576.503250][T15309] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1576.526717][T15309] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1576.580743][T15309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.623341][T15309] usb 2-1: config 0 descriptor?? [ 1576.652655][T22499] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1576.654568][T15309] pwc: Askey VC010 type 2 USB webcam detected. [ 1576.802694][T22499] usb 1-1: Using ep0 maxpacket: 32 [ 1576.835046][T22499] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1576.862710][T22499] usb 1-1: config 0 has no interface number 0 [ 1576.875200][T22499] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1576.895910][T22499] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.921857][T22499] usb 1-1: Product: syz [ 1576.936224][T22499] usb 1-1: Manufacturer: syz [ 1576.962687][T22499] usb 1-1: SerialNumber: syz [ 1576.988197][T22499] usb 1-1: config 0 descriptor?? [ 1577.017875][T22499] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1577.039924][T15309] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1577.065525][T15309] pwc: recv_control_msg error -32 req 02 val 2700 [ 1577.088922][T15309] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1577.102534][T15309] pwc: recv_control_msg error -32 req 04 val 1000 [ 1577.109784][T15309] pwc: recv_control_msg error -32 req 04 val 1300 [ 1577.118713][T15309] pwc: recv_control_msg error -32 req 04 val 1400 [ 1577.130860][T15309] pwc: recv_control_msg error -32 req 02 val 2000 [ 1577.152315][T15309] pwc: recv_control_msg error -71 req 02 val 2100 [ 1577.162365][T15309] pwc: recv_control_msg error -71 req 04 val 1500 [ 1577.193243][T15309] pwc: recv_control_msg error -71 req 02 val 2500 [ 1577.200080][T15309] pwc: recv_control_msg error -71 req 02 val 2400 [ 1577.212612][T15309] pwc: recv_control_msg error -71 req 02 val 2600 [ 1577.228422][T15309] pwc: recv_control_msg error -71 req 02 val 2900 [ 1577.246819][T22499] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1577.248865][T15309] pwc: recv_control_msg error -71 req 02 val 2800 [ 1577.283485][T15309] pwc: recv_control_msg error -71 req 04 val 1100 [ 1577.292759][T15309] pwc: recv_control_msg error -71 req 04 val 1200 [ 1577.303419][T22499] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1577.315818][T15309] pwc: Registered as video103. [ 1577.362434][T15309] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input139 [ 1577.477663][T15309] usb 2-1: USB disconnect, device number 69 [ 1577.697660][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1577.698152][T18836] usb 1-1: USB disconnect, device number 43 [ 1577.768610][T18836] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1577.800233][T18836] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1577.828309][T18836] quatech2 1-1:0.51: device disconnected [ 1577.888552][T24236] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4195'. [ 1577.934987][T24238] tipc: Enabled bearer , priority 0 [ 1577.976853][T24238] tipc: Resetting bearer [ 1578.008133][T24237] tipc: Disabling bearer [ 1578.194555][T22499] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1578.362954][T22499] usb 3-1: Using ep0 maxpacket: 8 [ 1578.376472][T22499] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1578.388657][T24252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4203'. [ 1578.403004][T22499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.418860][T22499] usb 3-1: Product: syz [ 1578.419201][T24252] openvswitch: netlink: Flow actions attr not present in new flow. [ 1578.441950][T22499] usb 3-1: Manufacturer: syz [ 1578.446571][T22499] usb 3-1: SerialNumber: syz [ 1578.485607][T22499] usb 3-1: config 0 descriptor?? [ 1578.704416][T22499] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1578.714988][T24256] xt_CT: No such helper "syz0" [ 1578.932153][T22499] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1578.970810][T22499] usb 3-1: USB disconnect, device number 82 [ 1579.819961][T24291] xt_CT: No such helper "syz0" [ 1580.142248][T18836] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1580.162729][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1580.322964][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1580.335043][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1580.353286][T18836] usb 2-1: Using ep0 maxpacket: 32 [ 1580.357602][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.393565][T18836] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1580.405756][T18836] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1580.432663][T18836] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1580.458113][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1580.477184][ T9] pvrusb2: ********** [ 1580.486962][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1580.515946][ T9] pvrusb2: Important functionality might not be entirely working. [ 1580.551266][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1580.592635][ T9] pvrusb2: ********** [ 1580.635130][ T2341] pvrusb2: Invalid write control endpoint [ 1580.732245][T18836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.740269][T18836] usb 2-1: Product: syz [ 1580.781746][T18836] usb 2-1: Manufacturer: syz [ 1580.796562][T18836] usb 2-1: SerialNumber: syz [ 1580.829351][T24303] pvrusb2: Invalid write control endpoint [ 1580.857668][ T2341] pvrusb2: Invalid write control endpoint [ 1580.867354][T22499] usb 1-1: USB disconnect, device number 44 [ 1580.982498][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1581.022219][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1581.050074][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1581.052090][T24301] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1581.067893][ T2341] pvrusb2: Device being rendered inoperable [ 1581.110899][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1581.125712][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1581.154093][ T2341] pvrusb2: Attached sub-driver cx25840 [ 1581.169954][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1581.192116][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1581.700804][T18585] bridge_slave_1: left allmulticast mode [ 1581.713299][T18585] bridge_slave_1: left promiscuous mode [ 1581.715941][T24301] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1581.719053][T18585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.739306][T18585] bridge_slave_0: left allmulticast mode [ 1581.746599][T18585] bridge_slave_0: left promiscuous mode [ 1581.753304][T18585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.792897][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1581.799986][T24328] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4233'. [ 1581.818106][T24328] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4233'. [ 1581.901698][T18585] bond14 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1581.913158][T18585] bond14 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1581.942573][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1581.949292][T18836] cdc_ncm 2-1:1.0: failed to get mac address [ 1581.966257][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1581.983194][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.984095][T18836] cdc_ncm 2-1:1.0: bind() failure [ 1582.008271][ T9] usb 4-1: Product: syz [ 1582.027552][T18836] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1582.031269][ T9] usb 4-1: Manufacturer: syz [ 1582.053355][T18836] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1582.056792][ T9] usb 4-1: SerialNumber: syz [ 1582.086824][T18836] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1582.092498][ T9] usb 4-1: config 0 descriptor?? [ 1582.137964][T18836] usb 2-1: USB disconnect, device number 70 [ 1582.327614][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1582.573559][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1582.657680][ T9] usb 4-1: USB disconnect, device number 57 [ 1582.862535][T18585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1582.887840][T18585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1582.905627][T18585] bond0 (unregistering): Released all slaves [ 1582.926469][T18585] bond1 (unregistering): Released all slaves [ 1582.947286][T18585] bond2 (unregistering): Released all slaves [ 1582.977570][T18585] bond3 (unregistering): Released all slaves [ 1582.999344][T18585] bond4 (unregistering): Released all slaves [ 1583.026179][T18585] bond5 (unregistering): Released all slaves [ 1583.059857][T18585] bond6 (unregistering): Released all slaves [ 1583.087783][T18585] bond7 (unregistering): Released all slaves [ 1583.109981][T18585] bond8 (unregistering): Released all slaves [ 1583.135375][T18585] bond9 (unregistering): Released all slaves [ 1583.165097][T18585] bond10 (unregistering): Released all slaves [ 1583.208347][T18585] bond11 (unregistering): Released all slaves [ 1583.255405][T18585] bond12 (unregistering): Released all slaves [ 1583.296493][T18585] bond13 (unregistering): Released all slaves [ 1583.563645][T18585] bond14 (unregistering): Released all slaves [ 1583.864805][T18585] : left promiscuous mode [ 1584.651763][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 1585.147183][T24364] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4244'. [ 1585.192804][T24364] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4244'. [ 1585.382105][T24368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4247'. [ 1585.404347][T24370] loop6: detected capacity change from 0 to 524287999 [ 1585.412467][T15586] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1585.594998][T15586] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1585.632688][T15586] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.656070][T15586] usb 6-1: Product: syz [ 1585.681184][T15586] usb 6-1: Manufacturer: syz [ 1585.808337][T15586] usb 6-1: SerialNumber: syz [ 1585.827941][T15586] usb 6-1: config 0 descriptor?? [ 1586.045038][T15586] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1586.889534][T18585] hsr_slave_0: left promiscuous mode [ 1586.989904][T18585] hsr_slave_1: left promiscuous mode [ 1587.027583][T18585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1587.110809][T18585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1587.148902][T18585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1587.196831][T18585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1587.246201][T18585] veth1_macvtap: left promiscuous mode [ 1587.271577][T18585] veth0_macvtap: left promiscuous mode [ 1587.277243][T18585] veth1_vlan: left promiscuous mode [ 1587.298110][T18585] veth0_vlan: left promiscuous mode [ 1587.584828][T18585] pim6reg9 (unregistering): left allmulticast mode [ 1587.635445][T15586] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1587.673655][T15586] usb 6-1: USB disconnect, device number 23 [ 1588.303450][T18585] team0 (unregistering): Port device team_slave_1 removed [ 1588.363397][T18585] team0 (unregistering): Port device team_slave_0 removed [ 1588.554307][T15309] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1588.715939][T15309] usb 6-1: Using ep0 maxpacket: 16 [ 1588.734575][T15309] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1588.749351][T15309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.763512][T15309] usb 6-1: Product: syz [ 1588.775435][T15309] usb 6-1: Manufacturer: syz [ 1588.780050][T15309] usb 6-1: SerialNumber: syz [ 1588.797372][T15309] usb 6-1: config 0 descriptor?? [ 1588.871920][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1589.245752][T15309] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1589.266876][T15309] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1589.305287][T15309] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1589.314928][T15309] usb 6-1: media controller created [ 1589.357261][T15309] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1589.364167][T18585] IPVS: stop unused estimator thread 0... [ 1589.951942][T15309] zl10353_read_register: readreg error (reg=127, ret==0) [ 1589.959081][T24398] dtv5100: wlen = 0, aborting. [ 1589.978117][T15309] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1589.988163][T24415] ------------[ cut here ]------------ [ 1589.995039][T24415] usb 6-1: BOGUS control dir, pipe 80001880 doesn't match bRequestType c0 [ 1590.039773][T15309] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1590.055838][T24422] vxcan1: tx address claim with dlc 0 [ 1590.065041][T24415] WARNING: CPU: 1 PID: 24415 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 1590.075458][T24415] Modules linked in: [ 1590.079673][T24415] CPU: 1 UID: 0 PID: 24415 Comm: syz.0.4262 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1590.092257][T24415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1590.102844][T24415] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 1590.108493][T24415] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 20 30 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 44 34 64 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 1590.128453][T24415] RSP: 0018:ffffc9001b5175f0 EFLAGS: 00010246 [ 1590.134910][T24415] RAX: b6b84113b7b1d000 RBX: ffff888028bf0400 RCX: 0000000000080000 [ 1590.143158][T24415] RDX: ffffc90021e01000 RSI: 0000000000004cb3 RDI: 0000000000004cb4 [ 1590.151117][T24415] RBP: 1ffff11006a13530 R08: 0000000000000003 R09: 0000000000000004 [ 1590.159392][T24415] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff88803509a980 [ 1590.167635][T24415] R13: dffffc0000000000 R14: 0000000080001880 R15: ffff8880297aa060 [ 1590.175845][T24415] FS: 00007faeb1df66c0(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 1590.185019][T24415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1590.192115][T24415] CR2: 0000001b2cf1eff8 CR3: 000000002917c000 CR4: 00000000003526f0 [ 1590.200095][T24415] Call Trace: [ 1590.203611][T24415] [ 1590.206536][T24415] usb_start_wait_urb+0x114/0x4c0 [ 1590.211697][T24415] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1590.217261][T24415] usb_control_msg+0x232/0x3e0 [ 1590.222080][T24415] dtv5100_i2c_msg+0x250/0x330 [ 1590.226904][T24415] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 1590.231962][T24415] __i2c_transfer+0x874/0x2170 [ 1590.236833][T24415] ? i2c_transfer+0x11d/0x3a0 [ 1590.242050][T24415] ? __pfx___i2c_transfer+0x10/0x10 [ 1590.247269][T24415] ? rt_mutex_lock_nested+0x172/0x1e0 [ 1590.253180][T24415] ? i2c_transfer+0x11d/0x3a0 [ 1590.257881][T24415] i2c_transfer+0x25b/0x3a0 [ 1590.262906][T24415] ? __pfx_i2c_transfer+0x10/0x10 [ 1590.267954][T24415] ? __might_fault+0xb0/0x130 [ 1590.273158][T24415] i2c_transfer_buffer_flags+0x105/0x190 [ 1590.278820][T24415] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1590.285556][T24415] ? _copy_from_user+0x94/0xb0 [ 1590.290377][T24415] i2cdev_write+0x112/0x1b0 [ 1590.295415][T24415] vfs_writev+0x4b6/0x960 [ 1590.299783][T24415] ? __pfx_i2cdev_write+0x10/0x10 [ 1590.305345][T24415] ? __pfx_vfs_writev+0x10/0x10 [ 1590.310278][T24415] ? __fget_files+0x2a/0x420 [ 1590.315441][T24415] ? __fget_files+0x3a0/0x420 [ 1590.320149][T24415] ? __fget_files+0x2a/0x420 [ 1590.324845][T24415] do_writev+0x14d/0x2d0 [ 1590.329119][T24415] ? __pfx_do_writev+0x10/0x10 [ 1590.334996][T24415] ? rcu_is_watching+0x15/0xb0 [ 1590.339813][T24415] ? do_syscall_64+0xbe/0x3b0 [ 1590.345035][T24415] do_syscall_64+0xfa/0x3b0 [ 1590.349566][T24415] ? lockdep_hardirqs_on+0x9c/0x150 [ 1590.355282][T24415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.361884][T24415] ? clear_bhb_loop+0x60/0xb0 [ 1590.366595][T24415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.372760][T24415] RIP: 0033:0x7faeb3f8e9a9 [ 1590.377171][T24415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1590.397067][T24415] RSP: 002b:00007faeb1df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1590.405730][T24415] RAX: ffffffffffffffda RBX: 00007faeb41b5fa0 RCX: 00007faeb3f8e9a9 [ 1590.413952][T24415] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1590.422426][T24415] RBP: 00007faeb4010d69 R08: 0000000000000000 R09: 0000000000000000 [ 1590.430401][T24415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.438736][T24415] R13: 0000000000000000 R14: 00007faeb41b5fa0 R15: 00007faeb42dfa28 [ 1590.446975][T24415] [ 1590.449990][T24415] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1590.457253][T24415] CPU: 1 UID: 0 PID: 24415 Comm: syz.0.4262 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1590.469291][T24415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1590.479326][T24415] Call Trace: [ 1590.482590][T24415] [ 1590.485506][T24415] dump_stack_lvl+0x99/0x250 [ 1590.490105][T24415] ? __asan_memcpy+0x40/0x70 [ 1590.494678][T24415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1590.499879][T24415] ? __pfx__printk+0x10/0x10 [ 1590.504464][T24415] panic+0x2db/0x790 [ 1590.508354][T24415] ? __pfx_panic+0x10/0x10 [ 1590.512767][T24415] __warn+0x31b/0x4b0 [ 1590.516730][T24415] ? usb_submit_urb+0x115d/0x1890 [ 1590.521737][T24415] ? usb_submit_urb+0x115d/0x1890 [ 1590.526745][T24415] report_bug+0x2be/0x4f0 [ 1590.531119][T24415] ? usb_submit_urb+0x115d/0x1890 [ 1590.536140][T24415] ? usb_submit_urb+0x115d/0x1890 [ 1590.541175][T24415] ? usb_submit_urb+0x115f/0x1890 [ 1590.546187][T24415] handle_bug+0x84/0x160 [ 1590.550416][T24415] exc_invalid_op+0x1a/0x50 [ 1590.554905][T24415] asm_exc_invalid_op+0x1a/0x20 [ 1590.559737][T24415] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 1590.565353][T24415] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 20 30 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 44 34 64 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 1590.584942][T24415] RSP: 0018:ffffc9001b5175f0 EFLAGS: 00010246 [ 1590.590992][T24415] RAX: b6b84113b7b1d000 RBX: ffff888028bf0400 RCX: 0000000000080000 [ 1590.598946][T24415] RDX: ffffc90021e01000 RSI: 0000000000004cb3 RDI: 0000000000004cb4 [ 1590.606902][T24415] RBP: 1ffff11006a13530 R08: 0000000000000003 R09: 0000000000000004 [ 1590.614855][T24415] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff88803509a980 [ 1590.622809][T24415] R13: dffffc0000000000 R14: 0000000080001880 R15: ffff8880297aa060 [ 1590.630783][T24415] usb_start_wait_urb+0x114/0x4c0 [ 1590.635795][T24415] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1590.641341][T24415] usb_control_msg+0x232/0x3e0 [ 1590.646103][T24415] dtv5100_i2c_msg+0x250/0x330 [ 1590.650869][T24415] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 1590.655739][T24415] __i2c_transfer+0x874/0x2170 [ 1590.660502][T24415] ? i2c_transfer+0x11d/0x3a0 [ 1590.665177][T24415] ? __pfx___i2c_transfer+0x10/0x10 [ 1590.670371][T24415] ? rt_mutex_lock_nested+0x172/0x1e0 [ 1590.675739][T24415] ? i2c_transfer+0x11d/0x3a0 [ 1590.680409][T24415] i2c_transfer+0x25b/0x3a0 [ 1590.684905][T24415] ? __pfx_i2c_transfer+0x10/0x10 [ 1590.689918][T24415] ? __might_fault+0xb0/0x130 [ 1590.694598][T24415] i2c_transfer_buffer_flags+0x105/0x190 [ 1590.700226][T24415] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1590.706377][T24415] ? _copy_from_user+0x94/0xb0 [ 1590.711144][T24415] i2cdev_write+0x112/0x1b0 [ 1590.715640][T24415] vfs_writev+0x4b6/0x960 [ 1590.719964][T24415] ? __pfx_i2cdev_write+0x10/0x10 [ 1590.724980][T24415] ? __pfx_vfs_writev+0x10/0x10 [ 1590.729832][T24415] ? __fget_files+0x2a/0x420 [ 1590.734414][T24415] ? __fget_files+0x3a0/0x420 [ 1590.739077][T24415] ? __fget_files+0x2a/0x420 [ 1590.743665][T24415] do_writev+0x14d/0x2d0 [ 1590.747903][T24415] ? __pfx_do_writev+0x10/0x10 [ 1590.752655][T24415] ? rcu_is_watching+0x15/0xb0 [ 1590.757418][T24415] ? do_syscall_64+0xbe/0x3b0 [ 1590.762101][T24415] do_syscall_64+0xfa/0x3b0 [ 1590.766606][T24415] ? lockdep_hardirqs_on+0x9c/0x150 [ 1590.771798][T24415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.777854][T24415] ? clear_bhb_loop+0x60/0xb0 [ 1590.782524][T24415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.788406][T24415] RIP: 0033:0x7faeb3f8e9a9 [ 1590.792815][T24415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1590.812415][T24415] RSP: 002b:00007faeb1df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1590.820824][T24415] RAX: ffffffffffffffda RBX: 00007faeb41b5fa0 RCX: 00007faeb3f8e9a9 [ 1590.828785][T24415] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1590.836744][T24415] RBP: 00007faeb4010d69 R08: 0000000000000000 R09: 0000000000000000 [ 1590.844707][T24415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.852669][T24415] R13: 0000000000000000 R14: 00007faeb41b5fa0 R15: 00007faeb42dfa28 [ 1590.860646][T24415] [ 1590.863894][T24415] Kernel Offset: disabled [ 1590.868211][T24415] Rebooting in 86400 seconds..