last executing test programs: 20.780030504s ago: executing program 4 (id=877): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffff8000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f0000000740)={0x2, @pix={0x1, 0x5, 0x33424752, 0x7, 0xf3, 0x3, 0x5, 0x40, 0x1, 0x2, 0x2}}) 16.982166947s ago: executing program 4 (id=884): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') 15.499432021s ago: executing program 3 (id=890): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) close(r6) 14.215742698s ago: executing program 4 (id=896): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffff8000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f0000000740)={0x2, @pix={0x1, 0x5, 0x33424752, 0x7, 0xf3, 0x3, 0x5, 0x40, 0x1, 0x2, 0x2}}) 14.056418306s ago: executing program 3 (id=897): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) ptrace$peek(0x19, 0x0, 0xfffffffffffffffe) ioprio_set$pid(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x2, 0x10, 0x0, 0x0, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @private1, 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e24, 0x9, @loopback, 0x82}}]}, 0x80}, 0x1, 0x400000000000000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) r6 = dup2(r2, r2) socket(0x2b, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000001380), 0x2, 0x501) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000000280)) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 11.029178042s ago: executing program 4 (id=901): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0d, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0x42400) 10.955193608s ago: executing program 5 (id=902): prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) io_setup(0x2, 0x0) syz_clone3(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[0x0]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) setresuid(0x0, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 10.021120635s ago: executing program 5 (id=903): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/160, 0xa0}], 0x1, 0x1a, 0x7) 9.790892514s ago: executing program 2 (id=904): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000800000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x5e) 9.56015778s ago: executing program 2 (id=906): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x8, 0x4, 0x0, 0x3e, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@timestamp={0x44, 0xc, 0x67, 0x0, 0x0, [0x4, 0x3]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @eol, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4e) 8.9935102s ago: executing program 3 (id=909): close(0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000500)="926f130a672102cdcc6801f377e465b07c721359fff10d20d20ae16e81a6e0eea1be99f1c5a32dbc41c89a65b3e44f2ba14a771e7c9194e6b4b083b3cef3d29e72669e45fc8a0d6d26ff8f1705d7469ae21af48d6956de5bd0785a8256739e6a05525920a411c43df764f67d50ee34f69108c52e397fdb90c914c7ca04e3cabf5f3cd2fe03fc75e637b9fff653f07091dcbe1c8a169777e1caff9703f450fcf74d11ab703256539815b266f699c56cd8dc2d0db18d011559f460af78ffc262a97a3f3e3c5e105382366fbc5af6fbda7e05c5dbf2790480c0ff8d489a86885778889f1a8ff4", 0xe5}, {0x0}, {&(0x7f0000000600)="9d6eb9845c2dc1c3ce3cd9322dd401d68e4e0248e1d8b96ee37ea84a461dc59769a3782808b21fc44e65c37a7f6f15741bdbd67ac95e7824a76fbe2bfc9ba4e12185b62413593ec52c3aae8b6de867ce16d836b327b2598bad874cdeb73ab8da805a90cafe1f8d9f8b435de4bf4fb78114ac7e365bb2c22b8c4373f42b87d15ab64b51fe726c6099571263acacd0a6f60f5cc3068a7e5cb81129ac30c9e63d", 0x9f}], 0x3, 0x60a, 0xfffffffe) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000000010002", 0x7) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x2, 0x0) dup3(r3, r2, 0x0) finit_module(r3, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) 8.788225944s ago: executing program 2 (id=910): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) open(0x0, 0x80ff, 0x88) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 7.829276815s ago: executing program 3 (id=912): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x80, 0xc0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) listen(0xffffffffffffffff, 0xfff) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 7.708128933s ago: executing program 4 (id=913): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x482, 0x4) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0xe39b}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181243, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0xfffffffffffffd05, &(0x7f0000000080)={&(0x7f0000000200)={0xe4, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0xca, 0x1, 0x0, 0x1, [@typed={0x0, 0x5a, 0x0, 0x0, @str='%+\'\')\x00'}]}, @typed={0xfd73, 0x88, 0x0, 0x0, @pid}]}, 0xe4}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 7.255461015s ago: executing program 2 (id=914): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffff8000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f0000000740)={0x2, @pix={0x1, 0x5, 0x33424752, 0x7, 0xf3, 0x3, 0x5, 0x40, 0x1, 0x2, 0x2}}) 7.031317588s ago: executing program 1 (id=915): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000280)=@usbdevfs_driver={0x0, 0xfffffffa, &(0x7f0000000240)}) 6.800488377s ago: executing program 5 (id=916): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4811}, 0x2008c014) 6.531599074s ago: executing program 1 (id=917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x107734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000006) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) close(0x4) 6.068953222s ago: executing program 0 (id=918): r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xaf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', 0x0}) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) readv(r5, &(0x7f0000000240)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000200)={0x2}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0}, 0x90) 5.472117898s ago: executing program 1 (id=919): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffff8000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f0000000740)={0x2, @pix={0x1, 0x5, 0x33424752, 0x7, 0xf3, 0x3, 0x5, 0x40, 0x1, 0x2, 0x2}}) 4.211105019s ago: executing program 3 (id=920): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010d80402f00000000000010902"], 0x0) syz_open_dev$evdev(0x0, 0x1, 0x20900) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = syz_open_dev$sndpcmc(&(0x7f0000005280), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r2, 0x5a00, 0xbc03, 0x6, 0x0, 0x0) 3.907666537s ago: executing program 2 (id=921): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) ptrace$peek(0x19, 0x0, 0xfffffffffffffffe) ioprio_set$pid(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x2, 0x10, 0x0, 0x0, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @private1, 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e24, 0x9, @loopback, 0x82}}]}, 0x80}, 0x1, 0x400000000000000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) r6 = dup2(r2, r2) socket(0x2b, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000001380), 0x2, 0x501) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000000280)) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 3.680003133s ago: executing program 0 (id=922): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x8, 0x4, 0x0, 0x3e, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@timestamp={0x44, 0xc, 0x67, 0x0, 0x0, [0x4, 0x3]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @eol, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4e) 2.56036868s ago: executing program 0 (id=923): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0xd8, 0x6, @link_local}, 0x14) 2.453642896s ago: executing program 5 (id=924): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0xc1, 0x4, 0x10000006, 0x5, 0x5, 0xfffffff8, 0x1000, 0x9, 0x5, 0x6, 0x80000001, 0xfffffffa, 0x0, 0xfffffffe, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2, 0x100, 0x6, 0x1c00, 0x1000b, 0x40, 0xbed4, 0x8, 0x8000100, 0x6, 0x0, 0x11000, 0x20008, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0x9, 0x81, 0x2, 0x180000, 0x4007, 0x48b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x9, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x3, 0x1, 0x3, 0x0, 0x10000, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x10e7, 0xfdffffff, 0x40000002, 0xfffffffe, 0x84, 0x100, 0x5, 0xffff, 0x81, 0xb, 0x5, 0x20006, 0x9, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x0, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x5, 0x1, 0x0, 0xc5c, 0xffffffff]}}) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0x541e, 0x3010, 0x3, 0xf1}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=@other={'trylock', ' ', 'mem'}, 0xc) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) socket$kcm(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r5, 0x0, 0x3, 0x3, 0x7, 0x10, @mcast2, @empty, 0x8, 0x20, 0x99, 0x3e}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e000000108000a00", @ANYRES32], 0x48}}, 0x0) 2.431674382s ago: executing program 4 (id=925): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0d, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0x42400) 1.560753902s ago: executing program 0 (id=926): syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000180)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), 0x0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) 1.295391703s ago: executing program 5 (id=927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x34}}, 0x0) 1.261631397s ago: executing program 1 (id=928): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) open(0x0, 0x80ff, 0x88) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 923.418429ms ago: executing program 5 (id=929): capset(&(0x7f0000000000)={0x20080522}, 0x0) inotify_init() openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) dup(r1) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000800)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x0, 0x0) 833.018749ms ago: executing program 2 (id=930): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000034276d20402003c68e0100000001090212000100000000090400"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x0, 0x0}], 0x1}) 743.221329ms ago: executing program 0 (id=931): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r1, @ANYBLOB="fe3cbbb685ec7cb1766da568"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 454.468666ms ago: executing program 1 (id=932): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000002000010000000000000000000a204000000000070000000014000200fc0200000000000000000000000000011400010020010000"], 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 446.91449ms ago: executing program 0 (id=933): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x80, 0xc0) socket$packet(0x11, 0x3, 0x300) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) listen(0xffffffffffffffff, 0xfff) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 299.814045ms ago: executing program 3 (id=934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffff8000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f0000000740)={0x2, @pix={0x1, 0x5, 0x33424752, 0x7, 0xf3, 0x3, 0x5, 0x40, 0x1, 0x2, 0x2}}) 0s ago: executing program 1 (id=935): move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000080)=[0x3, 0x1, 0x6, 0xffffffb3, 0x7, 0x2, 0xd82, 0xb9f], &(0x7f0000000140)=[0x0], 0x0) r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0xb, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x22c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) utime(0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000007b40)="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", 0x2000, 0x0) r2 = io_uring_setup(0x664b, &(0x7f0000000500)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000340)=""/160, 0xa0}], 0x1, 0x1a, 0x7) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) kernel console output (not intermixed with test programs): 21][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.809152][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.841783][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.881313][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.909376][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.916732][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.975530][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.982738][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.010584][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.024785][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.068097][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.075326][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.134655][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.141854][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.206004][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.255634][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.262844][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.314476][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.321661][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.381063][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.393111][ T5847] Bluetooth: hci1: command tx timeout [ 110.460590][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.472811][ T5850] Bluetooth: hci4: command tx timeout [ 110.475024][ T5840] Bluetooth: hci2: command tx timeout [ 110.478292][ T5838] Bluetooth: hci0: command tx timeout [ 110.484123][ T52] Bluetooth: hci5: command tx timeout [ 110.489018][ T5847] Bluetooth: hci3: command tx timeout [ 110.577858][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.613798][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.621307][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.658871][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.685529][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.692772][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.770471][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.870507][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.877734][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.896477][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.903713][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.033545][ T5830] veth0_vlan: entered promiscuous mode [ 111.061613][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.118813][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.141735][ T5830] veth1_vlan: entered promiscuous mode [ 111.287880][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.384610][ T5830] veth0_macvtap: entered promiscuous mode [ 111.409954][ T5830] veth1_macvtap: entered promiscuous mode [ 111.467495][ T5833] veth0_vlan: entered promiscuous mode [ 111.495582][ T5829] veth0_vlan: entered promiscuous mode [ 111.537254][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.557305][ T5833] veth1_vlan: entered promiscuous mode [ 111.590017][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.653058][ T5829] veth1_vlan: entered promiscuous mode [ 111.667383][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.702571][ T5834] veth0_vlan: entered promiscuous mode [ 111.738047][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.762671][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.780602][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.799013][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.838106][ T5834] veth1_vlan: entered promiscuous mode [ 111.861134][ T5833] veth0_macvtap: entered promiscuous mode [ 111.874601][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.921952][ T5829] veth0_macvtap: entered promiscuous mode [ 111.933637][ T5833] veth1_macvtap: entered promiscuous mode [ 111.969862][ T5829] veth1_macvtap: entered promiscuous mode [ 112.028657][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.099946][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.133760][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.141754][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.157692][ T1161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.195635][ T1161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.205959][ T1161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.247812][ T5834] veth0_macvtap: entered promiscuous mode [ 112.255261][ T1161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.276001][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.317356][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.347701][ T5834] veth1_macvtap: entered promiscuous mode [ 112.386586][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.408767][ T4387] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.413249][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.421688][ T4387] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.463530][ T4387] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.485733][ T5838] Bluetooth: hci1: command tx timeout [ 112.491630][ T4387] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.553166][ T5847] Bluetooth: hci3: command tx timeout [ 112.553389][ T5840] Bluetooth: hci5: command tx timeout [ 112.558609][ T5850] Bluetooth: hci2: command tx timeout [ 112.558664][ T5838] Bluetooth: hci0: command tx timeout [ 112.564431][ T52] Bluetooth: hci4: command tx timeout [ 112.588404][ T5832] veth0_vlan: entered promiscuous mode [ 112.616601][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 112.629693][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.693478][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.799914][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.815809][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.816198][ T5832] veth1_vlan: entered promiscuous mode [ 112.824066][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.842605][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.856857][ T73] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.889943][ T73] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.954315][ T73] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.009256][ T73] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.036734][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.037461][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.050124][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.055885][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.118866][ T5831] veth0_vlan: entered promiscuous mode [ 113.176957][ T5832] veth0_macvtap: entered promiscuous mode [ 113.251199][ T5831] veth1_vlan: entered promiscuous mode [ 113.304111][ T5832] veth1_macvtap: entered promiscuous mode [ 113.465317][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.483407][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.492210][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.506781][ T5831] veth0_macvtap: entered promiscuous mode [ 113.540142][ T5933] hid-generic 0000:0000:0000.0001: unknown main item tag 0x7 [ 113.559916][ T5933] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 113.692799][ T5981] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8'. [ 113.724703][ T5933] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.749258][ T5933] hid-generic 0000:0000:0000.0001: unknown main item tag 0x3 [ 113.779786][ T5933] hid-generic 0000:0000:0000.0001: unknown main item tag 0x3 [ 113.792819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.817210][ T5933] hid-generic 0000:0000:0000.0001: unknown main item tag 0x3 [ 113.854496][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.879854][ T5831] veth1_macvtap: entered promiscuous mode [ 113.887809][ T5933] hid-generic 0000:0000:0000.0001: unknown main item tag 0x3 [ 114.147046][ T5933] hid-generic 0000:0000:0000.0001: unknown main item tag 0x3 [ 114.215890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 114.224510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.252269][ T5933] hid-generic 0000:0000:0000.0001: unknown main item tag 0x3 [ 114.373569][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.381441][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.400314][ T5933] hid-generic 0000:0000:0000.0001: unknown main item tag 0x3 [ 114.432243][ T5933] hid-generic 0000:0000:0000.0001: unknown main item tag 0x3 [ 114.460742][ T4387] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.474666][ T5933] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 114.499726][ T4387] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.568263][ T4387] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.610168][ T4387] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.643028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.662381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.813081][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.932287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 114.951656][ T5988] fido_id[5988]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 114.960302][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.973143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 115.181415][ T73] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.462625][ T73] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.766372][ T1104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.845622][ T1104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.863443][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.871267][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.243334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.270678][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.280692][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.352716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.502617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.584280][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.612193][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.757390][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.811845][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.812054][ T5933] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.053542][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 117.075440][ T5933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.303039][ T5933] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 117.313329][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.346215][ T5933] usb 4-1: Product: syz [ 117.350571][ T5933] usb 4-1: Manufacturer: syz [ 117.368064][ T5933] usb 4-1: SerialNumber: syz [ 117.381773][ T5933] usb 4-1: config 0 descriptor?? [ 117.487477][ T5933] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 117.529238][ T5933] usb 4-1: selecting invalid altsetting 1 [ 117.729690][ T5933] gspca_stk014: reg_r err -71 [ 117.748730][ T5933] stk014 4-1:0.0: probe with driver stk014 failed with error -71 [ 117.885134][ T5933] usb 4-1: USB disconnect, device number 2 [ 118.142146][ T6023] l2tp_ppp: sess 2/0: no socket in recv [ 118.357911][ T6021] can: request_module (can-proto-3) failed. [ 119.406932][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 121.473447][ T5898] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.634267][ T6079] Zero length message leads to an empty skb [ 121.842666][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 121.867240][ T5898] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 121.878537][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 122.692421][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.702987][ T5898] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.729048][ T5898] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.738421][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.814864][ T6084] loop6: detected capacity change from 0 to 2640 [ 122.824948][ T6084] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.944835][ T6084] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.965041][ T6084] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.973538][ T6084] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.047485][ T6084] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.055626][ T5898] usb 1-1: usb_control_msg returned -32 [ 123.062882][ T6072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.072254][ T6084] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.098395][ T5898] usbtmc 1-1:16.0: can't read capabilities [ 123.105157][ T6072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.151531][ T6084] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.157183][ T5898] usb 1-1: USB disconnect, device number 2 [ 123.262255][ T6084] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.332175][ T5933] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 123.355337][ T6084] ldm_validate_partition_table(): Disk read failed. [ 123.362337][ T6084] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.393648][ T6084] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.504850][ T6084] Dev loop6: unable to read RDB block 0 [ 123.513525][ T6084] loop6: unable to read partition table [ 123.802222][ T6084] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 123.877696][ T6097] netlink: 72 bytes leftover after parsing attributes in process `syz.2.35'. [ 125.262181][ T5918] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 125.752115][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 125.774620][ T5918] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 125.816302][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.138619][ T5918] pvrusb2: Hardware description: Terratec Grabster AV400 [ 126.302137][ T5918] pvrusb2: ********** [ 126.326018][ T5918] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 126.389512][ T5918] pvrusb2: Important functionality might not be entirely working. [ 126.452136][ T5918] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 126.572344][ T5918] pvrusb2: ********** [ 126.662371][ T2340] pvrusb2: Invalid write control endpoint [ 126.814459][ T5918] usb 3-1: USB disconnect, device number 2 [ 127.047221][ T2340] pvrusb2: Invalid write control endpoint [ 127.081422][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 127.139386][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 127.157327][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 127.179406][ T2340] pvrusb2: Device being rendered inoperable [ 127.209916][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 127.247627][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 127.374902][ T2340] pvrusb2: Attached sub-driver cx25840 [ 127.442141][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 127.512153][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 127.843557][ T5933] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 127.851211][ T5933] usb 6-1: can't read configurations, error -71 [ 128.419637][ T6131] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 131.811668][ T6152] bridge_slave_0: left allmulticast mode [ 131.819542][ T6152] bridge_slave_0: left promiscuous mode [ 131.908595][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.655202][ T6152] bridge_slave_1: left allmulticast mode [ 132.660871][ T6152] bridge_slave_1: left promiscuous mode [ 132.762402][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.859862][ T6152] bond0: (slave bond_slave_0): Releasing backup interface [ 132.957862][ T6152] bond0: (slave bond_slave_1): Releasing backup interface [ 133.028110][ T6152] team0: Port device team_slave_0 removed [ 133.077569][ T6152] team0: Port device team_slave_1 removed [ 133.095299][ T6152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.120496][ T6152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.165110][ T6152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.186125][ T6152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.236779][ T6152] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 133.272286][ T5898] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.311879][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.5.56'. [ 133.411512][ T6165] vxlan0: entered promiscuous mode [ 133.441241][ T4387] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.453071][ T5898] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 133.469629][ T4387] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.499951][ T4387] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.503529][ T5898] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.539583][ T5898] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.548138][ T4387] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.596445][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.624642][ T5898] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.662232][ T5898] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.693759][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.709011][ T5898] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.733747][ T5898] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.765308][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.801763][ T5898] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.828714][ T5898] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.858214][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.869050][ T5898] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.881275][ T5898] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.913288][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.921602][ T5898] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.942186][ T5898] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.000771][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 134.025094][ T5898] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.059256][ T5898] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.131228][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 134.173203][ T5898] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.347904][ T5898] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.406715][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 134.665060][ T5898] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 134.674965][ T5898] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 134.683611][ T5898] usb 3-1: Product: syz [ 134.687793][ T5898] usb 3-1: Manufacturer: syz [ 134.698258][ T5898] usb 3-1: SerialNumber: syz [ 134.820655][ T6183] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 135.565949][ T5898] usb 3-1: config 0 descriptor?? [ 135.638746][ T5898] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 137.962316][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 138.155999][ T6220] tipc: Enabling of bearer rejected, failed to enable media [ 138.332378][ T5841] usb 3-1: USB disconnect, device number 3 [ 138.400914][ T5841] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 138.441835][ T6225] tipc: Started in network mode [ 138.495919][ T6225] tipc: Node identity 02ee6650f82b, cluster identity 4711 [ 138.630173][ T6225] tipc: Enabled bearer , priority 0 [ 138.686545][ T6228] syzkaller0: entered promiscuous mode [ 138.724654][ T6228] syzkaller0: entered allmulticast mode [ 138.772570][ T6232] ALSA: mixer_oss: invalid OSS volume 'žð-ùËòöè€Ó8/' [ 138.858981][ T6235] tipc: Resetting bearer [ 138.902169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.919125][ T6235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.004732][ T6221] tipc: Resetting bearer [ 139.522210][ T6246] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 140.234920][ T6221] tipc: Disabling bearer [ 140.350920][ T6132] tipc: Node number set to 4207240784 [ 140.502160][ T6132] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.902175][ T6132] usb 4-1: Using ep0 maxpacket: 8 [ 140.912867][ T6132] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 140.925738][ T6132] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 140.940889][ T6132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.957690][ T6132] usb 4-1: Product: syz [ 140.962148][ T6001] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 141.108756][ T6262] delete_channel: no stack [ 141.401885][ T6001] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.553017][ T6001] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 141.692449][ T89] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 141.753502][ T6132] usb 4-1: Manufacturer: syz [ 141.758146][ T6132] usb 4-1: SerialNumber: syz [ 141.975812][ T6001] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.001194][ T6132] usb 4-1: config 0 descriptor?? [ 142.017753][ T6132] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 142.026142][ T6001] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 142.038101][ T6001] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 142.065238][ T6001] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.090697][ T6267] ptrace attach of "./syz-executor exec"[5834] was attempted by " [ 142.125309][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.748870][ T6132] usb 4-1: setting power ON [ 142.758751][ T6132] dvb-usb: bulk message failed: -22 (2/0) [ 142.782675][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.792486][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.845978][ T6132] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.937022][ T6132] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 142.946741][ T6132] usb 4-1: media controller created [ 142.981190][ T6132] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.055844][ T6001] usb 3-1: Product: syz [ 143.086763][ T6001] usb 3-1: Manufacturer: syz [ 143.109391][ T6132] usb 4-1: selecting invalid altsetting 6 [ 143.120567][ T6001] cdc_wdm 3-1:1.0: skipping garbage [ 143.134416][ T89] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.152113][ T6132] usb 4-1: digital interface selection failed (-22) [ 143.158746][ T6132] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 143.160468][ T6001] cdc_wdm 3-1:1.0: skipping garbage [ 143.177620][ T89] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 143.248168][ T89] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 143.248789][ T6132] usb 4-1: setting power OFF [ 143.257857][ T6001] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 143.290959][ T6132] dvb-usb: bulk message failed: -22 (2/0) [ 143.319386][ T6132] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 143.377735][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.397005][ T6001] cdc_wdm 3-1:1.0: Unknown control protocol [ 143.417932][ T6132] (NULL device *): no alternate interface [ 143.571944][ T6001] usb 3-1: USB disconnect, device number 4 [ 143.667648][ T6262] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 143.736788][ T6132] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 143.881721][ T89] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.044016][ T6132] usb 4-1: USB disconnect, device number 3 [ 145.509520][ T6132] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 145.879088][ T6132] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.907542][ T6132] usb 6-1: config 0 has no interfaces? [ 145.952973][ T6132] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 146.765514][ T6132] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.801144][ T6132] usb 6-1: Product: syz [ 146.830604][ T6132] usb 6-1: Manufacturer: syz [ 147.104493][ T6132] usb 6-1: SerialNumber: syz [ 147.179143][ T6318] ptrace attach of "./syz-executor exec"[5830] was attempted by " [ 147.950975][ T6132] usb 6-1: config 0 descriptor?? [ 148.699968][ T6132] usb 1-1: USB disconnect, device number 3 [ 148.782478][ T89] usb 6-1: USB disconnect, device number 4 [ 149.721303][ T31] audit: type=1800 audit(1766740879.521:2): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.113" name="bus" dev="tmpfs" ino=109 res=0 errno=0 [ 151.309255][ T6375] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.509944][ T6132] hid_parser_main: 5 callbacks suppressed [ 151.509967][ T6132] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 151.579131][ T6132] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.010516][ T6396] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 161.527666][ T6466] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 162.853646][ T6147] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 163.132343][ T6147] usb 1-1: Using ep0 maxpacket: 8 [ 163.221894][ T6147] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 163.303475][ T6147] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 163.334983][ T6147] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.397248][ T6147] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.445537][ T6147] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.560403][ T6147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.822852][ T6147] usb 1-1: usb_control_msg returned -32 [ 163.829700][ T6472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.838895][ T6472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.857966][ T6147] usbtmc 1-1:16.0: can't read capabilities [ 163.950062][ T6147] usb 1-1: USB disconnect, device number 4 [ 165.452292][ T6395] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 165.654028][ T6395] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.742265][ T6395] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 165.803561][ T6395] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 165.894862][ T6395] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 165.946836][ T6395] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 166.135074][ T6395] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.190191][ T6395] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.223414][ T6395] usb 1-1: Product: syz [ 166.587477][ T6527] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 167.272152][ T6395] usb 1-1: Manufacturer: syz [ 167.304302][ T6395] cdc_wdm 1-1:1.0: skipping garbage [ 167.309538][ T6395] cdc_wdm 1-1:1.0: skipping garbage [ 167.566082][ T6395] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 167.606284][ T6395] cdc_wdm 1-1:1.0: Unknown control protocol [ 167.717253][ T6395] usb 1-1: USB disconnect, device number 5 [ 169.675187][ T6553] syzkaller0: entered promiscuous mode [ 169.680710][ T6553] syzkaller0: entered allmulticast mode [ 169.817538][ T6559] Bluetooth: MGMT ver 1.23 [ 169.870171][ T6559] Invalid ELF header magic: != ELF [ 171.752607][ T6147] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 172.059146][ T6147] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.077897][ T6147] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 172.129171][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 172.141590][ T6147] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.167267][ T6147] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 172.368450][ T6147] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 172.810812][ T6147] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.832101][ T6147] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.850420][ T6147] usb 2-1: Product: syz [ 172.855856][ T6147] usb 2-1: Manufacturer: syz [ 172.909238][ T6147] cdc_wdm 2-1:1.0: skipping garbage [ 172.925082][ T6147] cdc_wdm 2-1:1.0: skipping garbage [ 172.945686][ T6147] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 172.951627][ T6147] cdc_wdm 2-1:1.0: Unknown control protocol [ 173.137098][ T5898] usb 2-1: USB disconnect, device number 2 [ 174.247753][ T6624] Invalid ELF header magic: != ELF [ 174.283703][ T6625] ptrace attach of "./syz-executor exec"[5830] was attempted by " [ 178.306957][ T6670] bridge0: port 3(syz_tun) entered blocking state [ 178.472891][ T6670] bridge0: port 3(syz_tun) entered disabled state [ 178.479671][ T6670] syz_tun: entered allmulticast mode [ 178.535941][ T6670] syz_tun: entered promiscuous mode [ 178.542482][ T5841] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 178.567321][ T6670] bridge0: port 3(syz_tun) entered blocking state [ 178.574155][ T6670] bridge0: port 3(syz_tun) entered forwarding state [ 178.735265][ T5841] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.774405][ T5841] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 178.819241][ T5841] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.852151][ T5841] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 178.914433][ T5841] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 178.948574][ T5841] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.987682][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 179.025913][ T5841] usb 6-1: Product: syz [ 179.067846][ T5841] usb 6-1: Manufacturer: syz [ 179.095249][ T5841] cdc_wdm 6-1:1.0: skipping garbage [ 179.101413][ T5841] cdc_wdm 6-1:1.0: skipping garbage [ 179.106812][ T6263] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 179.218206][ T5841] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 179.237507][ T5841] cdc_wdm 6-1:1.0: Unknown control protocol [ 179.302796][ T6395] usb 6-1: USB disconnect, device number 5 [ 179.382452][ T6263] usb 5-1: Using ep0 maxpacket: 32 [ 179.402846][ T6263] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 179.432986][ T6263] usb 5-1: config 0 has no interface number 0 [ 179.478017][ T6263] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 179.495734][ T6263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.504638][ T6263] usb 5-1: Product: syz [ 179.508816][ T6263] usb 5-1: Manufacturer: syz [ 179.515593][ T6263] usb 5-1: SerialNumber: syz [ 179.595643][ T6263] usb 5-1: config 0 descriptor?? [ 179.872517][ T6699] netlink: 160 bytes leftover after parsing attributes in process `syz.2.204'. [ 179.905675][ T6263] f81534a_ctrl 5-1:0.88: failed to set register 0x116: -5 [ 179.924841][ T6263] f81534a_ctrl 5-1:0.88: failed to enable ports: -5 [ 179.931491][ T6263] f81534a_ctrl 5-1:0.88: probe with driver f81534a_ctrl failed with error -5 [ 180.084045][ T6263] usb 5-1: USB disconnect, device number 2 [ 180.240726][ T6710] netlink: 'syz.1.206': attribute type 4 has an invalid length. [ 180.594496][ T6721] netlink: 'syz.3.210': attribute type 12 has an invalid length. [ 180.602262][ T5898] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 180.752126][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 180.766465][ T5898] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 180.778156][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.085341][ T5898] pvrusb2: Hardware description: Terratec Grabster AV400 [ 181.102776][ T5898] pvrusb2: ********** [ 181.106802][ T5898] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 181.123377][ T5898] pvrusb2: Important functionality might not be entirely working. [ 181.131254][ T5898] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 181.892462][ T5898] pvrusb2: ********** [ 181.928889][ T2340] pvrusb2: Invalid write control endpoint [ 182.335711][ T2340] pvrusb2: Invalid write control endpoint [ 182.341475][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 182.872135][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 183.089556][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 183.102632][ T2340] pvrusb2: Device being rendered inoperable [ 183.108667][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 183.190002][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 183.250864][ T2340] pvrusb2: Attached sub-driver cx25840 [ 183.299002][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 183.355408][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 183.485575][ T5839] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 183.672367][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 183.702769][ T5839] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 183.732312][ T5839] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 183.774939][ T5839] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.825006][ T5839] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 183.882437][ T5839] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 183.922011][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.952119][ T5839] usb 5-1: Product: syz [ 183.970951][ T5839] usb 5-1: Manufacturer: syz [ 183.991210][ T5839] usb 5-1: SerialNumber: syz [ 184.072724][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 184.118097][ T5839] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input5 [ 184.302171][ T5839] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 184.361630][ T5839] (id 0x00) [ 184.575987][ T5839] rc_core: IR keymap rc-imon-pad not found [ 184.581863][ T5839] Registered IR keymap rc-empty [ 184.632850][ T5839] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 184.667239][ T5839] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 184.706801][ T6770] ptrace attach of "./syz-executor exec"[5832] was attempted by " [ 184.738396][ T5839] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 184.998284][ T6774] binder: 6768:6774 ioctl c018620c 2000000002c0 returned -1 [ 185.009277][ T6006] usb 2-1: USB disconnect, device number 3 [ 185.165232][ T6769] mmap: syz.3.218 (6769) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 185.228304][ T5839] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input6 [ 186.272289][ T5839] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:3> initialized [ 187.713611][ T6006] usb 5-1: USB disconnect, device number 3 [ 187.743336][ T6791] syz.0.227 uses obsolete (PF_INET,SOCK_PACKET) [ 187.752455][ T6791] netlink: 'syz.0.227': attribute type 4 has an invalid length. [ 187.779244][ T6791] netlink: 'syz.0.227': attribute type 4 has an invalid length. [ 188.651414][ T6800] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.720074][ T6799] team0: Port device vlan2 added [ 188.862635][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.230'. [ 189.932171][ T6450] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 190.132118][ T6450] usb 2-1: Using ep0 maxpacket: 32 [ 190.185680][ T6450] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 190.209579][ T6450] usb 2-1: config 0 has no interface number 0 [ 190.284552][ T6450] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 190.298182][ T6450] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 190.310636][ T6450] usb 2-1: Product: syz [ 190.317040][ T6450] usb 2-1: Manufacturer: syz [ 190.338356][ T6450] usb 2-1: config 0 descriptor?? [ 191.813902][ T6450] usb 2-1: USB disconnect, device number 4 [ 191.928685][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'. [ 192.083377][ T31] audit: type=1326 audit(1766740921.861:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.0.245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6972b8f749 code=0x0 [ 192.230881][ T6841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.244'. [ 192.242198][ T6841] netlink: 32 bytes leftover after parsing attributes in process `syz.4.244'. [ 193.815871][ T6851] tipc: Started in network mode [ 193.820995][ T6851] tipc: Node identity faf4528e1626, cluster identity 4711 [ 193.828521][ T6851] tipc: Enabled bearer , priority 0 [ 193.837236][ T6851] syzkaller0: entered promiscuous mode [ 193.844013][ T6851] syzkaller0: entered allmulticast mode [ 194.192924][ T6853] tipc: Resetting bearer [ 194.371833][ T6849] tipc: Resetting bearer [ 194.429179][ T6849] tipc: Disabling bearer [ 194.866574][ T6867] netlink: 269 bytes leftover after parsing attributes in process `syz.0.253'. [ 197.147001][ T6903] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 198.088433][ T6906] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 199.552170][ T89] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 199.742134][ T89] usb 6-1: Using ep0 maxpacket: 32 [ 199.767062][ T89] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 199.829315][ T89] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.859946][ T89] usb 6-1: Product: syz [ 199.888185][ T89] usb 6-1: Manufacturer: syz [ 199.930693][ T89] usb 6-1: SerialNumber: syz [ 200.002588][ T89] usb 6-1: config 0 descriptor?? [ 200.058689][ T89] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 200.120740][ T89] dvb-usb: bulk message failed: -22 (2/0) [ 200.178502][ T89] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.211070][ T89] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 200.212995][ T6915] dvb-usb: bulk message failed: -22 (6/0) [ 200.238302][ T6920] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 200.291308][ T89] usb 6-1: media controller created [ 200.356702][ T89] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.500819][ T89] usb 6-1: selecting invalid altsetting 7 [ 200.533221][ T89] cxusb: set interface failed [ 200.557039][ T89] dvb-usb: bulk message failed: -22 (1/0) [ 200.742376][ T89] DVB: Unable to find symbol lgdt330x_attach() [ 200.805278][ T89] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 201.143113][ T89] rc_core: IR keymap rc-dvico-portable not found [ 201.149497][ T89] Registered IR keymap rc-empty [ 201.204034][ T89] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 201.289658][ T89] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input7 [ 201.339611][ T89] dvb-usb: schedule remote query interval to 100 msecs. [ 201.371411][ T89] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 201.479087][ T89] usb 6-1: USB disconnect, device number 6 [ 201.599158][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.276'. [ 202.163453][ T89] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 202.281039][ T6951] netlink: 'syz.1.275': attribute type 2 has an invalid length. [ 202.451682][ T6951] : entered promiscuous mode [ 202.460199][ T31] audit: type=1326 audit(1766740932.261:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.1.275" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b66b8f749 code=0x0 [ 203.850468][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.856949][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.890087][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.921413][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.953092][ T6973] netlink: 'syz.0.281': attribute type 16 has an invalid length. [ 205.052418][ T6973] netlink: 'syz.0.281': attribute type 17 has an invalid length. [ 205.324707][ T6973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.622151][ T5841] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 209.799102][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 209.824627][ T5841] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.856091][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.910441][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.945102][ T5841] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 209.972682][ T5841] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.021060][ T5841] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 210.036908][ T5841] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 210.059694][ T5841] usb 4-1: Manufacturer: syz [ 210.100789][ T5841] usb 4-1: config 0 descriptor?? [ 210.242338][ T6132] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 210.427988][ T6132] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 210.450503][ T7020] capability: warning: `syz.0.297' uses deprecated v2 capabilities in a way that may be insecure [ 210.483562][ T6132] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 210.523950][ T6132] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 210.563166][ T6132] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 210.766471][ T6132] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 210.794200][ T6132] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 210.921435][ T7026] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 211.621605][ T5841] rc_core: IR keymap rc-hauppauge not found [ 211.642124][ T5841] Registered IR keymap rc-empty [ 211.647329][ T5841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 211.654557][ T6132] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.672113][ T6132] usb 5-1: Product: syz [ 211.676283][ T6132] usb 5-1: Manufacturer: syz [ 211.702202][ T5841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 211.711094][ T6132] cdc_wdm 5-1:1.0: skipping garbage [ 211.718237][ T6132] cdc_wdm 5-1:1.0: skipping garbage [ 211.775730][ T5841] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 211.787692][ T6132] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 211.818326][ T6132] cdc_wdm 5-1:1.0: Unknown control protocol [ 211.833489][ T5841] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 211.941731][ T5841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 211.992656][ T5841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 212.052478][ T5841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 212.092669][ T5841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 212.158726][ T5841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 212.192320][ T5841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 212.232260][ T5841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 212.273813][ T7041] ip6gre1: entered promiscuous mode [ 212.279100][ T7041] ip6gre1: entered allmulticast mode [ 212.285651][ T5841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 212.322305][ T5841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 212.362267][ T5841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 212.397021][ T5841] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 212.426492][ T5841] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 212.601343][ T7050] netlink: 148 bytes leftover after parsing attributes in process `syz.1.306'. [ 213.204022][ T5841] usb 5-1: USB disconnect, device number 4 [ 213.435660][ T5925] usb 4-1: USB disconnect, device number 4 [ 215.773045][ T7087] syzkaller0: entered promiscuous mode [ 215.780944][ T7087] syzkaller0: entered allmulticast mode [ 216.056837][ T7090] Invalid ELF header magic: != ELF [ 218.277419][ T7107] overlayfs: failed to resolve './file1/file0': -2 [ 218.352122][ T5925] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 219.074298][ T5925] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 219.092718][ T5925] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 219.120018][ T5925] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 219.166908][ T5925] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 219.193122][ T5925] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 219.298931][ T5925] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 219.314522][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 219.330480][ T7120] binder: 7115:7120 ioctl c018620c 2000000002c0 returned -1 [ 219.521921][ T5925] usb 1-1: Product: syz [ 219.535682][ T5925] usb 1-1: Manufacturer: syz [ 219.558297][ T5925] cdc_wdm 1-1:1.0: skipping garbage [ 219.572074][ T5925] cdc_wdm 1-1:1.0: skipping garbage [ 219.584017][ T5925] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 219.644137][ T5898] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 220.641817][ T5925] cdc_wdm 1-1:1.0: Unknown control protocol [ 220.720295][ T5925] usb 1-1: USB disconnect, device number 6 [ 220.822176][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 221.502438][ T5898] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.565566][ T5898] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 221.622159][ T5898] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 221.653727][ T5898] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 221.746735][ T5898] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 221.803992][ T5898] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 221.834631][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 221.869038][ T5898] usb 5-1: SerialNumber: syz [ 221.891257][ T7114] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 221.901157][ T5898] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 222.201586][ T5898] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 225.025561][ T5841] usb 5-1: USB disconnect, device number 5 [ 225.336614][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.342'. [ 225.829815][ T7167] process 'syz.4.342' launched './file1' with NULL argv: empty string added [ 226.921092][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 226.931333][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 226.931382][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 226.937666][ T5853] Bluetooth: hci5: command 0x0406 tx timeout [ 226.949816][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 226.953670][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 227.071685][ T7182] netlink: zone id is out of range [ 227.097602][ T7170] netlink: zone id is out of range [ 227.102951][ T7170] netlink: zone id is out of range [ 227.112821][ T7170] netlink: zone id is out of range [ 227.142170][ T7170] netlink: zone id is out of range [ 227.146670][ T7182] netlink: zone id is out of range [ 227.159065][ T7170] netlink: zone id is out of range [ 227.198312][ T7182] netlink: set zone limit has 8 unknown bytes [ 227.442558][ T7170] netlink: zone id is out of range [ 227.447811][ T7170] netlink: zone id is out of range [ 228.746589][ T7167] bridge1: port 1(veth3) entered blocking state [ 228.762313][ T7167] bridge1: port 1(veth3) entered disabled state [ 228.768798][ T7167] veth3: entered allmulticast mode [ 228.776786][ T7167] veth3: entered promiscuous mode [ 228.904626][ T7168] bridge1: port 2(veth0_to_bond) entered blocking state [ 228.911889][ T7168] bridge1: port 2(veth0_to_bond) entered disabled state [ 228.922299][ T7168] veth0_to_bond: entered allmulticast mode [ 229.028350][ T7168] veth0_to_bond: entered promiscuous mode [ 229.189421][ T7188] bridge1: port 3(veth5) entered blocking state [ 229.198135][ T7188] bridge1: port 3(veth5) entered disabled state [ 229.241193][ T7188] veth5: entered allmulticast mode [ 229.271157][ T7188] veth5: entered promiscuous mode [ 231.092386][ T7128] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 231.212877][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.353'. [ 231.240591][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.353'. [ 231.295630][ T7128] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 231.317218][ T7128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.350134][ T7128] usb 3-1: config 0 has no interfaces? [ 231.367802][ T7128] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 231.399378][ T7128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.442594][ T7128] usb 3-1: config 0 descriptor?? [ 234.597094][ T7247] Invalid ELF header magic: != ELF [ 235.777046][ T7128] usb 3-1: USB disconnect, device number 5 [ 236.938077][ T7268] ip6gre1: entered promiscuous mode [ 236.953924][ T7268] ip6gre1: entered allmulticast mode [ 239.689360][ T7281] ptrace attach of "./syz-executor exec"[5831] was attempted by " [ 239.742669][ T5925] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 240.282135][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 240.313242][ T5925] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 240.371445][ T5925] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 240.396036][ T5925] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 240.710280][ T7310] netlink: 72 bytes leftover after parsing attributes in process `syz.0.382'. [ 241.433229][ T5925] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.453421][ T5925] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 241.483903][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.727713][ T7293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.732496][ T7293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.742161][ T5925] usb 4-1: usb_control_msg returned -71 [ 241.793697][ T5925] usbtmc 4-1:16.0: can't read capabilities [ 241.948822][ T5925] usb 4-1: USB disconnect, device number 5 [ 242.775737][ T7317] netlink: 'syz.0.384': attribute type 2 has an invalid length. [ 243.225420][ T7317] : entered promiscuous mode [ 246.022561][ T6263] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 246.183386][ T6263] usb 2-1: Using ep0 maxpacket: 8 [ 246.190402][ T6263] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 246.217386][ T6263] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.227804][ T6263] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.238471][ T6263] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.248607][ T6006] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 246.256252][ T6450] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 246.278360][ T6263] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.442513][ T6263] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 246.463971][ T6263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.494242][ T6006] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 246.502987][ T6006] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 246.517050][ T6450] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 246.528257][ T6006] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 246.547383][ T6450] usb 5-1: config 0 has no interface number 0 [ 246.567003][ T6450] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 246.579717][ T6006] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 246.591567][ T6450] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.599720][ T6006] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 246.615819][ T6450] usb 5-1: config 0 descriptor?? [ 246.623681][ T6006] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 246.633516][ T6006] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 246.649187][ T6450] usb 5-1: selecting invalid altsetting 1 [ 246.672086][ T6450] dvb_ttusb_budget: ttusb_init_controller: error [ 246.680752][ T6006] usb 3-1: Product: syz [ 246.688987][ T6450] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 246.697657][ T6263] usb 2-1: usb_control_msg returned -32 [ 246.703433][ T6006] usb 3-1: Manufacturer: syz [ 246.708138][ T6263] usbtmc 2-1:16.0: can't read capabilities [ 246.714179][ T6132] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 246.779334][ T6006] cdc_wdm 3-1:1.0: skipping garbage [ 246.799712][ T6006] cdc_wdm 3-1:1.0: skipping garbage [ 246.809141][ T6006] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 246.841484][ T6006] cdc_wdm 3-1:1.0: Unknown control protocol [ 246.853462][ T6132] usb 6-1: device descriptor read/64, error -71 [ 246.927159][ T6450] DVB: Unable to find symbol cx22700_attach() [ 246.950476][ T89] usb 3-1: USB disconnect, device number 6 [ 247.074637][ T6450] DVB: Unable to find symbol tda10046_attach() [ 247.089587][ T6450] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 247.097690][ T6132] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 247.139896][ T6450] usb 5-1: USB disconnect, device number 6 [ 247.242121][ T6132] usb 6-1: device descriptor read/64, error -71 [ 247.252194][ T89] usb 2-1: USB disconnect, device number 5 [ 247.403070][ T6132] usb usb6-port1: attempt power cycle [ 247.772145][ T6132] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 247.812892][ T6132] usb 6-1: device descriptor read/8, error -71 [ 249.892143][ T6132] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 249.969172][ T6132] usb 6-1: device descriptor read/8, error -71 [ 250.072969][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.080840][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.142269][ T6132] usb usb6-port1: unable to enumerate USB device [ 251.376683][ T7415] syzkaller0: create flow: hash 1134320056 index 1 [ 251.497460][ T1153] syzkaller0: tun_net_xmit 76 [ 251.522376][ T5925] syzkaller0: tun_net_xmit 76 [ 251.527471][ T1153] syzkaller0: tun_net_xmit 48 [ 251.642116][ T5970] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 251.911215][ T5970] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 251.947104][ T5970] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 252.090486][ T5970] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.112463][ T5970] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 252.125052][ T5970] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 252.175048][ T5970] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.193605][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.221971][ T5970] usb 3-1: Product: syz [ 252.233796][ T5970] usb 3-1: Manufacturer: syz [ 252.257783][ T5970] cdc_wdm 3-1:1.0: skipping garbage [ 252.269503][ T5970] cdc_wdm 3-1:1.0: skipping garbage [ 252.493696][ T5925] syzkaller0: tun_net_xmit 76 [ 252.498724][ T5925] syzkaller0: tun_net_xmit 76 [ 252.537053][ T7411] syzkaller0: delete flow: hash 1134320056 index 1 [ 252.561749][ T5970] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 252.575619][ T5970] cdc_wdm 3-1:1.0: Unknown control protocol [ 252.614855][ T5970] usb 3-1: USB disconnect, device number 7 [ 253.042485][ T5925] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 253.205489][ T5925] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 253.224078][ T5925] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 253.235562][ T5925] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 253.245199][ T5925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 253.256529][ T5925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 253.270942][ T5925] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 253.280530][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 253.290419][ T5925] usb 5-1: Product: syz [ 253.295968][ T5925] usb 5-1: Manufacturer: syz [ 253.351607][ T5925] cdc_wdm 5-1:1.0: skipping garbage [ 253.367670][ T5925] cdc_wdm 5-1:1.0: skipping garbage [ 253.378519][ T5925] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 253.391969][ T5925] cdc_wdm 5-1:1.0: Unknown control protocol [ 253.667479][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 253.674285][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 253.681534][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 253.683145][ T5970] usb 5-1: USB disconnect, device number 7 [ 253.688221][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 253.688253][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 253.728421][ T7444] net_ratelimit: 9 callbacks suppressed [ 253.728443][ T7444] netlink: zone id is out of range [ 253.779457][ T7444] netlink: zone id is out of range [ 253.807201][ T7444] netlink: set zone limit has 8 unknown bytes [ 256.362130][ T5970] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 256.524834][ T5970] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 256.534437][ T5970] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 256.566160][ T5970] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 256.597369][ T5970] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 256.618608][ T5970] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 256.668036][ T5970] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 256.703276][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 256.739984][ T5970] usb 5-1: Product: syz [ 256.758644][ T5970] usb 5-1: Manufacturer: syz [ 257.002928][ T5970] cdc_wdm 5-1:1.0: skipping garbage [ 257.008358][ T5970] cdc_wdm 5-1:1.0: skipping garbage [ 257.018519][ T5970] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 257.025221][ T5970] cdc_wdm 5-1:1.0: Unknown control protocol [ 257.166944][ T5970] usb 5-1: USB disconnect, device number 8 [ 257.392416][ T6263] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 257.417046][ T7485] netlink: 44 bytes leftover after parsing attributes in process `syz.5.438'. [ 257.451862][ T7485] netlink: 32 bytes leftover after parsing attributes in process `syz.5.438'. [ 257.732697][ T6263] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.758107][ T6263] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 258.588951][ T6263] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 258.632745][ T6263] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 258.676236][ T6263] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 258.727535][ T6263] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 258.778477][ T6263] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 258.822125][ T6263] usb 4-1: Product: syz [ 258.826336][ T6263] usb 4-1: Manufacturer: syz [ 258.903861][ T6263] cdc_wdm 4-1:1.0: skipping garbage [ 258.913565][ T6263] cdc_wdm 4-1:1.0: skipping garbage [ 258.931316][ T6263] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 258.969844][ T6263] cdc_wdm 4-1:1.0: Unknown control protocol [ 259.112617][ T6268] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 259.250137][ T7502] Invalid ELF header magic: != ELF [ 259.267199][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 259.273830][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 259.280166][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 259.286757][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 259.293166][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 259.299776][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 259.306723][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 259.309692][ T6006] usb 4-1: USB disconnect, device number 6 [ 259.313333][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 259.313364][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 259.345145][ T7501] cdc_wdm 4-1:1.0: Tx URB error: -19 [ 260.192092][ T6268] usb 6-1: device descriptor read/64, error -71 [ 260.469033][ T6268] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 260.736278][ T6268] usb 6-1: device descriptor read/64, error -71 [ 261.072792][ T6268] usb usb6-port1: attempt power cycle [ 261.295159][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 261.314806][ T7528] syz_tun: entered promiscuous mode [ 261.412435][ T6268] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 261.443882][ T6268] usb 6-1: device descriptor read/8, error -71 [ 261.462124][ T5898] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 261.634937][ T5898] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 261.653155][ T5898] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 261.669997][ T5898] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 261.695152][ T5898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 261.716530][ T6268] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 261.728486][ T5898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 261.747117][ T7546] macvlan0: entered promiscuous mode [ 261.755739][ T5898] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 261.767100][ T6268] usb 6-1: device descriptor read/8, error -71 [ 261.773426][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 261.781651][ T5898] usb 2-1: Product: syz [ 261.791776][ T5898] usb 2-1: Manufacturer: syz [ 261.895920][ T5898] cdc_wdm 2-1:1.0: skipping garbage [ 261.905768][ T6268] usb usb6-port1: unable to enumerate USB device [ 261.913514][ T5898] cdc_wdm 2-1:1.0: skipping garbage [ 261.936398][ T5898] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 261.964487][ T5898] cdc_wdm 2-1:1.0: Unknown control protocol [ 262.249122][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 262.250453][ T6132] usb 2-1: USB disconnect, device number 6 [ 262.255771][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 262.255801][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 262.255984][ T7525] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 262.287598][ T7553] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 262.361376][ T7558] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 265.276505][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.289727][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.849735][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.479'. [ 265.873526][ T7600] netlink: 'syz.3.479': attribute type 7 has an invalid length. [ 266.021925][ T7600] vxlan0: entered promiscuous mode [ 266.053724][ T3565] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.084495][ T3565] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.113322][ T3565] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.145742][ T3565] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.532444][ T5925] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 267.504132][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 267.562138][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.624634][ T5925] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 267.660163][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.683442][ T5925] usb 2-1: Product: syz [ 267.687675][ T5925] usb 2-1: Manufacturer: syz [ 267.702559][ T5925] usb 2-1: SerialNumber: syz [ 267.723011][ T5925] usb 2-1: config 0 descriptor?? [ 267.756363][ T5925] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 267.778106][ T7613] syzkaller0: entered promiscuous mode [ 267.783974][ T7613] syzkaller0: entered allmulticast mode [ 267.924971][ T6132] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 268.084135][ T6132] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 268.092940][ T6132] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 268.102453][ T5925] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 268.115873][ T6132] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 268.146369][ T6132] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 268.198122][ T6132] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 268.500054][ T6132] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 269.209285][ T116] usb 2-1: USB disconnect, device number 7 [ 269.219350][ T6132] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 269.253088][ T6132] usb 4-1: Product: syz [ 269.278039][ T6132] usb 4-1: Manufacturer: syz [ 269.351252][ T6132] cdc_wdm 4-1:1.0: skipping garbage [ 269.412106][ T6132] cdc_wdm 4-1:1.0: skipping garbage [ 269.448410][ T6132] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 269.481160][ T6132] cdc_wdm 4-1:1.0: Unknown control protocol [ 269.555315][ T6132] usb 4-1: USB disconnect, device number 7 [ 270.944061][ T7648] syzkaller0: entered promiscuous mode [ 270.967685][ T7648] syzkaller0: entered allmulticast mode [ 271.452688][ T5970] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 271.481908][ T5840] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 271.702255][ T5970] usb 4-1: device descriptor read/64, error -71 [ 272.062181][ T5970] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 272.292232][ T5970] usb 4-1: device descriptor read/64, error -71 [ 272.413847][ T5970] usb usb4-port1: attempt power cycle [ 272.774353][ T5970] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 272.823047][ T5970] usb 4-1: device descriptor read/8, error -71 [ 273.086307][ T5970] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 273.148293][ T5970] usb 4-1: device descriptor read/8, error -71 [ 273.342841][ T5970] usb usb4-port1: unable to enumerate USB device [ 276.872102][ T6268] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 277.052089][ T6268] usb 6-1: device descriptor read/64, error -71 [ 277.322157][ T6268] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 277.512153][ T6268] usb 6-1: device descriptor read/64, error -71 [ 277.602225][ T5970] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 277.636302][ T6268] usb usb6-port1: attempt power cycle [ 277.762110][ T5970] usb 3-1: Using ep0 maxpacket: 8 [ 277.847629][ T5970] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 277.913845][ T5970] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.952523][ T5970] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.998987][ T5970] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 278.032092][ T6268] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 278.056101][ T5970] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.082208][ T6268] usb 6-1: device descriptor read/8, error -71 [ 278.142084][ T5970] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 278.188594][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.460456][ T5970] usb 3-1: usb_control_msg returned -32 [ 278.482096][ T6268] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 278.500182][ T5970] usbtmc 3-1:16.0: can't read capabilities [ 278.572859][ T6268] usb 6-1: device descriptor read/8, error -71 [ 278.689882][ T6268] usb usb6-port1: unable to enumerate USB device [ 279.488783][ T7754] Invalid ELF header magic: != ELF [ 280.609961][ T5970] usb 3-1: USB disconnect, device number 8 [ 283.101384][ T7782] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 286.092082][ T5970] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 286.249952][ T5970] usb 4-1: device descriptor read/64, error -71 [ 286.562343][ T5970] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 286.712097][ T5970] usb 4-1: device descriptor read/64, error -71 [ 286.902551][ T5970] usb usb4-port1: attempt power cycle [ 287.203107][ T7814] Invalid ELF header magic: != ELF [ 287.252117][ T5970] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 287.872770][ T5970] usb 4-1: device descriptor read/8, error -71 [ 288.123275][ T5970] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 289.082968][ T5970] usb 4-1: device descriptor read/8, error -71 [ 289.208847][ T5970] usb usb4-port1: unable to enumerate USB device [ 292.181027][ T7868] syzkaller0: entered promiscuous mode [ 292.213878][ T7868] syzkaller0: entered allmulticast mode [ 293.722301][ T6001] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 293.882107][ T6001] usb 4-1: device descriptor read/64, error -71 [ 294.152165][ T6001] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 294.364298][ T6001] usb 4-1: device descriptor read/64, error -71 [ 294.482552][ T6001] usb usb4-port1: attempt power cycle [ 294.852136][ T6001] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 294.925854][ T6001] usb 4-1: device descriptor read/8, error -71 [ 295.213699][ T6001] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 295.243284][ T6001] usb 4-1: device descriptor read/8, error -71 [ 295.262718][ T6147] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 295.363084][ T6001] usb usb4-port1: unable to enumerate USB device [ 295.542103][ T6147] usb 2-1: Using ep0 maxpacket: 32 [ 295.637951][ T6147] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 295.657160][ T6147] usb 2-1: config 0 has no interface number 0 [ 295.677700][ T6147] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 295.700892][ T6147] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 295.721208][ T6147] usb 2-1: Product: syz [ 295.736338][ T6147] usb 2-1: Manufacturer: syz [ 295.805737][ T6147] usb 2-1: config 0 descriptor?? [ 297.058874][ T6147] usb 2-1: USB disconnect, device number 8 [ 298.293914][ T7954] Invalid ELF header magic: != ELF [ 300.012113][ T116] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 300.143060][ T116] usb 4-1: device descriptor read/64, error -71 [ 300.383784][ T116] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 300.522134][ T116] usb 4-1: device descriptor read/64, error -71 [ 300.540264][ T7966] ptrace attach of "./syz-executor exec"[5833] was attempted by " [ 300.665785][ T116] usb usb4-port1: attempt power cycle [ 301.662485][ T116] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 301.708076][ T116] usb 4-1: device descriptor read/8, error -71 [ 301.906935][ T7978] netlink: 3 bytes leftover after parsing attributes in process `syz.2.600'. [ 301.997563][ T116] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 302.043902][ T7978] 0ªX¹¦À: renamed from caif0 [ 302.052103][ T6001] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 302.086502][ T116] usb 4-1: device descriptor read/8, error -71 [ 302.104872][ T7998] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 302.175836][ T7978] 0ªX¹¦À: entered allmulticast mode [ 302.181231][ T7978] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 302.211392][ T116] usb usb4-port1: unable to enumerate USB device [ 302.243760][ T6001] usb 6-1: Using ep0 maxpacket: 32 [ 302.305158][ T6001] usb 6-1: config 0 has an invalid interface number: 247 but max is 0 [ 302.316782][ T6001] usb 6-1: config 0 has no interface number 0 [ 302.377309][ T6001] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 302.396351][ T6001] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 302.430184][ T6001] usb 6-1: Product: syz [ 302.481761][ T6001] usb 6-1: Manufacturer: syz [ 302.584334][ T6001] usb 6-1: config 0 descriptor?? [ 303.852226][ T6001] usb 6-1: USB disconnect, device number 19 [ 306.234427][ T6147] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 306.352240][ T6001] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 306.392207][ T6147] usb 4-1: device descriptor read/64, error -71 [ 306.492083][ T6001] usb 6-1: device descriptor read/64, error -71 [ 306.570594][ T8042] blktrace: Concurrent blktraces are not allowed on sg0 [ 306.642073][ T6147] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 306.751767][ T6001] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 306.774272][ T6147] usb 4-1: device descriptor read/64, error -71 [ 306.902571][ T6147] usb usb4-port1: attempt power cycle [ 306.909502][ T6001] usb 6-1: device descriptor read/64, error -71 [ 307.325614][ T6001] usb usb6-port1: attempt power cycle [ 307.363928][ T6147] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 307.389072][ T6147] usb 4-1: device descriptor read/8, error -71 [ 307.519772][ T8053] netlink: 64 bytes leftover after parsing attributes in process `syz.4.627'. [ 307.652109][ T6147] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 307.674655][ T6001] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 307.682907][ T6147] usb 4-1: device descriptor read/8, error -71 [ 307.723134][ T6001] usb 6-1: device descriptor read/8, error -71 [ 307.793362][ T6147] usb usb4-port1: unable to enumerate USB device [ 307.972187][ T6001] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 308.087456][ T6001] usb 6-1: device descriptor read/8, error -71 [ 308.291298][ T6001] usb usb6-port1: unable to enumerate USB device [ 310.236120][ T8082] netlink: 'syz.2.636': attribute type 3 has an invalid length. [ 311.480139][ T31] audit: type=1804 audit(1766741041.281:5): pid=8092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.640" name="/newroot/120/file1" dev="fuse" ino=1 res=1 errno=0 [ 316.165162][ T8133] blktrace: Concurrent blktraces are not allowed on sg0 [ 318.716808][ T6263] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 320.842350][ T6263] usb 4-1: Using ep0 maxpacket: 32 [ 320.875135][ T6263] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 320.899314][ T6263] usb 4-1: config 0 has no interface number 0 [ 320.921900][ T6263] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 320.961596][ T6263] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 321.002050][ T6263] usb 4-1: Product: syz [ 321.006249][ T6263] usb 4-1: Manufacturer: syz [ 321.258362][ T6263] usb 4-1: config 0 descriptor?? [ 321.502333][ T6263] usb 4-1: USB disconnect, device number 28 [ 325.538401][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 325.778533][ T89] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 326.058717][ T89] usb 5-1: Using ep0 maxpacket: 32 [ 326.670351][ T89] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 326.706615][ T89] usb 5-1: config 0 has no interface number 0 [ 326.716902][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.717003][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.818167][ T89] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 326.883508][ T89] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 326.937400][ T89] usb 5-1: Product: syz [ 326.949921][ T89] usb 5-1: Manufacturer: syz [ 327.000577][ T89] usb 5-1: config 0 descriptor?? [ 327.503483][ T8226] ip6gre1: entered promiscuous mode [ 327.508882][ T8226] ip6gre1: entered allmulticast mode [ 327.592093][ T116] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 327.732144][ T116] usb 3-1: device descriptor read/64, error -71 [ 328.032118][ T116] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 328.312173][ T116] usb 3-1: device descriptor read/64, error -71 [ 328.394274][ T10] usb 5-1: USB disconnect, device number 9 [ 328.455669][ T116] usb usb3-port1: attempt power cycle [ 328.867002][ T116] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 329.049351][ T116] usb 3-1: device descriptor read/8, error -71 [ 329.332416][ T116] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 329.453987][ T116] usb 3-1: device descriptor read/8, error -71 [ 329.592546][ T116] usb usb3-port1: unable to enumerate USB device [ 330.589486][ T8263] ip6gre1: entered promiscuous mode [ 330.657058][ T8263] ip6gre1: entered allmulticast mode [ 331.922071][ T6006] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 332.132062][ T6006] usb 4-1: Using ep0 maxpacket: 32 [ 332.156272][ T6006] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 332.215100][ T6006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.263558][ T6006] usb 4-1: config 0 descriptor?? [ 332.512409][ T6006] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 332.668057][ T8279] Invalid ELF header magic: != ELF [ 333.336563][ T6006] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 333.347574][ T6006] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 333.359382][ T6006] usb 4-1: media controller created [ 333.400171][ T6006] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.474580][ T6006] az6027: usb out operation failed. (-71) [ 333.488804][ T6006] az6027: usb out operation failed. (-71) [ 333.516732][ T6006] stb0899_attach: Driver disabled by Kconfig [ 333.528551][ T6006] az6027: no front-end attached [ 333.528551][ T6006] [ 333.562652][ T6006] az6027: usb out operation failed. (-71) [ 333.616000][ T6006] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 334.162586][ T6006] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 334.244568][ T6006] dvb-usb: schedule remote query interval to 400 msecs. [ 334.299447][ T6006] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 334.356302][ T6006] usb 4-1: USB disconnect, device number 29 [ 334.667743][ T6450] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 334.831395][ T6006] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 334.912253][ T6450] usb 3-1: Using ep0 maxpacket: 32 [ 334.948840][ T6450] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 334.957940][ T6450] usb 3-1: config 0 has no interface number 0 [ 334.980371][ T6450] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 334.998824][ T6450] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 335.049204][ T6450] usb 3-1: Product: syz [ 335.057177][ T6450] usb 3-1: Manufacturer: syz [ 335.073613][ T6450] usb 3-1: config 0 descriptor?? [ 335.971831][ T8306] netlink: zone id is out of range [ 335.977181][ T8306] netlink: zone id is out of range [ 335.982482][ T8306] netlink: zone id is out of range [ 335.987686][ T8306] netlink: zone id is out of range [ 335.993054][ T8306] netlink: zone id is out of range [ 335.999859][ T8306] netlink: zone id is out of range [ 336.005028][ T8306] netlink: zone id is out of range [ 336.010244][ T8306] netlink: zone id is out of range [ 336.015602][ T8306] netlink: zone id is out of range [ 336.020804][ T8306] netlink: zone id is out of range [ 336.810024][ T6395] usb 3-1: USB disconnect, device number 13 [ 338.512147][ T7783] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 339.266269][ T8323] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 339.533953][ T7783] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 339.586848][ T7783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.642084][ T7783] usb 3-1: Product: syz [ 339.665202][ T7783] usb 3-1: Manufacturer: syz [ 339.669835][ T7783] usb 3-1: SerialNumber: syz [ 339.708525][ T7783] usb 3-1: config 0 descriptor?? [ 339.735927][ T7783] hub 3-1:0.0: bad descriptor, ignoring hub [ 339.761833][ T7783] hub 3-1:0.0: probe with driver hub failed with error -5 [ 339.827516][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 339.936648][ T7783] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 340.024117][ T8332] ptrace attach of "./syz-executor exec"[5833] was attempted by " [ 340.194098][ T7783] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 340.419002][ T7783] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 340.556890][ T7783] usb 3-1: media controller created [ 340.615358][ T7783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 341.089507][ T7783] DVB: Unable to find symbol dib7000p_attach() [ 341.575933][ T7783] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 341.992681][ T7783] rc_core: IR keymap rc-dib0700-rc5 not found [ 342.031497][ T7783] Registered IR keymap rc-empty [ 342.202939][ T7783] dvb-usb: could not initialize remote control. [ 342.230624][ T7783] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 342.312162][ T7783] usb 3-1: USB disconnect, device number 14 [ 342.604022][ T7783] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 343.253973][ T8360] net_ratelimit: 6 callbacks suppressed [ 343.253998][ T8360] openvswitch: netlink: Message has 4 unknown bytes. [ 343.334101][ T8360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.483678][ T8373] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 344.632285][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 347.670109][ T8407] Invalid ELF header magic: != ELF [ 349.573870][ T8420] ip6gre1: entered promiscuous mode [ 349.615992][ T8420] ip6gre1: entered allmulticast mode [ 350.069477][ T8431] netlink: 100 bytes leftover after parsing attributes in process `syz.1.747'. [ 350.439909][ T8435] ptrace attach of "./syz-executor exec"[5832] was attempted by " [ 356.048323][ T8497] Invalid ELF header magic: != ELF [ 361.913347][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 362.006057][ T8555] Invalid ELF header magic: != ELF [ 363.769726][ T8574] veth0_to_bond: left allmulticast mode [ 363.775599][ T8574] veth0_to_bond: left promiscuous mode [ 363.781520][ T8574] bridge1: port 2(veth0_to_bond) entered disabled state [ 363.894366][ T8580] ip6gre1: entered promiscuous mode [ 363.943554][ T8580] ip6gre1: entered allmulticast mode [ 364.502155][ T8593] netlink: zone id is out of range [ 364.508013][ T8593] netlink: zone id is out of range [ 364.513911][ T8593] netlink: zone id is out of range [ 364.519666][ T8593] netlink: zone id is out of range [ 364.525959][ T8593] netlink: zone id is out of range [ 364.531260][ T8593] netlink: zone id is out of range [ 364.536993][ T8593] netlink: zone id is out of range [ 364.543450][ T8593] netlink: zone id is out of range [ 364.549846][ T8593] netlink: zone id is out of range [ 364.557372][ T8593] netlink: zone id is out of range [ 367.605256][ T8613] Invalid ELF header magic: != ELF [ 368.499024][ T8617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.801'. [ 369.293221][ T8628] netlink: 75 bytes leftover after parsing attributes in process `syz.3.805'. [ 369.981940][ T8638] syz.4.807 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 369.995622][ T8638] random: crng reseeded on system resumption [ 370.738739][ T8647] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 371.022270][ T5970] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 371.202173][ T5970] usb 3-1: Using ep0 maxpacket: 16 [ 371.237864][ T5970] usb 3-1: config 0 has no interfaces? [ 371.253768][ T5970] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 371.293405][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.346369][ T5970] usb 3-1: config 0 descriptor?? [ 371.520278][ T8664] Invalid ELF header magic: != ELF [ 372.051703][ T8668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.061245][ T8668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.217618][ T116] usb 3-1: USB disconnect, device number 15 [ 376.481812][ T8704] syzkaller0: entered promiscuous mode [ 376.487437][ T8704] syzkaller0: entered allmulticast mode [ 377.751532][ T8714] Invalid ELF header magic: != ELF [ 379.099007][ T7783] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 379.279350][ T7783] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 379.295604][ T7783] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 379.330336][ T7783] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 379.386324][ T7783] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 379.412226][ T7783] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 379.466079][ T7783] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 379.479878][ T7783] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 379.505803][ T7783] usb 2-1: Product: syz [ 379.505974][ T8729] fuse: Bad value for 'fd' [ 379.541423][ T7783] usb 2-1: Manufacturer: syz [ 379.586060][ T7783] cdc_wdm 2-1:1.0: skipping garbage [ 379.591318][ T7783] cdc_wdm 2-1:1.0: skipping garbage [ 379.629784][ T7783] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 379.641855][ T7783] cdc_wdm 2-1:1.0: Unknown control protocol [ 379.866536][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 379.867653][ T7783] usb 2-1: USB disconnect, device number 9 [ 379.873186][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 379.873216][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 379.873529][ T8725] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 380.324287][ T8741] net_ratelimit: 6 callbacks suppressed [ 380.324345][ T8741] netlink: zone id is out of range [ 380.335490][ T8741] netlink: zone id is out of range [ 380.341663][ T8741] netlink: zone id is out of range [ 380.347903][ T8741] netlink: zone id is out of range [ 380.353194][ T8741] netlink: zone id is out of range [ 380.358669][ T8741] netlink: zone id is out of range [ 380.364353][ T8741] netlink: zone id is out of range [ 380.398386][ T8741] netlink: zone id is out of range [ 380.422187][ T8741] netlink: zone id is out of range [ 380.431899][ T8741] netlink: zone id is out of range [ 382.174679][ T8707] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.182117][ T8707] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.485853][ T8707] 0ªX¹¦À: left allmulticast mode [ 382.802355][ T116] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 382.860547][ T8707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.919559][ T8707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.964889][ T116] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 382.973743][ T116] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 383.032504][ T116] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 383.067409][ T116] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 383.093625][ T116] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 383.128293][ T116] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 383.186137][ T116] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 383.382302][ T116] usb 5-1: Product: syz [ 383.446421][ T116] usb 5-1: Manufacturer: syz [ 383.532807][ T116] cdc_wdm 5-1:1.0: skipping garbage [ 383.568493][ T116] cdc_wdm 5-1:1.0: skipping garbage [ 383.720692][ T116] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 383.788802][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 383.795465][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 383.801754][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 383.808340][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 383.814996][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 383.821582][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 383.827852][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 383.834441][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 383.840729][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 383.847319][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 383.854772][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 383.861356][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 383.867635][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 383.874227][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 383.880371][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 383.904250][ T116] cdc_wdm 5-1:1.0: Unknown control protocol [ 383.915148][ T116] usb 5-1: USB disconnect, device number 10 [ 384.136574][ T8707] ip6gre1: left promiscuous mode [ 384.148352][ T8707] ip6gre1: left allmulticast mode [ 384.228819][ T1004] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.332079][ T1004] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.393123][ T1004] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.407252][ T1004] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.972161][ T8772] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 385.012088][ T6147] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 385.073910][ T8777] fuse: Bad value for 'fd' [ 385.192047][ T6147] usb 3-1: Using ep0 maxpacket: 8 [ 385.244141][ T6147] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 385.276553][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.849'. [ 385.338001][ T6147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.410343][ T6147] pvrusb2: Hardware description: Terratec Grabster AV400 [ 385.433773][ T6147] pvrusb2: ********** [ 385.448945][ T8787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.853'. [ 385.470800][ T6147] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 385.482144][ T116] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 385.529361][ T6147] pvrusb2: Important functionality might not be entirely working. [ 385.557467][ T6147] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 385.630236][ T6147] pvrusb2: ********** [ 385.648316][ T2340] pvrusb2: Invalid write control endpoint [ 385.674502][ T116] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 385.684159][ T116] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 385.755338][ T116] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 385.804493][ T116] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 385.884176][ T8770] pvrusb2: Invalid write control endpoint [ 385.985891][ T116] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 386.028748][ T6132] usb 3-1: USB disconnect, device number 16 [ 386.060647][ T2340] pvrusb2: Invalid write control endpoint [ 386.071332][ T116] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 386.282073][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 386.300904][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 386.321859][ T116] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 387.082038][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 387.167102][ T116] usb 5-1: Product: syz [ 387.219820][ T2340] pvrusb2: Device being rendered inoperable [ 387.233839][ T116] usb 5-1: Manufacturer: syz [ 387.254327][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 387.267882][ T116] cdc_wdm 5-1:1.0: skipping garbage [ 387.332413][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 387.343177][ T116] cdc_wdm 5-1:1.0: skipping garbage [ 387.375131][ T116] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 387.382388][ T2340] pvrusb2: Attached sub-driver cx25840 [ 387.392530][ T116] cdc_wdm 5-1:1.0: Unknown control protocol [ 387.398503][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 387.432838][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 387.483979][ T5970] usb 5-1: USB disconnect, device number 11 [ 387.656901][ T8801] syzkaller0: entered promiscuous mode [ 387.662585][ T8801] syzkaller0: entered allmulticast mode [ 388.157043][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.163491][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.672111][ T116] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 389.962406][ T116] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 389.971076][ T116] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 390.015837][ T116] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 390.031663][ T116] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 390.071863][ T116] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 390.165783][ T116] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 390.202438][ T116] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 390.261128][ T116] usb 4-1: Product: syz [ 390.277216][ T116] usb 4-1: Manufacturer: syz [ 390.306307][ T8828] net_ratelimit: 6 callbacks suppressed [ 390.306331][ T8828] netlink: zone id is out of range [ 390.318358][ T8828] netlink: zone id is out of range [ 390.324114][ T8828] netlink: zone id is out of range [ 390.329336][ T8828] netlink: zone id is out of range [ 390.335775][ T8828] netlink: zone id is out of range [ 390.341687][ T8828] netlink: zone id is out of range [ 390.347495][ T8828] netlink: zone id is out of range [ 390.352755][ T8828] netlink: zone id is out of range [ 390.358038][ T8828] netlink: zone id is out of range [ 390.364527][ T8828] netlink: zone id is out of range [ 390.442575][ T8830] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 390.506477][ T116] cdc_wdm 4-1:1.0: skipping garbage [ 390.532128][ T116] cdc_wdm 4-1:1.0: skipping garbage [ 390.545283][ T116] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 390.552579][ T116] cdc_wdm 4-1:1.0: Unknown control protocol [ 390.712632][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 390.719267][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 390.725580][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 390.732185][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 390.738581][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 390.745170][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 390.751533][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 390.758120][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 390.764431][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 390.771043][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 390.777343][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 390.783944][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 390.790208][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 390.796810][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 390.803100][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 390.809777][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 390.816028][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 390.822615][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 390.828871][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 390.835459][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 390.852066][ T6147] usb 4-1: USB disconnect, device number 30 [ 390.858017][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 392.587608][ T8847] Invalid ELF header magic: != ELF [ 394.554283][ T7783] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 394.751798][ T7783] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 394.768997][ T7783] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 394.786908][ T8865] netlink: 'syz.0.872': attribute type 4 has an invalid length. [ 394.825082][ T7783] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 394.862090][ T7783] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 394.892028][ T7783] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 394.964102][ T7783] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 395.011725][ T7783] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 395.066081][ T7783] usb 6-1: Product: syz [ 395.090128][ T7783] usb 6-1: Manufacturer: syz [ 395.175289][ T7783] cdc_wdm 6-1:1.0: skipping garbage [ 395.202149][ T7783] cdc_wdm 6-1:1.0: skipping garbage [ 395.218882][ T7783] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 395.229503][ T7783] cdc_wdm 6-1:1.0: Unknown control protocol [ 395.373642][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 395.381798][ T116] usb 6-1: USB disconnect, device number 24 [ 395.387890][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 395.832850][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 396.453565][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 396.466224][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 396.690710][ T8879] hub 1-0:1.0: USB hub found [ 396.728812][ T8879] hub 1-0:1.0: 1 port detected [ 398.102058][ T6263] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 398.272068][ T6263] usb 1-1: Using ep0 maxpacket: 8 [ 398.309751][ T6263] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 398.359450][ T6263] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 398.398218][ T6263] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 398.449916][ T6263] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.499525][ T6263] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 398.532754][ T6263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.585279][ T6263] usbtmc 1-1:16.0: bulk endpoints not found [ 398.592065][ T116] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 398.762565][ T116] usb 6-1: device descriptor read/64, error -71 [ 399.202895][ T8906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.294129][ T8906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.365811][ T116] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 399.537446][ T116] usb 6-1: device descriptor read/64, error -71 [ 399.712514][ T116] usb usb6-port1: attempt power cycle [ 400.052039][ T116] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 400.075428][ T116] usb 6-1: device descriptor read/8, error -71 [ 400.335477][ T116] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 400.362878][ T116] usb 6-1: device descriptor read/8, error -71 [ 400.833690][ T116] usb usb6-port1: unable to enumerate USB device [ 401.342627][ T6147] usb 1-1: USB disconnect, device number 7 [ 401.732297][ T116] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 401.940546][ T116] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 401.978551][ T116] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 402.008953][ T116] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 402.053866][ T116] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 402.113624][ T116] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 402.214746][ T116] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 402.254242][ T116] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 402.283621][ T116] usb 3-1: Product: syz [ 402.287837][ T116] usb 3-1: Manufacturer: syz [ 402.329571][ T116] cdc_wdm 3-1:1.0: skipping garbage [ 402.342134][ T6147] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 402.349754][ T5925] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 402.364502][ T116] cdc_wdm 3-1:1.0: skipping garbage [ 402.403553][ T116] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 402.409504][ T116] cdc_wdm 3-1:1.0: Unknown control protocol [ 402.502243][ T6147] usb 1-1: Using ep0 maxpacket: 16 [ 402.524273][ T5925] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 402.534039][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.543346][ T6147] usb 1-1: config 0 has no interfaces? [ 402.548975][ T6147] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 402.570384][ T6147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.580044][ T5925] usb 2-1: config 0 descriptor?? [ 402.594698][ C1] wdm_int_callback: 65 callbacks suppressed [ 402.594722][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 402.607187][ C1] wdm_int_callback: 65 callbacks suppressed [ 402.607208][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 402.619435][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 402.626032][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 402.632457][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 402.639070][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 402.645319][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 402.651905][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 402.658233][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 402.664823][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 402.671115][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 402.677700][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 402.684100][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 402.690689][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 402.697092][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 402.703772][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 402.710047][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 402.716634][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 402.722879][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 402.729468][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 402.737098][ T30] usb 3-1: USB disconnect, device number 17 [ 402.743106][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 402.784487][ T5925] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 402.805147][ T6147] usb 1-1: config 0 descriptor?? [ 403.196349][ T8952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.205930][ T8952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.383711][ T5925] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 403.584612][ T5925] gspca_cpia1: usb_control_msg 01, error -32 [ 403.882226][ T5925] gspca_cpia1: usb_control_msg 01, error -71 [ 403.888806][ T5925] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 403.939404][ T5925] usb 2-1: USB disconnect, device number 10 [ 404.329998][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 406.956502][ T7783] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 407.185921][ T7783] usb 5-1: Using ep0 maxpacket: 8 [ 407.208092][ T7783] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 407.236561][ T7783] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 407.292359][ T7783] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 407.315698][ T7783] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.331128][ T7783] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 407.340670][ T7783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.396460][ T7783] usbtmc 5-1:16.0: bulk endpoints not found [ 407.612081][ T5925] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 407.683080][ T6263] usb 1-1: USB disconnect, device number 8 [ 407.752056][ T5925] usb 6-1: device descriptor read/64, error -71 [ 407.977770][ T9002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.998476][ T5925] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 408.032408][ T9002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.186260][ T5925] usb 6-1: device descriptor read/64, error -71 [ 408.333768][ T5925] usb usb6-port1: attempt power cycle [ 408.560121][ T9010] Invalid ELF header magic: != ELF [ 408.752996][ T5925] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 408.814854][ T5925] usb 6-1: device descriptor read/8, error -71 [ 409.126470][ T5925] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 409.232732][ T5925] usb 6-1: device descriptor read/8, error -71 [ 409.353758][ T5925] usb usb6-port1: unable to enumerate USB device [ 409.394745][ T5918] usb 5-1: USB disconnect, device number 12 [ 409.719455][ T9027] net_ratelimit: 6 callbacks suppressed [ 409.719523][ T9027] netlink: zone id is out of range [ 409.730661][ T9027] netlink: zone id is out of range [ 409.735972][ T9027] netlink: zone id is out of range [ 409.741203][ T9027] netlink: zone id is out of range [ 409.746425][ T9027] netlink: zone id is out of range [ 409.751599][ T9027] netlink: zone id is out of range [ 409.756829][ T9027] netlink: zone id is out of range [ 409.762057][ T9027] netlink: zone id is out of range [ 409.767219][ T9027] netlink: zone id is out of range [ 409.772533][ T9027] netlink: zone id is out of range [ 410.947834][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.917'. [ 413.352028][ T5918] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 413.610311][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 413.626155][ T5918] usb 4-1: config 0 has no interfaces? [ 413.641837][ T5918] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 413.661552][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.687380][ T5918] usb 4-1: config 0 descriptor?? [ 414.076839][ T9068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.086332][ T9068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.023021][ T9079] netlink: 88 bytes leftover after parsing attributes in process `syz.5.924'. [ 415.040610][ T9079] netlink: 'syz.5.924': attribute type 21 has an invalid length. [ 415.066155][ T9079] netlink: 128 bytes leftover after parsing attributes in process `syz.5.924'. [ 415.121026][ T9079] netlink: 'syz.5.924': attribute type 4 has an invalid length. [ 415.221061][ T9079] netlink: 3 bytes leftover after parsing attributes in process `syz.5.924'. [ 415.232205][ T6263] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 415.300928][ T9082] batadv1: entered promiscuous mode [ 415.333318][ T9082] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 415.422111][ T6263] usb 5-1: Using ep0 maxpacket: 8 [ 415.432559][ T6263] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 415.446942][ T6263] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 415.469578][ T6263] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 415.503416][ T6263] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 415.528907][ T6263] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.578941][ T6263] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 415.621777][ T6263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.695371][ T6263] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 416.241432][ T9090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.254101][ T9090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.682064][ T6001] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 416.812437][ T5918] usb 4-1: USB disconnect, device number 31 [ 416.852077][ T6001] usb 3-1: Using ep0 maxpacket: 32 [ 416.875316][ T6001] usb 3-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 417.035081][ T6001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.050335][ T6001] usb 3-1: config 0 descriptor?? [ 417.076794][ T6001] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 417.133706][ T6001] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 417.178846][ T6001] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 417.196940][ T6001] usb 3-1: media controller created [ 417.486045][ T9094] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN NOPTI [ 417.498167][ T9094] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 417.506587][ T9094] CPU: 0 UID: 0 PID: 9094 Comm: syz.2.930 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.517380][ T9094] Tainted: [L]=SOFTLOCKUP [ 417.521700][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 417.531763][ T9094] RIP: 0010:__mutex_lock+0x15c/0x1ca0 [ 417.537159][ T9094] Code: 08 84 d2 0f 85 f3 13 00 00 44 8b 0d 4e b9 49 0f 45 85 c9 75 29 48 b8 00 00 00 00 00 fc ff df 49 8d 7f 60 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d9 13 00 00 4d 3b 7f 60 0f 85 ff 09 00 00 bf 01 [ 417.556787][ T9094] RSP: 0018:ffffc900203277b0 EFLAGS: 00010212 [ 417.562870][ T9094] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 417.570845][ T9094] RDX: 0000000000000019 RSI: ffffffff8daa6571 RDI: 00000000000000c8 [ 417.578818][ T9094] RBP: ffffc90020327930 R08: ffffffff87d2e545 R09: 0000000000000000 [ 417.586800][ T9094] R10: ffffc90020327948 R11: 0000000000000001 R12: 0000000000000000 [ 417.594781][ T9094] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000068 [ 417.602774][ T9094] FS: 00007f5da24996c0(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 417.611718][ T9094] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.618311][ T9094] CR2: 000000110c3b7c49 CR3: 00000000463f1000 CR4: 0000000000350ef0 [ 417.626294][ T9094] Call Trace: [ 417.629573][ T9094] [ 417.632506][ T9094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.638160][ T9094] ? __mutex_lock+0x27b/0x1ca0 [ 417.642933][ T9094] ? dvb_usbv2_generic_write+0x25/0x50 [ 417.648402][ T9094] ? mxl111sf_ctrl_msg+0xc0/0x2f0 [ 417.653461][ T9094] ? __pfx___mutex_lock+0x10/0x10 [ 417.658496][ T9094] ? __pfx___mutex_lock+0x10/0x10 [ 417.663525][ T9094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.669178][ T9094] ? __pfx___might_resched+0x10/0x10 [ 417.674476][ T9094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.680128][ T9094] ? __mutex_lock+0x27b/0x1ca0 [ 417.684904][ T9094] ? dvb_usbv2_generic_write+0x25/0x50 [ 417.690372][ T9094] dvb_usbv2_generic_write+0x25/0x50 [ 417.695672][ T9094] mxl111sf_ctrl_msg+0x242/0x2f0 [ 417.700647][ T9094] mxl111sf_write_reg+0x95/0x1a0 [ 417.705613][ T9094] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 417.711193][ T9094] mxl111sf_i2c_start+0x6e/0x280 [ 417.716160][ T9094] mxl111sf_i2c_xfer+0x1e9d/0x3be0 [ 417.721303][ T9094] ? stack_trace_save+0x8e/0xc0 [ 417.726172][ T9094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.731824][ T9094] ? kasan_save_stack+0x33/0x60 [ 417.736694][ T9094] ? kasan_save_track+0x14/0x30 [ 417.741561][ T9094] ? __kasan_kmalloc+0xaa/0xb0 [ 417.746336][ T9094] ? __kmalloc_noprof+0x33d/0x910 [ 417.751388][ T9094] ? do_syscall_64+0xcd/0xf80 [ 417.756098][ T9094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.761751][ T9094] ? look_up_lock_class+0x59/0x130 [ 417.766893][ T9094] ? register_lock_class+0x41/0x4b0 [ 417.772109][ T9094] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 417.777602][ T9094] ? look_up_lock_class+0x59/0x130 [ 417.782750][ T9094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.788401][ T9094] ? __lock_acquire+0x436/0x2890 [ 417.793356][ T9094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.799005][ T9094] ? __lock_acquire+0x436/0x2890 [ 417.803965][ T9094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.809621][ T9094] __i2c_transfer+0x6b6/0x2100 [ 417.814417][ T9094] ? lockdep_hardirqs_on+0x7c/0x110 [ 417.819652][ T9094] ? __pfx___i2c_transfer+0x10/0x10 [ 417.824883][ T9094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.830534][ T9094] ? rt_mutex_slowtrylock+0xc9/0x100 [ 417.835838][ T9094] i2c_transfer+0x1da/0x380 [ 417.840466][ T9094] i2cdev_ioctl_rdwr+0x373/0x710 [ 417.845436][ T9094] i2cdev_ioctl+0x628/0x840 [ 417.849964][ T9094] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 417.855012][ T9094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.860661][ T9094] ? __fget_files+0x20e/0x3c0 [ 417.865368][ T9094] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 417.870446][ T9094] __x64_sys_ioctl+0x18e/0x210 [ 417.875227][ T9094] do_syscall_64+0xcd/0xf80 [ 417.879770][ T9094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.885767][ T9094] RIP: 0033:0x7f5da158f749 [ 417.890275][ T9094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.909905][ T9094] RSP: 002b:00007f5da2499038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.918340][ T9094] RAX: ffffffffffffffda RBX: 00007f5da17e5fa0 RCX: 00007f5da158f749 [ 417.926319][ T9094] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 417.934296][ T9094] RBP: 00007f5da1613f91 R08: 0000000000000000 R09: 0000000000000000 [ 417.942272][ T9094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.950244][ T9094] R13: 00007f5da17e6038 R14: 00007f5da17e5fa0 R15: 00007fffc42c0258 [ 417.958230][ T9094] [ 417.961242][ T9094] Modules linked in: [ 417.965680][ T9094] ---[ end trace 0000000000000000 ]--- [ 418.032225][ T6001] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 418.048949][ T9094] RIP: 0010:__mutex_lock+0x15c/0x1ca0 [ 418.059139][ T9094] Code: 08 84 d2 0f 85 f3 13 00 00 44 8b 0d 4e b9 49 0f 45 85 c9 75 29 48 b8 00 00 00 00 00 fc ff df 49 8d 7f 60 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d9 13 00 00 4d 3b 7f 60 0f 85 ff 09 00 00 bf 01 [ 418.086519][ T9094] RSP: 0018:ffffc900203277b0 EFLAGS: 00010212 [ 418.092698][ T9094] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 418.096540][ T6001] usb 3-1: selecting invalid altsetting 1 [ 418.101026][ T9094] RDX: 0000000000000019 RSI: ffffffff8daa6571 RDI: 00000000000000c8 [ 418.114663][ T9094] RBP: ffffc90020327930 R08: ffffffff87d2e545 R09: 0000000000000000 [ 418.123179][ T9094] R10: ffffc90020327948 R11: 0000000000000001 R12: 0000000000000000 [ 418.133123][ T9094] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000068 [ 418.142100][ T9094] FS: 00007f5da24996c0(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000 [ 418.154623][ T9094] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.161421][ T9094] CR2: 00007f2b66b72100 CR3: 00000000463f1000 CR4: 0000000000350ef0 [ 418.169639][ T9094] Kernel panic - not syncing: Fatal exception [ 418.176032][ T9094] Kernel Offset: disabled [ 418.180358][ T9094] Rebooting in 86400 seconds..