last executing test programs:

12.151451409s ago: executing program 3 (id=2739):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0)

12.021425061s ago: executing program 3 (id=2740):
syz_open_dev$video4linux(0x0, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="802500003f0007012bbd7000fcffffff017c00004725fc8008002800", @ANYRES32, @ANYBLOB="b411f58010011c8008003800", @ANYRES32, @ANYBLOB="04009d8089dfae881e2258f15a8c170af27ef83200bffcc79f423517bb14e96e448d5c2fa3ea61111c94d4836336d57c33ce5ffa4ae0444cb4c81795b47799cb307a43d2bc2585ce61439ba68586fe402ca937ce86870735421c619215addbcadfb786ec9c0deefe44927d2500d7c156668c275ba71f94db2327d7ef3bbcec185ce4eba000fb281a5ec53b67e22c41c02d240869619c2b9f1725b06abe5ee5dbdcdfdd9129e14248288811e8192d39add94f0f67397b02dd738ba43b0b4fd7ac108f28c6ea9da24c2690024ec8bcaf9821c0fb4989ffd21160286288ca3b7add5feb03f48b2de2d3574733cfc1d6dc32438e6964dbb8dd3ce58e6a860400588004002c802f8235754c14beabd36b83ad6bb614d8df9a0b2f23f5fc064ec3955aca522ea46619844f677f282ba0cbaaca0d1dc591d2207043c963396af166665d3a3baac7359b180c19dff61040c99d927af5d6db7d0728ea9ab1711e3ad63ba14f3a19af35e1af079910ea11f963f972b161e47105413ec02b6882810990e442f6ab6f8aa370053271cc4223d87fea49ebb9c4577e3f2269d3a498b1429b6f50cef3266ff0c5c88cf6c5c2e66816cf86576df3496b86b9da294a49b91da22720ecfdab9c459cbf970edc4ad46fca9937b55a2bd723350a8bb8cd63ec178b6af64900219d55643e82f7e8d4d05e13d69d571bce10fc63f2961ce792056dc8832f07ebf547b4e7dddfae6f2dccbdd74eed870cf809c8cd090a776189838e7af9d5cb14ae491eb0bb194dd03673e26e8cfe1cb86262c37bb1d1aa527d07b9013764753c12b12b46c92ecda912c28914bf58b7c653b4bab3934a0cd8dcbeaf82feb44e8fdf441f0b63588e8413833acfaabf04850f96e20441a9527a5537c5c17a8e2628faafa28084117d50ee51e34c2c8ac77ca9afb74da8d3b9f8d47865f5e17d5e98958e3635c50f06e09296f6d5199551a5b57dd67ced243416599e0990eebec1135a0ba54f715adb25726317e2dd8e03183f6bc96aa429f9aa08eaec957b03f6134007b402129bb59910ab15a09c520f7739cf77a473a6bb72eab244eab811a9a7f37a208cec6ad144ad7ca31014a9bf0939bd046480fe9fa9b8b6cb8fe9ae16ea94c24442aa68f67b5515b0704d511cfee37020fae3ffa7b735112cc0aa718d873e184865f0e528e7557a1241581ae130aa1a0eeb522c99f1e7d7813f8a91510cc38336f029df5fcb84af2a33306a6a6268bedf2a3b864e8a8a6146cf297412322a76b06653a8297aa5f502708c87acecbacdd012c34e74b6bbe0b849a966c67244df4bcf59c1b3b009144103875b73357412965f2060c077ffcd6d327668cf6a54ea5e858486341f27530203029f1fa6855f4ce3109cc35ea77cf3fb25d43a72a3e2dbcf9d16f53bcee06ad6de67bdba6bbe46d66ce63f4d4a534784f06a4636e629953f316a6b7e5853c913700f7f9cf05e01da6716b41afdcb1fca3001a76ba57f59c3fb8edbea7d288165c79e0942c1b7f84fce623659686da01b6697523e9b39d55e7cdbe77c879325025e028d5b983b7c3bfc0ccdbaecc24395715f05d7785f01eccb009cc7bea4aecf2d129d49158b503ffba141e94f12292408fb7f19ac866f9a43885784fe6dd0d2ce452d7495eef16238fefba7815ff739d401c4be9de514994190f7877845f477a2612d1927ff93de1a669a8f6eb8973fb7d5eb527a931df9b7aee5d4fa3a9c18f17aeede0137eea02fd6018a56ed147c9229c81a5528e0d0f58dedb1af8ac92086ed50e4225a2f84a2560fc9b334d64b543d005249a2f40ce672c7d1e4412860194110fbb3bda682636680c51d62e3b7d23223d9a896ad7235433b277d15adfd593319e6d66fe9feecf539e3d46abefc69bdb1494975ba0bea83fc46057d0d3d6d760e8b0e13de4904384dd22ecb7edd1407a980d6b8c869a5cd507a3790d3583f30693f947dc482ea6baa557d8a34987e43fc320c5acefba8f11c97feff83777525f9628acc805399eb3f8d962a2d7a445ccd6b8dde53e14860e5502193a14f54b6326ed9acd166c6da82df5efa847f09f36df09c5df0bcbe79311e3f98ecc7aa2138531159be588005397035400ac58d03ad1855b19e42485850a780595da1043e1582e7263ba31e6a44a99267d473864c5f95c36d2a8945560718ddf4375da7c7727464df01156da7e9c79f51739ec8e9ac65e612422a099885a8181f65e556f2d8a839f47abd0ff8a1e2a47110d3d193a6bdc8b23e8615e13107c33e419c6426771d08904c26f229d147994c02fea8b4acf5b5a3530fb370b7a625f7deefec93a49adfd7932f7f59e84d46565a0359e69c0fbfee40bf11c555287dffeffb368885bee904a99c5edf4b84049e1aea0ec764959c5f2afc2e8167c621bc2c8c7dd2b865a70a1950ed151bd213642912af5a8dabceda989c6762a241830dcab291a63c837cec9deb5eff62803169bcf4c3293be4d981f302e1d88a37de0613d90bba7842064614d74044ffd206779332a3c8fdb367fcbf7c3316f1bdee86df76d5b4658695564c44efdfe575d17534ee33921aec0882d9b9c3537be4013b696419b7c8ad9cd5b272010a22dc952d9cf80e1f0c2ed119c56f4bfdaa516c6d9197c02277c817f836e1dd24abe43b998a95d96479c0bffd9d3299b9fbb588c2ad1c40b8b060b25b26b7763335d40808afb0210f6c4c308c4ac873ba816562f353b33772cc727fa8ed2db54aa92a923bfc58b8e8d2cf34a41093205a25500212dc88601d5372a97aa82f357c5496929f99409327538e1d7073be1e3e905262e6bc684219992128925d830711b720cbb8a548f58ed849dd4ae846dc7a966080b5e0321abd8cc5b059d58ded216521620c805735d82606205a285c3726942166a7c7e7e8d537d65f39628657b6f550b77306e86a43a501e485130abe20fe240ebd3ddf106be52c46c7db59bffdc3b1240b01f768c6d01d5f3b18fbca52b1a236f3cea13723a1f4550cbce4d990a63cb941e118e320b73b3641817c37e43d89d972f7315c4cd9dd9fc1120ad983809b06fb607605ed1e9673f5862f4ffbdc4ef36eee06a3fab8a541ab4a59c0159d25d673c72547de309524bd2f020ee6526d69d3d8607f2f05db5f80cb02bdf1a1bf9d0411843d0d120815fc895ba0ec22798d708e86d437c23266b19ff218068bd6a9bcea164fde29591068526e495d39351fbbb3dbd17b4dc24d87e7462528ff9bff9ba0eefa7e532825db56030f55e786dd8f98fe29ee3dcd103aab167153f9a8868fb97742758106b1f8d5cae9f9f7795d8225988fa7c621ee8270710a21a1308ecbb201094b4fbfae3ac9bd324a35a2b738e50cb1e109d7647412583fca24b81ac925716934d709f01488f0faca4d95c398b7b7cc49a64d918286705c1d5a0ffe0e612ac37739e260787ad65e546782d670607a2dcd9bbb6b2567883a72d8727c9066fd25af2989bf071a95566b660993680b8747bea7478d5b9f0d27bacb8e07f368b1c5f8f0c4d8fcb364bcb9a62a814a21513ced6ec5643bb3ff8fd5c02b823c21b0954184f2beb17913ad996beecafd7021891c51a802fd9507b9f287cb711b136bc4a34a81665e1a08a04b7802addb24010b4df0fca3cd0b8c8063eb792577d02c267c7d5b3e83f8c95401a55b8e43f8fc91dc97a9980e7bdddba019c23103cb1b2667f0a46cd6c84deca18222e66efeccbe9511001983c7b7de976c97ae388f1be4d8e72a318cd04a7fd4eb8b5fe2b10e47a10b3642539bdfa6f01b0508c98022fa714b8bd2a58d45915b4269cc3cee7196a9a37fa93cd23ad322068b8ed767c940fdeafaf6832132daeb150f654b319e20c6a47e957bebf325fda7204a7480eea8fff9dd890fd7d6f26443a500fe25c5fe9fd68f85ea078de73c54ad26e2c0263f5a83e1baeb6b03fb6b24b4997142c4ab4ee7c69d080a3a284abf42629122b7ffb9b1766631ffa4ee0b5ff19f497c939bc97eaa023160d8f9420a1506bf60610e1e5606f82d29ab78a2dd79eab4fda463e8aee30cde7611cfe0d74f18785947dbba35a712eb7dc53b15d6387de5df9c96732a3e2b541cee75ec3c81be865df84b11be36dc7087d70cc51e49274736b90921a6f764dca3429d787c711a1959f383c8a7bd2f171d84d99d6979882e6110c9c193390d43169766338bd0347f3df7bce56851b972f9058509c4bdc473e419aa4ad54e6f08dc60fcffa330d88bbc9bd3f8cf95931e6ce6be73926ab8022c4d374f4c8b5f108033f34c7342b46129e83d3781360800c165e24ebf2b1d865cedf4da16ef072273a575d4dea044006e6874d4d7a6cdb89e61a58e5452aa6d196a76a7003fd1053f265fb99966e407fb418b8b8e57a6b5961c929f6c8b5f27109c4e7de4bb42ac2db98138cd60b60c6493e5e8db6d9486f123ab3bcfa14c899ae2642d6337a5a8f336b7c2e047549150a340e1f5919c465cbd39eeeeea5de28769463c0e6104e8fc073af83f44c0f7735d36867ce47b5da6f84443d40bb41315ebcf1b7240cbaaf5f925f2609b7c53498878ba65ff10d6900339e855713e324cfb8dcde681d5812ad79df1a173f5538ec8f1927407db40535c35e88a03128a99043cde2e11e82ffd12d6d9799b33392526bf83da1f30ed55118e35b5407ea2d2bf92e0b62a73db3b9587e8da4d0385509debded50c7328544e918be343eb759e8f2e19536d21b8acc35f4daf9fc72b5cc1696f848a4fa9dc318ba25e9a6509cdfae0621b1441ae437d59e64d936d1f4e4ff7d25e9fa7adaf2925a6ed67d1f9d10fe1ccae79759fc1196e6a7d32336f409a9b16a3ca69a54de14117b48091d025ec6dbe8bf7c2fd1e55004403f4a9bd4496879d42078e2d9374aa18722af8be9bd745e56989c2f16e75d81c92ec840d5bf1a604c2842c496f300efb2bde805cefe0fca2f890532dc506ef756a13f79b2b970d4b04c2f15c58369dbb3ac8ba2c0d97ea978ad8e37e83f0d4b15aa51c6c7e1dcde49c5d2906b3d6b0405201ca9549eee852bce8624785bb451a05eabfbb9a8fa5fa32709d6ce1c09e4ca59ec0e79ffae7c02d44155089514d35bbbccfa8107187fdaee78b8d9e6a37f2b767a1f3789410b6fbe49acfdccf7dffe413fc8ef20a3161992414031325cc18126b1aca0d422a0dc265c11a5325fd03473268406146e4b9737b31130167a8c2bc289f4cd9b6419c5574d0a8ccac9adb7d98888d11b078fb1532ad5819b1f56dd0631cba5a93136b5885b3bbe715ad777928375c5181bf2052fe10b3151ab1a8bedf751ef0bf1e093c682c1f7f27f3ef437f70d1ff30c2f13395d6b0ebfef4dd60c7f67f0471d41bad08abed63932fddfffbbf2d89431e677b05368a77c733a9bd0eb832574e383f2568081f00d8c911dccf54131dc1a94d52cdbef34bbea39a8c441c0cb6275d8b7c07f1c7437eb13fbf9bf24fb0908c5cc7098468acbe39d738ce4768ad4d50b60f971689a07544b08deba1c61a3717ebd52cd1efe06b05333f62b5ce4e85ebe88c0c004f989b0da76615f16a67f921ff1a368e1668e4b0e14732a806cf905f38269434ddd760b457628453fb0d4326c626a51eacd9574ef975e2a25587f213930f57e0f0d6739842003d836b0a5265710aff3362e40cbb9adf4a22086c334e6e99c89ed1cc84842edaf14fb6b98bd5c1d4a50d7900c03ea770d55095bd6dee4de9f692f505eb43f8d209853a158c0e17223c353e620eaba107f7ba5b04cf2888f03df7a50050e4c696411c1423fd53fbc351b1784f0fd4f5f05c2b44f41964a2dea6fb83fa3a340dae84df47a4c473614e6e6449fee039ec0879c8ffe79a281635ab8808588170937c553ac5867a31ed14399dca6051b697b15780ebb5028ad4d3387457ab25860b1dff1d4f5ef3801d582978e11036e7b34627fd90654fb94e432f861767b6196c9e16dbb978578e0d1fb222d3480e526cbf0377cb901ef922aac074fa7c5756330c71719560b953acb8245af315a38caaae1a0890ad346028d7cc1a8688e21002cc478b844f50ecc1e9cbdc9f38754741567a3e286dfb272b36a54dd9259b9cbc40f86261463668047f974eaca6fb59135befc4e0cd28f8679cd5f81c540f8524ca3f540bdcc3f07b8601f10d45006700078f63f070309f43ff1874602e2b74b60b9737b556e682ee1894d5a503e4b978df2169f95cc8dc2dbe39e7c7a652430501a41c6b35ffcf8c2a2da235879213beb90000000800b200ac1e01014d004780f1bc5fc176a74e3876ad21f1ab8157c89833d6a08d513ae67f8906c90d9da5363bc3488dbee05760ca9103a709ce4e7cb05566828a9696c240bf1a4ba1e0b8b874f38f234af2c09f8400000064004e8014003d8008006000", @ANYRES32, @ANYBLOB="050097000000000008003900", @ANYRES32, @ANYBLOB="24d2bd9144e0d394f4c21998a903dc34706971f1deea6fedc4f6ec986304f48ecaab5cd2c6e6ea9e5be01870c78f025d9f38bed687cec631a122aa216c8df2e11410364f2c01098061006280"], 0x2580}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r1 = socket$key(0xf, 0x3, 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setuid(0xee00)
r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000))
setrlimit(0x40000000000008, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
sendmsg$key(r1, &(0x7f00000000c0)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x4044884)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000300)={&(0x7f00000004c0)={0x34, 0x0, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}}, 0x4000)

10.390537916s ago: executing program 3 (id=2743):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109242, 0x0)
close(r1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r3)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

9.893460917s ago: executing program 0 (id=2745):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0)
socket$kcm(0xa, 0x5, 0x0)
recvmsg$kcm(r3, 0x0, 0x10000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

7.288569923s ago: executing program 1 (id=2750):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2}, {0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x18}], 0x18, 0x10}], 0x2, 0x800)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

7.024186829s ago: executing program 1 (id=2751):
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x20000010)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r3, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0x30000009})
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000014)
unshare(0x2040400)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0xfffffffc, 0x0, 0x0, 0x81, 0xffffffff})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000055)
r4 = getuid()
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
setresuid(r4, r4, 0x0)
utimensat(r5, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0)

5.989795831s ago: executing program 1 (id=2752):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setresuid(0x0, 0x0, 0xee01)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000009800000054000000080002"], 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r4 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0)
sendmmsg$inet(r4, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40)
sendmsg$NL80211_CMD_SET_COALESCE(r4, 0x0, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001900010000000000000000008020000000110005000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="0800020000000001"], 0x30}}, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x10003, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_names\x00')
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1, 0x9, 0x0)

5.077436831s ago: executing program 1 (id=2753):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
write$nci(r0, 0x0, 0x7)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000501"], 0x4)

4.849675625s ago: executing program 2 (id=2754):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
fchownat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1000)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000019300)={0x0, @in6={{0xa, 0x4e24, 0xa6d8, @remote, 0x1}}, 0x3, 0x2, 0x7, 0x3, 0x4}, &(0x7f00000193c0)=0x98)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)

4.834483146s ago: executing program 0 (id=2755):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0193acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417bb7f527c0bfebec112d57fc69fabb9b31ef97b2147930ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a3332978da70e9050417087c5ae034a735e8b448dd97014043159cbaacebfc912cf05f608e6214c04099fa311b747c37af702d134fb8eec487cfaea91150d1980464ff31cf86e3f3b950b204f6f67810c0826e4e5467c1588de9816bc627fb4662ac5fc8e38f19ec065550e5f9b16f72a91144a2e52ba9f2c6a7e2afbabc533ac731bb7ec51b8c585c2749469da331006ca4d49e136189d21ae50455834b2e75efd81c9d6352e5a814cf002f294475dab27a10d87516e405eff30", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

4.580307581s ago: executing program 3 (id=2756):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4)
socket(0x1d, 0x2, 0x6)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x3018018, &(0x7f0000000040)=ANY=[], 0xd0, 0x599, &(0x7f0000000b80)="$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")
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xfffffffb, 0x4cc3, 0x34325842, 0x5, 0x3, [{0x2, 0xffff}, {0x5, 0xb}, {0x0, 0x3}, {0x6, 0xfffffff2}, {0x7, 0x5d2}, {0x0, 0xfffffff7}, {0x402, 0x1}, {0x9, 0x3}], 0x7f, 0x5, 0x4, 0x2}})
r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0)
write$khugepaged_scan(r2, &(0x7f0000000000), 0x8)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000031c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES16=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40802)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084)
fcntl$lock(r2, 0x24, 0x0)

4.296356327s ago: executing program 2 (id=2757):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009100), 0x0, 0x12100, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d7", 0x3, 0xffffffffffffffff)
keyctl$read(0xb, r3, &(0x7f0000000480)=""/138, 0x1001)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x78, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4f}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x274f79d09a956e01}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb1}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x78}}, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r4, 0x0, 0x0)

3.961440085s ago: executing program 0 (id=2758):
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
socket(0x1e, 0x2, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = inotify_init()
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4b8200, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x8000})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x20)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000080)={0x20004, <r5=>r3, 0x2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r6=>0x0], 0x0, 0x0, 0x59, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x1, r6, 0xff, 0x100007, 0xa, 0x1ff, 0x1})
r7 = openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r7, 0xc01864c1, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r5, 0xc01864c1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, &(0x7f0000000080)})
syslog(0x3, &(0x7f0000000200)=""/90, 0x5a)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000340)={0x4, 0x9, 0x4adb, 0x58e, <r8=>0x0}, &(0x7f0000000380)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={r8, 0x10001}, 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)

3.302423199s ago: executing program 3 (id=2759):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0)
getsockname$packet(r0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)
bind$bt_hci(r0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x402)
ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000002440)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "941118", 0x0, 0x3a, 0xff, @remote, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000007880)=""/102400, 0x19000)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x5, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.277896539s ago: executing program 2 (id=2760):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0x30, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xe, 0x93}, 0xe)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0)

3.003547525s ago: executing program 2 (id=2761):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setresuid(0x0, 0x0, 0xee01)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000009800000054000000080002"], 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r4 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0)
sendmmsg$inet(r4, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40)
sendmsg$NL80211_CMD_SET_COALESCE(r4, 0x0, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001900010000000000000000008020000000110005000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="0800020000000001"], 0x30}}, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x10003, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_names\x00')
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1, 0x9, 0x0)

1.87665406s ago: executing program 0 (id=2762):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a30404000800"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0)

1.772433322s ago: executing program 2 (id=2763):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0)
socket$kcm(0xa, 0x5, 0x0)
recvmsg$kcm(r3, 0x0, 0x10000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

1.765740652s ago: executing program 1 (id=2764):
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x18, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02)
ioctl$VIDIOC_S_CROP(r1, 0x4014563c, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000002a000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))
ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100))
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3'])
chdir(&(0x7f0000000100)='./file0\x00')
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x59)
quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x66)
socket$nl_route(0x10, 0x3, 0x0)

1.696801633s ago: executing program 0 (id=2765):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
fchownat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1000)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000019300)={0x0, @in6={{0xa, 0x4e24, 0xa6d8, @remote, 0x1}}, 0x3, 0x2, 0x7, 0x3, 0x4}, &(0x7f00000193c0)=0x98)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)

594.651027ms ago: executing program 2 (id=2766):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x106, 0x4}}, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
rmdir(&(0x7f00000000c0)='./bus\x00')
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r5=>0x0})
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, 0x0)
ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000c40)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r1, 0x2}}, 0x18)

370.722302ms ago: executing program 1 (id=2767):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x0, 0x4e22, 0x419f, 0xa, 0x30, 0x40, 0x5c}, {0x4, 0x2, 0x4, 0x7, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x8}, {0x4, 0x6, 0x7, 0x4}, 0x7, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4d6, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3505, 0x1, 0x0, 0x6, 0x7, 0x4, 0x280000}}, 0xe8)
close(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7d)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080))
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)
r2 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0xd50, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, &(0x7f0000000f00)="00000000280000000000b48975e2a9e301ead441d182d2990491c8da20b7b3062152561230b3684bd8603baf025d071f3a4ddbe02e97611de98004d35f199c090442a82e8918a172e041f1c63e1309ceb0b4705c6584be1e6f277f627972a881cd6f7cde9bcce03a9dbd334106a54b482eb7f7378c2489edcc2ceacbde8cd46dce9f8dfbfa428186038c70a2b96b4c0a7b7b018a0e110b709bffc3a0e51dd25ba085e6be2d56dc070d84995b1f5b1508fc26e10ed8af6f33589f028da62ad409c1de0cffcc823ecf77175c4aeb838921c1cb4d92e1c2e0601b6025f6daa39477cb6c351afec1505752403c08e8fe73d419", 0x0, 0x2}, 0x50)
ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000200)={0x3, 0x382a, 0x0, 0x0})
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESHEX=r2])
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

23.827079ms ago: executing program 3 (id=2768):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009100), 0x0, 0x12100, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d7", 0x3, 0xffffffffffffffff)
keyctl$read(0xb, r3, &(0x7f0000000480)=""/138, 0x1001)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x78, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4f}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x274f79d09a956e01}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb1}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x78}}, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r4, 0x0, 0x0)

0s ago: executing program 0 (id=2769):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_audit(0x10, 0x3, 0x9)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x200000d0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2800"], 0x7c}}, 0x4000)
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x44010)
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x1)

kernel console output (not intermixed with test programs):

sing ep0 maxpacket: 16
[  637.431739][ T5812] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  637.447105][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  637.458074][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  637.467832][ T5812] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  637.478179][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  637.493044][ T5812] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  637.502399][ T5812] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  637.510488][ T5812] usb 3-1: Manufacturer: syz
[  637.525623][ T5812] usb 3-1: config 0 descriptor??
[  638.694823][ T5844] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  638.756861][ T5812] rc_core: IR keymap rc-hauppauge not found
[  638.799721][ T5812] Registered IR keymap rc-empty
[  638.840266][ T5812] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  638.903759][ T5812] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  638.983436][ T5812] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  638.999726][ T5844] usb 4-1: Using ep0 maxpacket: 32
[  639.048575][ T5844] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  639.097268][ T5844] usb 4-1: config 0 has no interface number 0
[  639.159979][ T5812] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29
[  639.173722][ T5844] usb 4-1: config 0 interface 255 has no altsetting 0
[  639.259892][ T5844] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  639.347825][ T5812] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  639.355771][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.371426][ T5844] usb 4-1: Product: syz
[  639.379927][ T5844] usb 4-1: Manufacturer: syz
[  639.389184][ T5844] usb 4-1: SerialNumber: syz
[  639.394240][ T5812] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  639.414008][ T5844] usb 4-1: config 0 descriptor??
[  640.138379][ T5812] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  640.158802][ T5844] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  640.183416][ T5844] dvb-usb: bulk message failed: -22 (4/0)
[  640.189200][ T5844] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  640.203328][ T5812] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  640.215856][ T5844] dvb-usb: bulk message failed: -22 (5/0)
[  640.233016][ T5844] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  640.248921][ T5812] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  640.321222][ T5812] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  640.383437][T10126] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  640.412950][ T5844] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  640.491168][ T5812] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  640.559234][ T5844] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  640.616970][ T5812] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  640.670577][ T5844] usb 4-1: media controller created
[  640.713601][ T5812] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  640.816003][ T5812] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  640.951653][ T5812] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  641.050462][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  641.058955][ T5812] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  641.133360][ T5812] usb 3-1: USB disconnect, device number 50
[  641.173806][ T5844] ttusb2: set interface to alts=3 failed
[  641.223325][T10126] usb 1-1: Using ep0 maxpacket: 32
[  641.245023][T10126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  641.293568][T10126] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  641.337486][T10126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.459001][ T5844] DVB: Unable to find symbol tda10086_attach()
[  641.474994][ T5844] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  641.670753][ T5844] dvb-usb: bulk message failed: -22 (4/0)
[  641.769977][ T5844] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  641.936808][ T5844] dvb-usb: bulk message failed: -22 (5/0)
[  642.029139][ T5844] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  642.143828][ T5844] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  642.248031][ T5844] usb 4-1: USB disconnect, device number 50
[  642.363256][T10126] usb 1-1: Product: syz
[  642.367495][T10126] usb 1-1: Manufacturer: syz
[  642.372119][T10126] usb 1-1: SerialNumber: syz
[  642.382537][T10126] usb 1-1: config 0 descriptor??
[  642.390268][T10126] hub 1-1:0.0: bad descriptor, ignoring hub
[  642.397710][T10126] hub: probe of 1-1:0.0 failed with error -5
[  642.428945][ T5844] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  642.655772][ T5783] Bluetooth: hci0: unexpected event for opcode 0x200c
[  642.783489][T10126] usb 1-1: USB disconnect, device number 54
[  645.903325][T10126] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  646.843471][T10126] usb 2-1: Using ep0 maxpacket: 32
[  646.874571][T10126] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  646.883420][T10126] usb 2-1: config 0 has no interface number 0
[  646.890850][T10126] usb 2-1: config 0 interface 255 has no altsetting 0
[  646.915092][T10126] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  646.924782][T10126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.932933][T10126] usb 2-1: Product: syz
[  646.940137][T10126] usb 2-1: Manufacturer: syz
[  646.949071][T10126] usb 2-1: SerialNumber: syz
[  646.984416][T10126] usb 2-1: config 0 descriptor??
[  647.019864][T10126] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  647.028431][T10126] dvb-usb: bulk message failed: -22 (4/0)
[  647.344016][T10126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  647.389930][T10126] dvb-usb: bulk message failed: -22 (5/0)
[  647.415576][T10126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  647.548408][T10126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  647.689912][T10126] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  647.712607][T10126] usb 2-1: media controller created
[  648.110592][T10126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  648.199614][T10126] ttusb2: set interface to alts=3 failed
[  648.295879][T10126] DVB: Unable to find symbol tda10086_attach()
[  648.453741][ T5779] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  648.470272][T10126] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  648.485686][T10126] dvb-usb: bulk message failed: -22 (4/0)
[  648.491868][T10126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  648.507936][T10126] dvb-usb: bulk message failed: -22 (5/0)
[  648.515161][T10126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  648.528235][T10126] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  648.588881][T10126] usb 2-1: USB disconnect, device number 44
[  648.643253][ T5779] usb 1-1: Using ep0 maxpacket: 32
[  648.667997][ T5779] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  648.755513][ T5779] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  648.775098][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.787948][ T5779] usb 1-1: Product: syz
[  648.792318][ T5779] usb 1-1: Manufacturer: syz
[  649.862382][ T5779] usb 1-1: SerialNumber: syz
[  650.169514][ T5779] usb 1-1: config 0 descriptor??
[  650.993711][T10126] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  651.007551][ T5779] hub 1-1:0.0: bad descriptor, ignoring hub
[  651.035695][ T5779] hub: probe of 1-1:0.0 failed with error -5
[  651.444041][ T5783] Bluetooth: hci0: unexpected event for opcode 0x200c
[  651.583751][ T9994] usb 1-1: USB disconnect, device number 55
[  653.263396][ T9994] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  653.443263][ T9994] usb 2-1: Using ep0 maxpacket: 32
[  654.392196][ T9994] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  654.400663][ T9994] usb 2-1: config 0 has no interface number 0
[  654.413754][ T9994] usb 2-1: config 0 interface 255 has no altsetting 0
[  654.425176][ T9994] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  654.434841][ T9994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.447339][ T9994] usb 2-1: Product: syz
[  654.456104][ T9994] usb 2-1: Manufacturer: syz
[  654.473348][ T9994] usb 2-1: SerialNumber: syz
[  654.484026][ T9994] usb 2-1: config 0 descriptor??
[  654.494695][ T9994] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  654.502420][ T9994] dvb-usb: bulk message failed: -22 (4/0)
[  654.509995][ T9994] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  654.520779][ T9994] dvb-usb: bulk message failed: -22 (5/0)
[  654.526646][ T9994] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  654.542851][ T9994] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  654.554320][ T9994] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  654.562946][ T9994] usb 2-1: media controller created
[  654.587305][ T9994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  654.630165][ T9994] ttusb2: set interface to alts=3 failed
[  654.801946][ T9994] DVB: Unable to find symbol tda10086_attach()
[  654.874094][ T9994] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  654.902857][ T9994] dvb-usb: bulk message failed: -22 (4/0)
[  654.911792][ T9994] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  654.922395][ T9994] dvb-usb: bulk message failed: -22 (5/0)
[  654.931757][ T9994] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  654.942302][ T9994] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  654.980720][ T9994] usb 2-1: USB disconnect, device number 45
[  655.079761][ T9994] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  658.933548][ T9994] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  659.127038][ T9994] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  659.248949][ T9994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.298039][ T9994] usb 1-1: Product: syz
[  659.311938][ T9994] usb 1-1: Manufacturer: syz
[  659.319769][ T9994] usb 1-1: SerialNumber: syz
[  659.349480][ T9994] usb 1-1: config 0 descriptor??
[  659.710382][ T9994] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 056
[  659.743546][T10126] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  659.933533][T10126] usb 3-1: Using ep0 maxpacket: 32
[  659.948513][T10126] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  659.981102][T10126] usb 3-1: config 0 has no interface number 0
[  660.029280][T10126] usb 3-1: config 0 interface 255 has no altsetting 0
[  660.105206][T10126] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  660.112044][ T9994]  (null): failure reading functionality
[  660.196116][T10126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.276040][T10126] usb 3-1: Product: syz
[  660.319897][T10126] usb 3-1: Manufacturer: syz
[  660.370841][T10126] usb 3-1: SerialNumber: syz
[  660.495689][T10126] usb 3-1: config 0 descriptor??
[  660.606629][T10126] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  660.651708][T10126] dvb-usb: bulk message failed: -22 (4/0)
[  660.683938][T10126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  660.705174][ T9994] i2c i2c-1: connected i2c-tiny-usb device
[  660.719034][T10126] dvb-usb: bulk message failed: -22 (5/0)
[  660.737719][T10126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  660.806635][T10126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  660.871914][T10126] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  660.906476][T10126] usb 3-1: media controller created
[  661.159396][T10126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  661.270435][ T9994] usb 1-1: USB disconnect, device number 56
[  661.293731][T10126] ttusb2: set interface to alts=3 failed
[  661.382946][T10126] DVB: Unable to find symbol tda10086_attach()
[  661.389192][T10126] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  661.409660][T10126] dvb-usb: bulk message failed: -22 (4/0)
[  661.423896][T10126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  661.453367][T10126] dvb-usb: bulk message failed: -22 (5/0)
[  661.459246][T10126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  661.490066][T10126] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  661.537114][T10126] usb 3-1: USB disconnect, device number 51
[  661.680468][T10126] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  662.438327][T11768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1878'.
[  664.593429][T10126] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  665.003683][T10126] usb 4-1: Using ep0 maxpacket: 32
[  665.014180][T10126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  665.036679][T10126] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  665.059023][T10126] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  665.068862][T10126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.085955][T10126] usb 4-1: Product: syz
[  665.092433][T10126] usb 4-1: Manufacturer: syz
[  665.113591][T10126] usb 4-1: SerialNumber: syz
[  665.134258][T10126] usb 4-1: config 0 descriptor??
[  665.159058][T10126] hub 4-1:0.0: bad descriptor, ignoring hub
[  665.175199][T10126] hub: probe of 4-1:0.0 failed with error -5
[  665.412708][ T5781] Bluetooth: hci2: unexpected event for opcode 0x200c
[  665.564197][T10126] usb 4-1: USB disconnect, device number 51
[  665.902092][T11820] comedi comedi3: board detection failed
[  669.243321][ T9994] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  669.453250][ T9994] usb 3-1: Using ep0 maxpacket: 32
[  669.930221][ T9994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  669.942678][ T9994] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  669.952619][ T9994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.961116][ T9994] usb 3-1: Product: syz
[  669.967857][ T9994] usb 3-1: Manufacturer: syz
[  669.973463][ T9994] usb 3-1: SerialNumber: syz
[  669.987157][ T9994] usb 3-1: config 0 descriptor??
[  670.005880][ T9994] hub 3-1:0.0: bad descriptor, ignoring hub
[  670.017853][ T9994] hub: probe of 3-1:0.0 failed with error -5
[  670.036621][ T9994] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input30
[  670.057094][ T9994] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8
[  670.067064][  T995] wlan1: Trigger new scan to find an IBSS to join
[  670.090329][ T9994] usbtouchscreen: probe of 3-1:0.0 failed with error -8
[  670.244112][ T5781] Bluetooth: hci3: unexpected event for opcode 0x200c
[  670.490955][T10126] usb 3-1: USB disconnect, device number 52
[  673.095153][   T11] wlan1: Trigger new scan to find an IBSS to join
[  673.163378][T10126] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  673.373274][T10126] usb 2-1: Using ep0 maxpacket: 32
[  673.384734][T10126] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  673.400412][T10126] usb 2-1: config 0 has no interface number 0
[  673.412929][T10126] usb 2-1: config 0 interface 255 has no altsetting 0
[  673.432764][T10126] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  673.451068][T10126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.463617][T10126] usb 2-1: Product: syz
[  673.467832][T10126] usb 2-1: Manufacturer: syz
[  673.482993][T10126] usb 2-1: SerialNumber: syz
[  673.490500][T10126] usb 2-1: config 0 descriptor??
[  673.510724][T10126] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  673.523998][T10126] dvb-usb: bulk message failed: -22 (4/0)
[  673.529784][T10126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  673.543788][ T5844] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  673.544099][T10126] dvb-usb: bulk message failed: -22 (5/0)
[  673.557503][T10126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  673.571343][T10126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  673.581871][T10126] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  673.592853][T10126] usb 2-1: media controller created
[  673.753340][ T5844] usb 3-1: Using ep0 maxpacket: 32
[  673.764152][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  673.809353][T10126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  673.811712][ T5844] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  673.845598][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.853707][T10126] ttusb2: set interface to alts=3 failed
[  673.887566][ T5844] usb 3-1: Product: syz
[  673.908039][ T5844] usb 3-1: Manufacturer: syz
[  673.967538][ T5844] usb 3-1: SerialNumber: syz
[  674.132173][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  674.184076][ T5844] usb 3-1: config 0 descriptor??
[  674.369665][ T5844] hub 3-1:0.0: bad descriptor, ignoring hub
[  674.440894][ T5844] hub: probe of 3-1:0.0 failed with error -5
[  674.493566][ T5844] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input31
[  674.528629][T10126] DVB: Unable to find symbol tda10086_attach()
[  674.542683][T10126] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  674.551015][ T5781] Bluetooth: hci3: unexpected event for opcode 0x200c
[  674.565398][T10126] dvb-usb: bulk message failed: -22 (4/0)
[  674.571199][T10126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  674.581902][T10126] dvb-usb: bulk message failed: -22 (5/0)
[  674.583886][ T5844] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8
[  674.588011][T10126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  674.607240][T10126] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  674.620545][T10126] usb 2-1: USB disconnect, device number 46
[  674.681904][T10126] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  674.693982][ T5844] usbtouchscreen: probe of 3-1:0.0 failed with error -8
[  674.771154][ T5844] usb 3-1: USB disconnect, device number 53
[  675.393441][ T5844] usb 2-1: new low-speed USB device number 47 using dummy_hcd
[  677.753560][T10126] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  678.023475][T10126] usb 3-1: Using ep0 maxpacket: 32
[  678.120752][T10126] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  678.170355][T10126] usb 3-1: config 0 has no interface number 0
[  678.203358][T10126] usb 3-1: config 0 interface 255 has no altsetting 0
[  678.225685][T10126] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  678.243284][T10126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.244319][ T5844] usb 2-1: unable to get BOS descriptor or descriptor too short
[  678.251418][T10126] usb 3-1: Product: syz
[  678.265340][ T5844] usb 2-1: unable to read config index 0 descriptor/start: -71
[  678.273010][ T5844] usb 2-1: can't read configurations, error -71
[  678.311143][T10126] usb 3-1: Manufacturer: syz
[  678.326942][T10126] usb 3-1: SerialNumber: syz
[  678.362845][T10126] usb 3-1: config 0 descriptor??
[  678.385653][T10126] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  678.416257][T10126] dvb-usb: bulk message failed: -22 (4/0)
[  678.443351][T10126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  678.469099][T10126] dvb-usb: bulk message failed: -22 (5/0)
[  678.483331][T10126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  678.519436][T10126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  678.534088][T10126] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  678.542181][T10126] usb 3-1: media controller created
[  678.611615][T10126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  678.675811][T10126] ttusb2: set interface to alts=3 failed
[  678.760307][T10126] DVB: Unable to find symbol tda10086_attach()
[  678.783982][T10126] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  678.814284][T10126] dvb-usb: bulk message failed: -22 (4/0)
[  678.820080][T10126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  678.842424][T10126] dvb-usb: bulk message failed: -22 (5/0)
[  678.861111][T10126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  678.894288][T10126] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  678.947867][T10126] usb 3-1: USB disconnect, device number 54
[  679.595142][T10126] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  682.203492][T10126] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  682.504644][T10126] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  682.602945][T10126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.603936][T10126] usb 2-1: Product: syz
[  682.604220][T10126] usb 2-1: Manufacturer: syz
[  682.604472][T10126] usb 2-1: SerialNumber: syz
[  682.641632][T10126] usb 2-1: config 0 descriptor??
[  682.696620][T10126] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 049
[  682.913303][ T1189] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  683.068773][T10126]  (null): failure reading functionality
[  683.112499][ T1189] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  683.142271][ T1189] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  683.179323][ T1189] usb 1-1: Product: syz
[  683.194313][T10126] i2c i2c-1: connected i2c-tiny-usb device
[  683.205496][ T1189] usb 1-1: SerialNumber: syz
[  683.228491][ T1189] usb 1-1: config 0 descriptor??
[  683.493680][ T1189] hso 1-1:0.0: Can't find BULK IN endpoint
[  683.631013][T10126] usb 2-1: USB disconnect, device number 49
[  683.734944][ T1189] usb 1-1: USB disconnect, device number 57
[  684.264308][ T5844] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  684.558211][ T5844] usb 4-1: unable to get BOS descriptor or descriptor too short
[  684.610988][ T5844] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  684.692669][ T5844] usb 4-1: config 0 has no interfaces?
[  684.730964][ T5844] usb 4-1: string descriptor 0 read error: -22
[  684.737331][ T5844] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  684.755589][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.772335][ T5844] usb 4-1: config 0 descriptor??
[  686.003822][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  686.010308][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  688.042540][T12059] bridge0: port 2(bridge_slave_1) entered disabled state
[  688.050180][T12059] bridge0: port 1(bridge_slave_0) entered disabled state
[  688.091794][ T5812] usb 4-1: USB disconnect, device number 52
[  688.472931][T10126] usb 3-1: new full-speed USB device number 55 using dummy_hcd
[  689.195126][T10126] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  689.226294][T10126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.262931][T10126] usb 3-1: Product: syz
[  689.281286][T10126] usb 3-1: Manufacturer: syz
[  689.301593][T10126] usb 3-1: SerialNumber: syz
[  689.377500][T10126] usb 3-1: config 0 descriptor??
[  689.766500][T10126] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  690.075271][T12059] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  690.113464][T12059] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  690.431445][T12059] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  690.440984][T12059] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  690.449970][T12059] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  690.459115][T12059] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  691.892392][T10126] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[  692.483702][T10126] usb 3-1: USB disconnect, device number 55
[  698.354067][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1994'.
[  699.977048][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1999'.
[  703.013250][   T42] wlan1: Trigger new scan to find an IBSS to join
[  703.265370][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'.
[  703.446406][T10312] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  703.723330][T10312] usb 3-1: Using ep0 maxpacket: 16
[  703.776583][T10312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  703.890744][T10312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  704.021204][T10312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  704.055809][T10312] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  704.081993][T10312] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  704.132224][T10312] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  704.151555][T10312] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  704.181883][T10312] usb 3-1: Manufacturer: syz
[  704.293923][T10312] usb 3-1: config 0 descriptor??
[  704.673371][T10312] rc_core: IR keymap rc-hauppauge not found
[  704.684640][T10312] Registered IR keymap rc-empty
[  704.694936][T10312] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  704.744067][T10312] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  704.785668][T10312] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  704.805024][T10312] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32
[  704.831122][T10312] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  704.877650][T10312] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  704.913568][T10312] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  704.975681][T10312] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  705.013535][T10312] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  705.063385][T10312] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  705.103003][T10312] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  705.103322][T10126] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  705.194167][T10312] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  705.358235][T10312] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  705.444873][T10312] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  705.538935][T10312] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  705.561072][T10312] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  705.623237][T10312] usb 3-1: USB disconnect, device number 56
[  705.962024][T12265] pim6reg: entered allmulticast mode
[  706.113304][T10126] usb 1-1: Using ep0 maxpacket: 32
[  706.163604][T10126] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  706.186204][T10126] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  706.195544][T10126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.203980][T10126] usb 1-1: Product: syz
[  706.208351][T10126] usb 1-1: Manufacturer: syz
[  706.213108][T10126] usb 1-1: SerialNumber: syz
[  706.256825][T10126] usb 1-1: config 0 descriptor??
[  706.281063][T12252] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  706.375931][T10126] hub 1-1:0.0: bad descriptor, ignoring hub
[  706.387246][T10126] hub: probe of 1-1:0.0 failed with error -5
[  706.426638][T10126] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33
[  706.875643][    C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  706.875649][    T8] usb 1-1: USB disconnect, device number 58
[  708.166352][   T42] wlan1: Trigger new scan to find an IBSS to join
[  708.166563][ T5941] wlan1: Trigger new scan to find an IBSS to join
[  708.671656][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2021'.
[  709.179345][ T5941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  711.233633][    T8] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  711.583248][    T8] usb 2-1: Using ep0 maxpacket: 32
[  711.600857][    T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  711.617889][    T8] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  711.627970][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.636198][    T8] usb 2-1: Product: syz
[  711.640473][    T8] usb 2-1: Manufacturer: syz
[  711.665250][    T8] usb 2-1: SerialNumber: syz
[  711.673234][    T8] usb 2-1: config 0 descriptor??
[  711.680228][T12308] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  711.689868][    T8] hub 2-1:0.0: bad descriptor, ignoring hub
[  711.696250][    T8] hub: probe of 2-1:0.0 failed with error -5
[  711.708544][    T8] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input34
[  711.857943][T10126] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  711.936187][    T8] usb 2-1: USB disconnect, device number 50
[  711.942229][    C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  712.063386][T10126] usb 4-1: Using ep0 maxpacket: 32
[  712.082057][T10126] usb 4-1: unable to get BOS descriptor or descriptor too short
[  712.103340][T10126] usb 4-1: unable to read config index 0 descriptor/start: -71
[  712.110982][T10126] usb 4-1: can't read configurations, error -71
[  713.397302][ T5941] wlan1: Trigger new scan to find an IBSS to join
[  714.841305][ T5936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.234231][    T8] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  716.423260][    T8] usb 1-1: Using ep0 maxpacket: 32
[  716.439898][    T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  716.469296][    T8] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  716.494803][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.516715][    T8] usb 1-1: Product: syz
[  716.528867][    T8] usb 1-1: Manufacturer: syz
[  716.542230][    T8] usb 1-1: SerialNumber: syz
[  716.565856][    T8] usb 1-1: config 0 descriptor??
[  716.579786][T12361] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  716.605231][    T8] hub 1-1:0.0: bad descriptor, ignoring hub
[  716.628076][    T8] hub: probe of 1-1:0.0 failed with error -5
[  716.668667][    T8] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input35
[  716.821375][ T1189] usb 1-1: USB disconnect, device number 59
[  716.821404][    C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  719.632401][T12369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  719.773360][ T1189] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  720.453650][ T1189] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  720.462908][ T1189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.709074][ T1189] usb 1-1: Product: syz
[  720.713422][ T1189] usb 1-1: Manufacturer: syz
[  720.718042][ T1189] usb 1-1: SerialNumber: syz
[  720.725601][ T1189] usb 1-1: config 0 descriptor??
[  720.941772][ T1189] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  723.363381][   T11] wlan1: Trigger new scan to find an IBSS to join
[  723.704947][ T1189] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  723.900579][ T1189] usb 1-1: USB disconnect, device number 60
[  725.839446][    T8] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  726.026748][    T8] usb 2-1: unable to get BOS descriptor or descriptor too short
[  726.039587][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  726.073051][    T8] usb 2-1: config 0 has no interfaces?
[  726.096633][    T8] usb 2-1: string descriptor 0 read error: -22
[  726.142016][    T8] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  726.171589][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.245793][    T8] usb 2-1: config 0 descriptor??
[  730.302748][ T5934] wlan1: Trigger new scan to find an IBSS to join
[  730.599015][T10126] usb 2-1: USB disconnect, device number 51
[  732.359317][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  733.443434][    T8] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  733.543563][T10312] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  733.646358][    T8] usb 2-1: unable to get BOS descriptor or descriptor too short
[  733.655817][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  733.666507][    T8] usb 2-1: config 0 has no interfaces?
[  733.678446][    T8] usb 2-1: string descriptor 0 read error: -22
[  733.685151][    T8] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  733.695081][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.708344][    T8] usb 2-1: config 0 descriptor??
[  733.733511][T10312] usb 1-1: Using ep0 maxpacket: 16
[  733.742194][T10312] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  733.754536][T10312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  733.766708][T10312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  733.776978][T10312] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  733.787432][T10312] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  733.802912][T10312] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  733.812596][T10312] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  733.821214][T10312] usb 1-1: Manufacturer: syz
[  733.830481][T10312] usb 1-1: config 0 descriptor??
[  734.933479][T10312] rc_core: IR keymap rc-hauppauge not found
[  734.939436][T10312] Registered IR keymap rc-empty
[  734.958707][T10312] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  735.013526][T10312] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  735.874654][T10312] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  735.889384][T10312] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input36
[  735.930504][T10312] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  735.968520][T10312] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  736.005914][T10312] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  736.064890][T10312] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  736.164796][T10312] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  736.322731][T10312] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  736.415528][T10312] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  736.498686][ T9994] usb 2-1: USB disconnect, device number 52
[  736.504937][T10312] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  736.564535][T10312] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  736.581379][ T5936] nci: nci_data_exchange_complete: no rx callback, dropping rx data...
[  736.603508][T10312] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  737.619685][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2096'.
[  737.761739][T10312] mceusb 1-1:0.0: Registered 焪 with mce emulator interface version 1
[  737.770223][T10312] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  737.788711][T10312] usb 1-1: USB disconnect, device number 61
[  737.922080][T12549] ucma_write: process 1426 (syz.0.2099) changed security contexts after opening file descriptor, this is not allowed.
[  739.481941][T12529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  741.756225][T10126] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  741.793411][ T1189] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  741.968541][T10126] usb 3-1: unable to get BOS descriptor or descriptor too short
[  741.999358][ T1189] usb 1-1: Using ep0 maxpacket: 16
[  742.029572][T10126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  742.071728][ T1189] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  742.106175][T10126] usb 3-1: config 0 has no interfaces?
[  742.140275][ T1189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  742.214143][T10126] usb 3-1: string descriptor 0 read error: -22
[  742.252930][ T1189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  742.264552][T10126] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  742.327659][ T1189] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  742.340482][T10126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.402515][ T1189] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  742.463910][T10126] usb 3-1: config 0 descriptor??
[  742.608291][ T1189] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  742.667222][ T1189] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  742.679153][ T1189] usb 1-1: Manufacturer: syz
[  742.691813][ T1189] usb 1-1: config 0 descriptor??
[  743.613433][ T1189] rc_core: IR keymap rc-hauppauge not found
[  743.639586][ T1189] Registered IR keymap rc-empty
[  743.671678][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  743.737351][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  743.873392][ T1189] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  744.112197][ T1189] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input37
[  744.348063][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  744.433810][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  744.476464][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  744.527351][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  744.573571][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  744.615606][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  744.729154][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2112'.
[  745.413717][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  745.446581][T10312] usb 3-1: USB disconnect, device number 57
[  745.493242][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  745.523529][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  745.553700][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  745.595379][ T1189] mceusb 1-1:0.0: Registered 焪 with mce emulator interface version 1
[  745.612001][ T1189] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  745.637766][ T1189] usb 1-1: USB disconnect, device number 62
[  746.633264][ T1189] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  747.428271][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  747.456264][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  750.143871][ T1189] usb 1-1: Using ep0 maxpacket: 32
[  750.173627][ T1189] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  750.193707][ T1189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  750.224078][ T1189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  750.240800][ T1189] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  750.259869][ T1189] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  750.385323][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2124'.
[  751.043795][ T1189] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  751.063316][ T1189] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  751.071657][ T1189] usb 1-1: Manufacturer: syz
[  751.078892][ T1189] usb 1-1: config 0 descriptor??
[  751.435934][ T1189] rc_core: IR keymap rc-hauppauge not found
[  751.441907][ T1189] Registered IR keymap rc-empty
[  751.448767][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  751.483390][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  751.503456][ T9994] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  751.525851][ T1189] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  751.577284][ T1189] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input38
[  751.693170][ T9994] usb 3-1: Using ep0 maxpacket: 32
[  751.724844][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  751.824910][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  751.923778][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  752.015910][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  752.153968][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  752.253673][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  752.335951][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  752.378829][ T9994] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  752.388675][ T9994] usb 3-1: config 0 has no interface number 0
[  752.395786][ T9994] usb 3-1: config 0 interface 255 has no altsetting 0
[  752.403920][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  752.405340][ T9994] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  752.428176][ T9994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.436339][ T9994] usb 3-1: Product: syz
[  752.443556][ T9994] usb 3-1: Manufacturer: syz
[  752.447432][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  752.448174][ T9994] usb 3-1: SerialNumber: syz
[  752.468761][ T9994] usb 3-1: config 0 descriptor??
[  752.487032][ T9994] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  752.495410][ T9994] dvb-usb: bulk message failed: -22 (4/0)
[  752.501275][ T9994] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  752.504139][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  752.521426][ T9994] dvb-usb: bulk message failed: -22 (5/0)
[  752.527555][ T9994] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  752.542269][ T9994] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  752.553639][ T9994] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  752.561731][ T9994] usb 3-1: media controller created
[  752.595569][ T1189] mceusb 1-1:0.0: Registered 焪 with mce emulator interface version 1
[  752.624369][ T1189] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  752.643664][ T1189] usb 1-1: USB disconnect, device number 63
[  752.891643][T12527] udevd[12527]: setting owner of /dev/bus/usb/001/063 to uid=0, gid=0 failed: No such file or directory
[  754.155955][T12675] overlayfs: failed to resolve './file0': -2
[  754.186343][ T9994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  754.292445][ T9994] ttusb2: set interface to alts=3 failed
[  754.428011][ T9994] DVB: Unable to find symbol tda10086_attach()
[  754.470075][ T9994] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  754.506639][ T9994] dvb-usb: bulk message failed: -22 (4/0)
[  754.527697][ T9994] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  754.545538][ T9994] dvb-usb: bulk message failed: -22 (5/0)
[  754.551283][ T9994] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  755.674494][ T9994] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  755.693478][ T9994] usb 3-1: USB disconnect, device number 58
[  756.239291][ T9994] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  756.390917][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2135'.
[  756.853675][ T1189] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  756.933244][T10312] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  757.073391][ T1189] usb 1-1: Using ep0 maxpacket: 16
[  757.141917][ T1189] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  757.207673][ T1189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  757.278927][ T1189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  757.356755][ T1189] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  757.429062][ T1189] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  757.533726][ T1189] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  757.555634][ T1189] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  757.584849][ T1189] usb 1-1: Manufacturer: syz
[  757.601202][ T1189] usb 1-1: config 0 descriptor??
[  757.693612][T10312] usb 4-1: Using ep0 maxpacket: 32
[  757.700672][T10312] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  757.723185][T10312] usb 4-1: config 0 has no interface number 0
[  757.729848][T10312] usb 4-1: config 0 interface 255 has no altsetting 0
[  757.746570][T10312] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  757.760035][T10312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.774784][T10312] usb 4-1: Product: syz
[  757.779086][T10312] usb 4-1: Manufacturer: syz
[  757.785864][T10312] usb 4-1: SerialNumber: syz
[  757.804380][T10312] usb 4-1: config 0 descriptor??
[  757.814270][T10312] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  757.822495][T10312] dvb-usb: bulk message failed: -22 (4/0)
[  757.843183][T10312] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  757.870913][T10312] dvb-usb: bulk message failed: -22 (5/0)
[  757.883437][T10312] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  757.901604][T10312] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  757.915920][T10312] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  757.920119][ T1189] rc_core: IR keymap rc-hauppauge not found
[  757.928834][T10312] usb 4-1: media controller created
[  757.930229][ T1189] Registered IR keymap rc-empty
[  757.949749][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  757.960213][T10312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  757.978215][T10312] ttusb2: set interface to alts=3 failed
[  757.983343][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  758.015018][T10312] DVB: Unable to find symbol tda10086_attach()
[  758.015698][ T1189] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  758.031971][T10312] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  758.038225][ T1189] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input39
[  758.067759][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  758.076381][ T9994] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  758.160466][T10312] dvb-usb: bulk message failed: -22 (4/0)
[  758.679675][T10312] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  758.691451][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  758.713617][T10312] dvb-usb: bulk message failed: -22 (5/0)
[  758.719638][T10312] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  758.733586][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  758.738755][T10312] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  758.754594][T10312] usb 4-1: USB disconnect, device number 55
[  758.775744][ T9994] usb 2-1: unable to get BOS descriptor or descriptor too short
[  758.778349][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  758.790730][ T9994] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  758.823467][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  758.853660][ T9994] usb 2-1: config 0 has no interfaces?
[  758.873429][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  758.882623][T10312] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  758.894212][ T9994] usb 2-1: string descriptor 0 read error: -22
[  758.900546][ T9994] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  758.911649][ T9994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  758.914956][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  758.935510][ T9994] usb 2-1: config 0 descriptor??
[  758.975450][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  759.005973][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  759.043483][ T1189] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  759.082475][ T1189] mceusb 1-1:0.0: Registered 焪 with mce emulator interface version 1
[  759.091145][ T1189] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  759.143544][ T1189] usb 1-1: USB disconnect, device number 64
[  759.223517][T10126] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  759.492252][T10126] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  759.503353][T10126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.511608][T10126] usb 3-1: Product: syz
[  759.520491][T10126] usb 3-1: Manufacturer: syz
[  759.528940][T10126] usb 3-1: SerialNumber: syz
[  759.557676][T10126] usb 3-1: config 0 descriptor??
[  759.591149][T10126] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 059
[  760.014839][T10126]  (null): failure reading functionality
[  760.713723][T10126] i2c i2c-1: connected i2c-tiny-usb device
[  760.911138][T10126] usb 3-1: USB disconnect, device number 59
[  761.611225][T12758] bridge0: port 2(bridge_slave_1) entered disabled state
[  761.618706][T12758] bridge0: port 1(bridge_slave_0) entered disabled state
[  761.780608][T12766] overlayfs: missing 'lowerdir'
[  762.460310][ T9994] usb 2-1: USB disconnect, device number 53
[  766.820537][T12758] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  766.858449][T12758] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  767.916929][T12758] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  767.926583][T12758] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  767.935814][T12758] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  767.946837][T12758] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  768.434891][T12804] overlayfs: missing 'lowerdir'
[  769.023590][T10312] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  769.265668][T10312] usb 3-1: unable to get BOS descriptor or descriptor too short
[  769.353637][T10312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  769.380310][T10312] usb 3-1: config 0 has no interfaces?
[  769.410633][T10312] usb 3-1: string descriptor 0 read error: -22
[  769.434490][T10312] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  769.494591][T10312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.310990][T10312] usb 3-1: config 0 descriptor??
[  772.811024][ T1189] usb 3-1: USB disconnect, device number 60
[  772.886077][T12839] overlayfs: missing 'lowerdir'
[  778.708229][T10312] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  778.991421][T10312] usb 1-1: unable to get BOS descriptor or descriptor too short
[  779.070555][T10312] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  779.163511][T10312] usb 1-1: config 0 has no interfaces?
[  779.246525][T10312] usb 1-1: string descriptor 0 read error: -22
[  779.307194][T10312] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  779.405019][T10312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.508189][T10312] usb 1-1: config 0 descriptor??
[  779.655294][T12886] overlayfs: missing 'lowerdir'
[  781.714157][T10312] usb 1-1: USB disconnect, device number 65
[  782.817442][T12897] bridge0: port 2(bridge_slave_1) entered disabled state
[  782.824913][T12897] bridge0: port 1(bridge_slave_0) entered disabled state
[  783.215163][T12897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  783.247446][T12897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  783.518752][T12897] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  783.527712][T12897] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  783.537805][T12897] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  783.547664][T12897] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  783.707527][T12897] syz.2.2191 (12897) used greatest stack depth: 20200 bytes left
[  786.111500][T12088] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  787.023433][T12088] usb 4-1: Using ep0 maxpacket: 8
[  787.114157][T12088] usb 4-1: config 162 has an invalid interface number: 84 but max is 2
[  787.134370][T12088] usb 4-1: config 162 has an invalid interface number: 3 but max is 2
[  787.142629][T12088] usb 4-1: config 162 has no interface number 0
[  787.445683][T12960] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2206'.
[  788.141001][T12088] usb 4-1: config 162 has no interface number 1
[  788.163209][T12088] usb 4-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  788.193380][T12088] usb 4-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  788.217642][T12088] usb 4-1: config 162 interface 2 altsetting 1 has an invalid endpoint with address 0xA6, skipping
[  788.243360][T12088] usb 4-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  788.277757][T12088] usb 4-1: config 162 interface 84 has no altsetting 0
[  788.300622][T12088] usb 4-1: config 162 interface 2 has no altsetting 0
[  788.335948][T12088] usb 4-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23
[  788.431771][T12088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.530222][T12088] usb 4-1: Product: syz
[  788.581840][T12088] usb 4-1: Manufacturer: syz
[  788.655272][T12088] usb 4-1: SerialNumber: syz
[  789.104428][T12088] usb 4-1: can't set config #162, error -71
[  789.142632][T12088] usb 4-1: USB disconnect, device number 56
[  794.777640][T13016] bridge0: port 2(bridge_slave_1) entered disabled state
[  794.785117][T13016] bridge0: port 1(bridge_slave_0) entered disabled state
[  795.743396][T13016] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  796.127081][T13016] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  796.631985][T13016] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  796.641246][T13016] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  796.651099][T13016] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  796.666852][T13016] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  801.350530][T13065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  805.668252][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'.
[  806.611877][T13123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  808.859061][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  808.865651][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  810.920074][T13192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2273'.
[  812.559948][T13221] overlayfs: failed to resolve './file0': -2
[  813.621786][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2286'.
[  815.231572][ T5781] Bluetooth: hci2: unexpected event for opcode 0x0c1c
[  816.127106][T13260] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  816.147487][T13260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  816.158223][T13260] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  816.197610][T13260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  816.209713][T13260] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  816.220649][T13260] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  817.387529][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2297'.
[  817.971924][T13258] chnl_net:caif_netlink_parms(): no params data found
[  818.316912][T13260] Bluetooth: hci1: command tx timeout
[  819.182609][T13258] bridge0: port 1(bridge_slave_0) entered blocking state
[  819.206622][T13258] bridge0: port 1(bridge_slave_0) entered disabled state
[  819.264298][T13258] bridge_slave_0: entered allmulticast mode
[  819.361692][T13258] bridge_slave_0: entered promiscuous mode
[  819.502119][T13258] bridge0: port 2(bridge_slave_1) entered blocking state
[  819.587297][T13258] bridge0: port 2(bridge_slave_1) entered disabled state
[  819.680592][T13258] bridge_slave_1: entered allmulticast mode
[  819.813813][T13258] bridge_slave_1: entered promiscuous mode
[  820.177293][T13258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  820.268690][T13258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  820.373428][T13260] Bluetooth: hci1: command tx timeout
[  820.838238][T13258] team0: Port device team_slave_0 added
[  820.889775][T13258] team0: Port device team_slave_1 added
[  820.983246][T13258] batman_adv: batadv0: Adding interface: batadv_slave_0
[  820.990372][T13258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  821.157155][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2306'.
[  821.788785][T13258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  821.820475][T13258] batman_adv: batadv0: Adding interface: batadv_slave_1
[  821.858960][T13258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  821.891188][T13258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  822.266622][T13258] hsr_slave_0: entered promiscuous mode
[  822.289897][T13258] hsr_slave_1: entered promiscuous mode
[  822.302189][T13258] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  822.318321][T13258] Cannot create hsr debugfs directory
[  822.467693][T13260] Bluetooth: hci1: command tx timeout
[  824.549317][T13260] Bluetooth: hci1: command tx timeout
[  825.183751][ T1088] wlan1: Trigger new scan to find an IBSS to join
[  825.707123][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'.
[  826.165558][T13374] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2317'.
[  827.823680][T12086] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  828.075990][T12086] usb 4-1: Using ep0 maxpacket: 16
[  828.114696][T13387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  828.146294][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  828.161032][T13387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  828.189611][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  828.236274][   T42] bridge_slave_1: left allmulticast mode
[  828.262459][   T42] bridge_slave_1: left promiscuous mode
[  828.293134][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  828.378789][   T42] bridge_slave_0: left allmulticast mode
[  828.410969][   T42] bridge_slave_0: left promiscuous mode
[  828.416983][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  828.621467][   T42] pim6reg (unregistering): left allmulticast mode
[  829.111405][  T995] wlan1: Trigger new scan to find an IBSS to join
[  830.059858][ T5936] wlan1: Trigger new scan to find an IBSS to join
[  830.925869][   T42] team0 (unregistering): Port device team_slave_1 removed
[  831.032569][   T42] team0 (unregistering): Port device team_slave_0 removed
[  831.138536][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  831.844950][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  831.945323][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  832.027038][T13416] use of bytesused == 0 is deprecated and will be removed in the future,
[  832.036963][T13416] use the actual size instead.
[  832.567549][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2327'.
[  833.019913][  T995] wlan1: Trigger new scan to find an IBSS to join
[  833.177791][T12086] usb 4-1: unable to get BOS descriptor or descriptor too short
[  833.186604][T12086] usb 4-1: unable to read config index 0 descriptor/start: -32
[  833.187993][   T42] bond0 (unregistering): Released all slaves
[  833.199931][T12086] usb 4-1: chopping to 0 config(s)
[  833.206223][T12086] usb 4-1: can't read configurations, error -32
[  833.313495][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2321'.
[  833.373906][T12086] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  834.081155][ T5934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  834.254393][T13258] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  834.426590][T13258] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  834.509675][T13258] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  834.579143][T13258] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  834.831943][   T42] IPVS: stop unused estimator thread 0...
[  835.093199][T13258] 8021q: adding VLAN 0 to HW filter on device bond0
[  835.156972][T13258] 8021q: adding VLAN 0 to HW filter on device team0
[  835.197777][  T995] bridge0: port 1(bridge_slave_0) entered blocking state
[  835.204993][  T995] bridge0: port 1(bridge_slave_0) entered forwarding state
[  835.294177][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state
[  835.301357][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state
[  835.956828][T13258] 8021q: adding VLAN 0 to HW filter on device batadv0
[  836.008343][T13258] veth0_vlan: entered promiscuous mode
[  836.042964][T13258] veth1_vlan: entered promiscuous mode
[  836.145249][T13258] veth0_macvtap: entered promiscuous mode
[  836.192276][T13258] veth1_macvtap: entered promiscuous mode
[  836.256695][T13258] batman_adv: batadv0: Interface activated: batadv_slave_0
[  836.354438][T13258] batman_adv: batadv0: Interface activated: batadv_slave_1
[  836.982864][T13258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  837.091172][T13258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  837.100901][T13258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  837.110052][T13258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  837.331233][ T5934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  837.353503][ T5934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  837.401200][ T5934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  837.428116][ T5934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  837.583427][T12089] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  837.925901][T12089] usb 4-1: Using ep0 maxpacket: 16
[  838.032319][T12089] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  838.170652][T12089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  838.370144][T12089] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  838.535071][T12089] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  838.582469][T12089] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  838.619634][T12089] usb 4-1: Manufacturer: syz
[  838.697451][T12089] usb 4-1: config 0 descriptor??
[  840.433888][T12911] usb 4-1: USB disconnect, device number 59
[  842.460389][T13527] bridge0: port 2(bridge_slave_1) entered disabled state
[  842.470032][T13527] bridge0: port 1(bridge_slave_0) entered disabled state
[  843.120873][T13527] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  843.155907][T13527] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  843.437967][T13527] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  843.446936][T13527] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  843.456513][T13527] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  843.465486][T13527] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  846.273469][T12911] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  846.611702][T12911] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  846.622231][T12911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.644915][T12911] usb 4-1: Product: syz
[  846.649237][T12911] usb 4-1: Manufacturer: syz
[  846.660468][T12911] usb 4-1: SerialNumber: syz
[  846.688390][T12911] usb 4-1: config 0 descriptor??
[  846.700185][T12911] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 060
[  846.777352][T12911]  (null): failure setting delay to 10us
[  846.793231][T12911] i2c-tiny-usb: probe of 4-1:0.0 failed with error -5
[  846.814786][T12911] usb 4-1: USB disconnect, device number 60
[  847.961676][T13260] Bluetooth: hci0: Malformed LE Event: 0x0d
[  848.400521][ T5844] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  848.874266][ T5844] usb 2-1: Using ep0 maxpacket: 16
[  848.881539][ T5844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  848.891824][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  848.902824][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  848.912564][ T5844] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  848.922342][ T5844] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  848.936953][ T5844] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  848.946353][ T5844] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  848.954490][ T5844] usb 2-1: Manufacturer: syz
[  848.962601][ T5844] usb 2-1: config 0 descriptor??
[  849.703750][ T5844] rc_core: IR keymap rc-hauppauge not found
[  849.749293][ T5844] Registered IR keymap rc-empty
[  849.791996][ T5844] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  849.886002][ T5844] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  850.165040][ T5844] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  850.205309][ T5844] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input40
[  850.236731][ T5844] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  850.273332][ T5844] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  850.304338][ T5844] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  850.333351][ T5844] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  850.389634][ T5844] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  850.443654][ T5844] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  850.483333][ T5844] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  850.515684][ T5844] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  850.573953][T12911] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  850.805270][T12911] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  850.891802][T12911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.977359][T12911] usb 3-1: Product: syz
[  851.032684][T12911] usb 3-1: Manufacturer: syz
[  851.120408][T12911] usb 3-1: SerialNumber: syz
[  851.203378][ T5844] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  851.241182][ T5844] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  851.291868][ T5844] mceusb 2-1:0.0: Registered 焪 with mce emulator interface version 1
[  851.305219][T12911] usb 3-1: config 0 descriptor??
[  851.316107][T12911] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 061
[  851.346447][ T5844] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  851.377476][ T5844] usb 2-1: USB disconnect, device number 54
[  852.873921][T12911] i2c i2c-1: failure reading functionality
[  852.889074][T12911] i2c i2c-1: connected i2c-tiny-usb device
[  852.921972][T12911] usb 3-1: USB disconnect, device number 61
[  853.891159][   T42] wlan1: Trigger new scan to find an IBSS to join
[  854.833726][T12906] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  854.934487][ T5844] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  855.143280][ T5844] usb 1-1: Using ep0 maxpacket: 16
[  855.169571][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  855.226297][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  855.292324][ T5844] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  855.390527][ T5844] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  855.443450][ T5844] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  855.490045][ T5844] usb 1-1: Manufacturer: syz
[  855.568397][ T5844] usb 1-1: config 0 descriptor??
[  855.603784][T12906] usb 3-1: Using ep0 maxpacket: 32
[  855.617190][T12906] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  855.626022][T12906] usb 3-1: config 0 has no interface number 0
[  855.632351][T12906] usb 3-1: config 0 interface 255 has no altsetting 0
[  855.642100][T12906] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  855.744454][T12906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.752508][T12906] usb 3-1: Product: syz
[  855.756813][T12906] usb 3-1: Manufacturer: syz
[  855.761430][T12906] usb 3-1: SerialNumber: syz
[  855.769307][T12906] usb 3-1: config 0 descriptor??
[  855.778285][T12906] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  855.787402][T12906] dvb-usb: bulk message failed: -22 (4/0)
[  855.793860][T12906] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  855.804446][T12906] dvb-usb: bulk message failed: -22 (5/0)
[  855.810191][T12906] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  855.827060][T12906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  855.838090][T12906] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  855.870886][T12906] usb 3-1: media controller created
[  855.922510][T12906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  855.933765][T13651] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2380'.
[  855.965565][T12906] ttusb2: set interface to alts=3 failed
[  856.058693][T12906] DVB: Unable to find symbol tda10086_attach()
[  856.083165][T12906] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  856.104457][T12906] dvb-usb: bulk message failed: -22 (4/0)
[  856.110255][T12906] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  856.143255][T12906] dvb-usb: bulk message failed: -22 (5/0)
[  856.149038][T12906] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  856.169095][T12906] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  856.255412][T12906] usb 3-1: USB disconnect, device number 62
[  857.016582][ T5936] wlan1: Trigger new scan to find an IBSS to join
[  857.090249][T12906] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  857.229105][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  857.242997][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  857.251794][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  857.265048][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  857.274079][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  857.281582][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  857.652789][T12906] usb 1-1: USB disconnect, device number 66
[  857.736454][T13657] chnl_net:caif_netlink_parms(): no params data found
[  858.115058][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  859.334695][T13260] Bluetooth: hci2: command tx timeout
[  859.655830][T13657] bridge0: port 1(bridge_slave_0) entered blocking state
[  859.695731][T13657] bridge0: port 1(bridge_slave_0) entered disabled state
[  859.703001][T13657] bridge_slave_0: entered allmulticast mode
[  859.773291][T13657] bridge_slave_0: entered promiscuous mode
[  859.826518][T13657] bridge0: port 2(bridge_slave_1) entered blocking state
[  859.842230][T13657] bridge0: port 2(bridge_slave_1) entered disabled state
[  859.853253][T13657] bridge_slave_1: entered allmulticast mode
[  859.868793][T13657] bridge_slave_1: entered promiscuous mode
[  860.040701][T13657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  860.066979][T13657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  860.275207][T13657] team0: Port device team_slave_0 added
[  860.331736][T13657] team0: Port device team_slave_1 added
[  860.452912][T13657] batman_adv: batadv0: Adding interface: batadv_slave_0
[  860.461455][T13657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  860.487876][T13657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  860.529124][T13657] batman_adv: batadv0: Adding interface: batadv_slave_1
[  860.554041][T13657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  860.597737][T13657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  861.259766][T13657] hsr_slave_0: entered promiscuous mode
[  861.279704][T13657] hsr_slave_1: entered promiscuous mode
[  861.286466][T13657] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  861.294220][T13657] Cannot create hsr debugfs directory
[  861.455012][T13260] Bluetooth: hci2: command tx timeout
[  862.235465][ T1088] hsr_slave_0: left promiscuous mode
[  862.345060][ T1088] hsr_slave_1: left promiscuous mode
[  862.432062][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0
[  862.538091][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1
[  862.790937][ T1088] bridge_slave_1: left allmulticast mode
[  862.811281][ T1088] bridge_slave_1: left promiscuous mode
[  862.817295][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[  862.847885][ T1088] bridge_slave_0: left allmulticast mode
[  862.860752][ T1088] bridge_slave_0: left promiscuous mode
[  862.880042][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.268514][ T3465] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  863.503246][T13260] Bluetooth: hci2: command tx timeout
[  865.313438][ T1088] team0 (unregistering): Port device 
1�2�� removed
[  865.369120][ T1088] team0 (unregistering): Port device team_slave_0 removed
[  865.421517][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  865.471959][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  865.573360][T13260] Bluetooth: hci2: command tx timeout
[  865.868496][ T1088] bond0 (unregistering): Released all slaves
[  866.507267][T13657] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  866.524876][T13657] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  866.543611][T13657] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  866.547295][ T1088] IPVS: stop unused estimator thread 0...
[  866.561568][T13657] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  866.563248][ T5844] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  866.721485][T13657] 8021q: adding VLAN 0 to HW filter on device bond0
[  866.754286][T13657] 8021q: adding VLAN 0 to HW filter on device team0
[  866.766718][ T5844] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  866.775257][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state
[  866.783203][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state
[  866.783790][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  866.809050][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state
[  866.813847][ T5844] usb 2-1: Product: syz
[  866.816743][ T5941] bridge0: port 2(bridge_slave_1) entered forwarding state
[  866.820712][ T5844] usb 2-1: SerialNumber: syz
[  866.863668][ T5844] usb 2-1: config 0 descriptor??
[  867.340902][ T5844] usb 2-1: USB disconnect, device number 55
[  867.557400][T13657] 8021q: adding VLAN 0 to HW filter on device batadv0
[  867.630116][T13657] veth0_vlan: entered promiscuous mode
[  867.662412][T13657] veth1_vlan: entered promiscuous mode
[  867.673186][T12906] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  867.750101][T13657] veth0_macvtap: entered promiscuous mode
[  867.762651][T13657] veth1_macvtap: entered promiscuous mode
[  867.797110][T13657] batman_adv: batadv0: Interface activated: batadv_slave_0
[  867.837793][T13657] batman_adv: batadv0: Interface activated: batadv_slave_1
[  867.856952][T13657] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  867.879712][T13657] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  867.889501][T12906] usb 3-1: Using ep0 maxpacket: 32
[  867.901012][T13657] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  867.911451][T12906] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  867.923800][T13657] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  867.937730][T12906] usb 3-1: config 0 has no interface number 0
[  867.947295][T12906] usb 3-1: config 0 interface 255 has no altsetting 0
[  867.954829][T13821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2409'.
[  867.979577][T12906] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  867.989424][T12906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.030089][T12906] usb 3-1: Product: syz
[  868.051707][T12906] usb 3-1: Manufacturer: syz
[  868.076395][T12906] usb 3-1: SerialNumber: syz
[  868.108744][T12906] usb 3-1: config 0 descriptor??
[  868.129593][T12906] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  868.153770][T12906] dvb-usb: bulk message failed: -22 (4/0)
[  868.165513][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  868.183591][T12906] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  868.200129][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  868.211596][T12906] dvb-usb: bulk message failed: -22 (5/0)
[  868.219968][T12906] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  868.239364][T12906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  868.364439][T12906] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  868.379229][T12906] usb 3-1: media controller created
[  868.414884][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  868.438859][T12906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  868.449408][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  868.480951][T12906] ttusb2: set interface to alts=3 failed
[  868.572425][T12906] DVB: Unable to find symbol tda10086_attach()
[  868.597420][T12906] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  868.614162][T12906] dvb-usb: bulk message failed: -22 (4/0)
[  868.628171][T12906] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  868.646575][T12906] dvb-usb: bulk message failed: -22 (5/0)
[  868.653370][T12906] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  868.668030][T12906] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  868.687034][T12906] usb 3-1: USB disconnect, device number 63
[  868.841963][T12906] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  868.843326][ T5811] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  869.044240][ T5811] usb 4-1: Using ep0 maxpacket: 16
[  869.065160][ T5811] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  869.082514][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  869.121389][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  869.141564][ T5811] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  869.189466][ T5811] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  869.210490][ T5811] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  869.239369][ T5811] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  869.327929][ T5811] usb 4-1: Manufacturer: syz
[  869.335276][ T5811] usb 4-1: config 0 descriptor??
[  870.297774][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  870.306908][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  870.314142][ T5811] rc_core: IR keymap rc-hauppauge not found
[  870.324501][ T5811] Registered IR keymap rc-empty
[  870.330632][ T5811] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  870.363376][ T5811] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  870.407116][ T5811] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  870.428764][ T5811] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input41
[  870.471353][ T5811] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  870.543318][ T5811] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  870.586776][ T5811] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  870.635049][ T5811] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  870.683365][ T5811] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  870.710832][T13876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2418'.
[  870.735988][ T5811] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  870.785735][ T5811] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  870.834020][ T5811] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  870.883316][ T5811] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  870.933188][ T5811] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  870.980903][ T5811] mceusb 4-1:0.0: Registered 焪 with mce emulator interface version 1
[  871.007779][ T5811] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  871.060929][ T5811] usb 4-1: USB disconnect, device number 61
[  871.265535][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  871.284652][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  871.299042][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  871.311582][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  871.324875][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  871.348780][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  873.434298][T13923] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2426'.
[  873.496432][ T5781] Bluetooth: hci3: command tx timeout
[  874.115533][T13885] chnl_net:caif_netlink_parms(): no params data found
[  874.521080][T12911] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  875.478130][T13885] bridge0: port 1(bridge_slave_0) entered blocking state
[  875.486842][T13885] bridge0: port 1(bridge_slave_0) entered disabled state
[  875.494198][T13885] bridge_slave_0: entered allmulticast mode
[  875.501893][T13885] bridge_slave_0: entered promiscuous mode
[  875.523287][T12911] usb 4-1: Using ep0 maxpacket: 16
[  875.541137][T13885] bridge0: port 2(bridge_slave_1) entered blocking state
[  875.545714][T12911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  875.567602][T13885] bridge0: port 2(bridge_slave_1) entered disabled state
[  875.583518][ T5781] Bluetooth: hci3: command tx timeout
[  875.591696][T13885] bridge_slave_1: entered allmulticast mode
[  875.593366][T12911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  875.605986][T13885] bridge_slave_1: entered promiscuous mode
[  875.625675][T12911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  875.646805][T12911] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  875.683190][T12911] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  875.724409][T12911] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  875.741444][T12911] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  875.750052][T12911] usb 4-1: Manufacturer: syz
[  875.769168][T12911] usb 4-1: config 0 descriptor??
[  875.776641][T13885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  875.839929][T13885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  875.966428][T13885] team0: Port device team_slave_0 added
[  876.019021][T13885] team0: Port device team_slave_1 added
[  876.055463][T13885] batman_adv: batadv0: Adding interface: batadv_slave_0
[  876.068981][T13885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  876.133863][T13885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  876.171942][T12911] rc_core: IR keymap rc-hauppauge not found
[  876.183589][T12911] Registered IR keymap rc-empty
[  876.188638][T12911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  876.209625][T13885] batman_adv: batadv0: Adding interface: batadv_slave_1
[  876.217330][T13885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  876.249959][T12911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  876.262760][T13885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  876.287260][T12911] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  876.315050][T12911] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input42
[  876.359284][T12911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  876.404373][T12911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  876.449813][T12911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  876.466032][T13885] hsr_slave_0: entered promiscuous mode
[  876.476813][T13885] hsr_slave_1: entered promiscuous mode
[  876.505184][T12911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  876.550314][ T5941] hsr_slave_0: left promiscuous mode
[  876.559658][ T5941] hsr_slave_1: left promiscuous mode
[  876.568637][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_0
[  876.590271][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_1
[  876.608056][ T5941] bridge_slave_1: left allmulticast mode
[  876.616913][ T5941] bridge_slave_1: left promiscuous mode
[  876.624097][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state
[  876.649367][ T5941] bridge_slave_0: left allmulticast mode
[  876.668930][ T5941] bridge_slave_0: left promiscuous mode
[  876.687893][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state
[  877.411101][T12911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  877.453459][T12911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  877.487352][T12911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  877.530535][T12911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  877.566299][T12911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  877.615954][T12911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  877.662599][ T5781] Bluetooth: hci3: command tx timeout
[  877.664920][T12911] mceusb 4-1:0.0: Registered 焪 with mce emulator interface version 1
[  877.698950][T12911] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  877.754902][T12911] usb 4-1: USB disconnect, device number 62
[  878.756936][ T5941] team0 (unregistering): Port device team_slave_1 removed
[  878.795473][T13969] syz.3.2433 (13969): drop_caches: 2
[  878.844064][ T5941] team0 (unregistering): Port device team_slave_0 removed
[  878.911324][ T5941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  878.992662][ T5941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  879.738319][ T5781] Bluetooth: hci3: command tx timeout
[  879.841331][ T5941] bond0 (unregistering): Released all slaves
[  881.833227][T14003] tmpfs: Unknown parameter ''
[  882.320084][ T5941] IPVS: stop unused estimator thread 0...
[  882.949798][T13885] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  882.972308][T13885] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  883.077426][T13885] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  883.101541][T13885] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  883.862729][T13885] 8021q: adding VLAN 0 to HW filter on device bond0
[  883.987036][T13885] 8021q: adding VLAN 0 to HW filter on device team0
[  884.280452][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  884.287628][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  885.284705][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state
[  885.291917][ T5941] bridge0: port 2(bridge_slave_1) entered forwarding state
[  886.368417][T14067] tmpfs: Unknown parameter ''
[  887.386507][ T5844] IPVS: starting estimator thread 0...
[  887.655547][T14086] IPVS: using max 19 ests per chain, 45600 per kthread
[  887.706448][T13885] 8021q: adding VLAN 0 to HW filter on device batadv0
[  888.767910][T13885] veth0_vlan: entered promiscuous mode
[  888.893957][T13885] veth1_vlan: entered promiscuous mode
[  890.133510][  T995] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  890.157969][T13885] veth0_macvtap: entered promiscuous mode
[  890.237480][T13885] veth1_macvtap: entered promiscuous mode
[  891.234192][T14117] tmpfs: Unknown parameter ''
[  891.397033][T13885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  891.414229][T13885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  891.434732][T13885] batman_adv: batadv0: Interface activated: batadv_slave_0
[  891.445554][T13885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  891.463137][T13885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  891.519864][T13885] batman_adv: batadv0: Interface activated: batadv_slave_1
[  891.576962][T13885] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  891.597276][T13885] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  891.612921][T14127] comedi comedi3: rti800: I/O port conflict (0x4,16)
[  891.638052][T13885] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  891.687722][T13885] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  891.893752][ T5844] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  891.914280][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  891.922152][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  891.972607][T12469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  892.012339][T12469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  892.228376][ T5844] usb 4-1: Using ep0 maxpacket: 16
[  892.428620][ T5844] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  892.482727][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  892.515960][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  892.536232][ T5844] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  892.556092][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  892.601071][ T5844] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  892.624924][ T5844] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  892.642945][ T5844] usb 4-1: Manufacturer: syz
[  892.682465][ T5844] usb 4-1: config 0 descriptor??
[  894.133180][ T5844] rc_core: IR keymap rc-hauppauge not found
[  894.139236][ T5844] Registered IR keymap rc-empty
[  894.153489][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  894.193305][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  894.234542][ T5844] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  894.267081][ T5844] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input43
[  894.301538][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  894.363391][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  894.427258][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  894.513195][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  894.544767][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  894.673927][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  894.864196][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  895.048096][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  895.215543][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  895.249231][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  895.294891][ T5844] mceusb 4-1:0.0: Registered 焪 with mce emulator interface version 1
[  895.323125][ T5844] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  895.414277][T14173] tmpfs: Unknown parameter ''
[  896.153346][ T5844] usb 4-1: USB disconnect, device number 63
[  896.310068][T13260] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  896.321509][T13260] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  896.376575][T13260] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  896.397869][T13260] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  896.433235][T13260] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  896.513846][T13260] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  898.373228][T12911] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  898.574166][T14210] tmpfs: Unknown parameter ''
[  898.583441][T12911] usb 3-1: Using ep0 maxpacket: 16
[  898.607808][T12911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  898.722388][T12911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  898.853249][ T5781] Bluetooth: hci4: command tx timeout
[  898.872008][T12911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  899.016124][T12911] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  899.157615][T12911] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  899.367342][T12911] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  899.411479][T12911] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  899.498165][T12911] usb 3-1: Manufacturer: syz
[  899.534085][T12911] usb 3-1: config 0 descriptor??
[  899.601186][T14213] syzkaller0: entered promiscuous mode
[  899.607200][T14213] syzkaller0: entered allmulticast mode
[  899.619267][T14185] chnl_net:caif_netlink_parms(): no params data found
[  899.923323][T12911] rc_core: IR keymap rc-hauppauge not found
[  899.929286][T12911] Registered IR keymap rc-empty
[  899.935285][T12911] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  899.973416][T12911] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  900.004482][T12911] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  900.036217][T12911] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input44
[  900.073726][T12911] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  900.121412][T12911] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  900.153585][T12911] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  900.198941][T12911] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  900.243291][T12911] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  900.286019][T12911] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  900.333894][T12911] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  900.376833][T12911] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  900.413291][T12911] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  900.469741][T12911] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  900.545627][T12911] mceusb 3-1:0.0: Registered 焪 with mce emulator interface version 1
[  900.554695][T12911] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  900.588756][T12911] usb 3-1: USB disconnect, device number 64
[  900.934070][ T5781] Bluetooth: hci4: command tx timeout
[  902.745511][T14261] tmpfs: Unknown parameter ''
[  903.013284][ T5781] Bluetooth: hci4: command tx timeout
[  905.098618][ T5781] Bluetooth: hci4: command tx timeout
[  905.498357][T14185] bridge0: port 1(bridge_slave_0) entered blocking state
[  905.512835][T14185] bridge0: port 1(bridge_slave_0) entered disabled state
[  905.521219][T14185] bridge_slave_0: entered allmulticast mode
[  905.544516][T14185] bridge_slave_0: entered promiscuous mode
[  905.726605][T14185] bridge0: port 2(bridge_slave_1) entered blocking state
[  905.795686][T14185] bridge0: port 2(bridge_slave_1) entered disabled state
[  905.862394][T14185] bridge_slave_1: entered allmulticast mode
[  906.126358][T14185] bridge_slave_1: entered promiscuous mode
[  907.054548][T14185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  907.091229][T14185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  907.340371][T14185] team0: Port device team_slave_0 added
[  907.383696][T14185] team0: Port device team_slave_1 added
[  907.477933][T14185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  907.543524][T14185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  907.612099][T14185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  907.709427][T14185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  907.740299][T14185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  907.854798][T14185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  908.146251][T14319] tmpfs: Unknown parameter 'grpquota_b'
[  910.274430][T14185] hsr_slave_0: entered promiscuous mode
[  910.350511][T14185] hsr_slave_1: entered promiscuous mode
[  910.392824][T14185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  910.452993][T14185] Cannot create hsr debugfs directory
[  913.116029][T14348] netlink: 'syz.3.2511': attribute type 11 has an invalid length.
[  913.156842][T14348] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2511'.
[  913.310455][T14354] ALSA: mixer_oss: invalid OSS volume ''
[  913.398098][ T5939] hsr_slave_0: left promiscuous mode
[  913.432245][ T5939] hsr_slave_1: left promiscuous mode
[  913.452777][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_0
[  913.486551][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_1
[  913.518802][ T5939] bridge_slave_1: left allmulticast mode
[  913.533156][ T5939] bridge_slave_1: left promiscuous mode
[  913.542341][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state
[  913.564890][ T5939] bridge_slave_0: left allmulticast mode
[  913.577060][ T5939] bridge_slave_0: left promiscuous mode
[  913.583016][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state
[  913.704000][T14371] tmpfs: Unknown parameter 'grpquota_b'
[  915.202358][ T5939] team0 (unregistering): Port device team_slave_1 removed
[  915.279866][ T5939] team0 (unregistering): Port device team_slave_0 removed
[  915.342722][ T5939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  915.417576][ T5939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  917.135557][ T5939] bond0 (unregistering): Released all slaves
[  917.268595][T14348] ip6erspan0: entered allmulticast mode
[  919.378911][T14399] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2520'.
[  920.429548][ T5939] IPVS: stop unused estimator thread 0...
[  921.205245][T14433] tmpfs: Unknown parameter 'grpquota_b'
[  922.040852][T14436] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2529'.
[  922.050440][T14185] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  922.118614][T14185] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  925.153495][T14185] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  925.187915][T14185] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  925.528764][T14185] 8021q: adding VLAN 0 to HW filter on device bond0
[  925.556284][T14185] 8021q: adding VLAN 0 to HW filter on device team0
[  925.662407][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state
[  925.669829][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state
[  925.698954][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state
[  925.706279][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state
[  925.762654][T14185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  926.159517][T14185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  926.295987][T14185] veth0_vlan: entered promiscuous mode
[  926.318784][T14185] veth1_vlan: entered promiscuous mode
[  926.377047][T14185] veth0_macvtap: entered promiscuous mode
[  926.401519][T14185] veth1_macvtap: entered promiscuous mode
[  926.505693][T14185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  926.535258][T14185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  926.561395][T14185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  926.582695][T14185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  926.615205][T14185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  926.651589][T14185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  926.691131][T14185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  926.709242][T14185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  926.728328][T14185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  926.788760][T14185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  926.976891][T14490] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2537'.
[  927.229909][T14185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  927.280505][T14185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  927.304414][T14185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  927.334067][T14185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  928.340552][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  928.373617][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  928.494442][T12469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  928.502312][T12469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  933.278479][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  933.286678][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  938.263286][ T9994] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  938.481546][ T9994] usb 1-1: unable to get BOS descriptor or descriptor too short
[  938.497132][ T9994] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  938.553670][ T9994] usb 1-1: config 0 has no interfaces?
[  938.683756][ T9994] usb 1-1: string descriptor 0 read error: -22
[  938.740921][ T9994] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  938.973471][ T9994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.991161][ T9994] usb 1-1: config 0 descriptor??
[  939.013964][T13260] Bluetooth: hci1: command 0x0406 tx timeout
[  942.053433][ T5811] usb 1-1: USB disconnect, device number 67
[  943.819051][ T5844] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  944.050942][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  944.104883][ T5844] usb 1-1: config 0 interface 0 has no altsetting 0
[  944.167429][ T5844] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  944.219589][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.267005][ T5844] usb 1-1: Product: syz
[  944.311427][ T5844] usb 1-1: Manufacturer: syz
[  944.349990][ T5844] usb 1-1: SerialNumber: syz
[  944.479032][ T5844] usb 1-1: config 0 descriptor??
[  944.559246][ T5844] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  944.919009][ T5844] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  945.138888][ T5844] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  945.233147][ T5844] usb 1-1: media controller created
[  945.271040][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  945.378084][ T5844] DVB: Unable to find symbol tda10046_attach()
[  945.384364][ T5844] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  945.394387][ T5844] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  945.473153][ T9994] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  945.743907][ T9994] usb 3-1: unable to get BOS descriptor or descriptor too short
[  945.774815][ T9994] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  945.811985][T14708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2583'.
[  945.846722][ T9994] usb 3-1: config 0 has no interfaces?
[  945.996538][ T9994] usb 3-1: string descriptor 0 read error: -22
[  946.062741][ T9994] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  946.158998][ T9994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.378149][ T9994] usb 3-1: config 0 descriptor??
[  946.384250][T14673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  946.414562][T14673] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  946.577215][ T5844] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71
[  946.614684][ T5844] usb 1-1: USB disconnect, device number 68
[  950.558135][T14753] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  950.818798][T12089] usb 3-1: USB disconnect, device number 65
[  951.323315][T12088] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  951.543312][T12088] usb 1-1: Using ep0 maxpacket: 8
[  951.558022][T12088] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  952.084624][T12088] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  952.101639][T12088] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  952.113834][T12088] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  952.159709][T12088] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  952.262214][T12088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  952.285163][T12088] hub 1-1:1.0: bad descriptor, ignoring hub
[  952.291225][T12088] hub: probe of 1-1:1.0 failed with error -5
[  952.308141][T12088] cdc_wdm 1-1:1.0: skipping garbage
[  952.327859][T12088] cdc_wdm 1-1:1.0: skipping garbage
[  952.353523][T12088] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  952.374793][T12088] cdc_wdm 1-1:1.0: Unknown control protocol
[  952.501378][T14773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2597'.
[  954.624272][T14804] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  954.784828][ T5811] usb 1-1: USB disconnect, device number 69
[  955.014348][ T3465] wlan1: Trigger new scan to find an IBSS to join
[  959.540440][T14854] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  961.400401][T14874] overlayfs: conflicting lowerdir path
[  961.406198][  T995] wlan1: Trigger new scan to find an IBSS to join
[  963.973706][ T5934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  971.493328][T12906] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  971.653358][T12906] usb 2-1: device descriptor read/64, error -71
[  972.079149][T12906] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  972.907362][T12906] usb 2-1: device descriptor read/64, error -71
[  972.934776][T14999] netlink: 'syz.2.2661': attribute type 11 has an invalid length.
[  972.944509][T14999] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2661'.
[  973.024012][T14999] ip6erspan0: entered allmulticast mode
[  973.184886][T12906] usb usb2-port1: attempt power cycle
[  973.613424][T12906] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  973.646471][T12906] usb 2-1: device descriptor read/8, error -71
[  973.933129][T12906] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  973.976514][T12906] usb 2-1: device descriptor read/8, error -71
[  974.001339][T15019] syzkaller0: entered promiscuous mode
[  974.022721][T15019] syzkaller0: entered allmulticast mode
[  974.116390][T12906] usb usb2-port1: unable to enumerate USB device
[  979.182757][T15030] netlink: 'syz.1.2672': attribute type 11 has an invalid length.
[  979.190732][T15030] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2672'.
[  979.207603][T15039] ip6erspan0: entered allmulticast mode
[  980.023488][T13260] Bluetooth: hci2: command 0x0406 tx timeout
[  980.093435][T12906] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  980.321740][T12906] usb 2-1: device descriptor read/64, error -71
[  980.703951][T12906] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  981.483202][T12906] usb 2-1: device descriptor read/64, error -71
[  982.080264][T12906] usb usb2-port1: attempt power cycle
[  983.589405][T15101] netlink: 'syz.1.2690': attribute type 11 has an invalid length.
[  983.624320][T15101] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2690'.
[  988.094374][T15146] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  992.423397][ T5812] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  992.783823][ T5812] usb 2-1: Using ep0 maxpacket: 16
[  992.833793][ T5812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  992.866447][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  992.913210][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  992.964533][ T5812] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  992.978455][ T5812] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  993.001872][ T5812] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  993.017536][ T5812] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  993.031082][ T5812] usb 2-1: Manufacturer: syz
[  993.058100][ T5812] usb 2-1: config 0 descriptor??
[  993.182165][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  993.189670][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  993.363424][ T5812] rc_core: IR keymap rc-hauppauge not found
[  993.371215][ T5812] Registered IR keymap rc-empty
[  993.388322][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  993.491714][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  993.618808][ T5812] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  993.704862][ T5811] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  993.808281][ T5812] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input46
[  993.977468][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  994.011534][ T5811] usb 3-1: unable to get BOS descriptor or descriptor too short
[  994.078768][ T5811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  994.123502][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  994.162010][ T5811] usb 3-1: config 0 has no interfaces?
[  994.178754][ T5811] usb 3-1: string descriptor 0 read error: -22
[  994.190747][ T5811] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  994.202321][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  994.507265][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  995.137057][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.155044][ T5811] usb 3-1: config 0 descriptor??
[  995.173364][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  995.208838][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  995.253202][T13260] Bluetooth: hci3: command 0x0406 tx timeout
[  995.383554][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  995.413149][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  995.443251][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  996.203579][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  996.246690][ T5812] mceusb 2-1:0.0: Registered 焪 with mce emulator interface version 1
[  996.263242][ T5812] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  996.287260][ T5812] usb 2-1: USB disconnect, device number 63
[  996.953532][ T5812] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  997.920954][ T5812] usb 2-1: Using ep0 maxpacket: 8
[  997.979465][ T5812] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  998.008199][ T5812] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  998.065088][ T5812] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  998.101339][ T9994] usb 3-1: USB disconnect, device number 66
[  998.108662][ T5812] usb 2-1: Product: syz
[  998.135524][ T5812] usb 2-1: Manufacturer: syz
[  998.160609][ T5812] usb 2-1: SerialNumber: syz
[  998.288825][ T5812] usb 2-1: palm_os_3_probe - error -71 getting connection information
[  998.314458][ T5812] visor: probe of 2-1:1.0 failed with error -71
[  998.355009][ T5812] usb 2-1: USB disconnect, device number 64
[  998.563308][ T9994] usb 3-1: new low-speed USB device number 67 using dummy_hcd
[  998.769169][ T9994] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  998.872492][ T9994] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  998.999330][ T9994] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  999.145389][ T9994] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  999.214243][ T9994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  999.266413][T15275] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  999.313328][ T9994] hub 3-1:1.0: bad descriptor, ignoring hub
[  999.322317][ T9994] hub: probe of 3-1:1.0 failed with error -5
[  999.355849][ T9994] cdc_wdm 3-1:1.0: skipping garbage
[  999.369458][ T9994] cdc_wdm 3-1:1.0: skipping garbage
[  999.399207][ T9994] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  999.413377][ T9994] cdc_wdm 3-1:1.0: Unknown control protocol
[  999.466094][T15302] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2736'.
[  999.472270][T15301] syzkaller0: entered promiscuous mode
[  999.481498][T15301] syzkaller0: entered allmulticast mode
[  999.535250][T15301] tipc: Started in network mode
[  999.573417][T15301] tipc: Node identity 0e666e73c1cd, cluster identity 4711
[  999.581310][T15301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  999.657054][T15300] tipc: Resetting bearer <eth:syzkaller0>
[ 1000.198578][T15300] tipc: Disabling bearer <eth:syzkaller0>
[ 1000.429248][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1000.436168][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1000.443163][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1000.450145][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1000.456521][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1000.463141][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1000.469462][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1000.476126][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1000.482454][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1000.489079][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1000.497167][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1000.503807][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1000.510211][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1000.516837][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1000.523151][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1000.529781][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1000.536144][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1000.542764][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1000.549075][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1000.555705][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1000.867587][ T5812] tipc: Node number set to 3484118643
[ 1000.993551][T12906] usb 3-1: USB disconnect, device number 67
[ 1001.142770][T15309] syzkaller0: entered promiscuous mode
[ 1001.148431][T15309] syzkaller0: entered allmulticast mode
[ 1001.263228][ T5812] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1001.478338][ T5812] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1001.488849][ T5812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1001.537464][ T5812] usb 2-1: config 0 has no interfaces?
[ 1001.564627][ T5812] usb 2-1: string descriptor 0 read error: -22
[ 1001.574083][ T5812] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[ 1001.600199][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1001.791276][ T5812] usb 2-1: config 0 descriptor??
[ 1004.020106][ T5812] usb 2-1: USB disconnect, device number 65
[ 1007.264992][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2756'.
[ 1007.282702][T15360] team_slave_0: entered promiscuous mode
[ 1007.288927][T15360] team_slave_1: entered promiscuous mode
[ 1007.295262][T15360] macvtap1: entered promiscuous mode
[ 1007.300588][T15360] team0: entered promiscuous mode
[ 1007.306543][T15360] macvtap1: entered allmulticast mode
[ 1007.311990][T15360] team0: entered allmulticast mode
[ 1007.318521][T15360] team_slave_0: entered allmulticast mode
[ 1007.324745][T15360] team_slave_1: entered allmulticast mode
[ 1007.332118][T15360] 8021q: adding VLAN 0 to HW filter on device macvtap1
[ 1007.421252][T15364] team0: left allmulticast mode
[ 1007.429924][T15364] team_slave_0: left allmulticast mode
[ 1007.440049][T15364] team_slave_1: left allmulticast mode
[ 1007.459398][T15364] team0: left promiscuous mode
[ 1007.586496][T15364] team_slave_0: left promiscuous mode
[ 1007.592083][T15364] team_slave_1: left promiscuous mode
[ 1007.689979][T15364] macvtap1: left promiscuous mode
[ 1007.736579][T15364] macvtap1: left allmulticast mode
[ 1009.400789][T15350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1010.669583][T15390] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1011.464944][T15397] ==================================================================
[ 1011.482230][T15397] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc9/0x360
[ 1011.490085][T15397] Read of size 8 at addr ffff888140068218 by task syz.2.2766/15397
[ 1011.498155][T15397] 
[ 1011.500568][T15397] CPU: 1 PID: 15397 Comm: syz.2.2766 Not tainted syzkaller #0
[ 1011.508087][T15397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1011.518171][T15397] Call Trace:
[ 1011.521575][T15397]  <TASK>
[ 1011.524617][T15397]  dump_stack_lvl+0x18c/0x250
[ 1011.529445][T15397]  ? read_lock_is_recursive+0x20/0x20
[ 1011.535072][T15397]  ? show_regs_print_info+0x20/0x20
[ 1011.540303][T15397]  ? load_image+0x420/0x420
[ 1011.544869][T15397]  ? _raw_spin_lock_irqsave+0xc0/0x100
[ 1011.550454][T15397]  ? __virt_addr_valid+0x10c/0x380
[ 1011.555624][T15397]  ? __virt_addr_valid+0x10c/0x380
[ 1011.560759][T15397]  ? __virt_addr_valid+0x10c/0x380
[ 1011.565897][T15397]  print_report+0xa8/0x210
[ 1011.570344][T15397]  ? dvb_device_open+0xc9/0x360
[ 1011.575223][T15397]  kasan_report+0x117/0x150
[ 1011.579847][T15397]  ? chrdev_open+0x385/0x600
[ 1011.584466][T15397]  ? dvb_device_open+0xc9/0x360
[ 1011.589615][T15397]  dvb_device_open+0xc9/0x360
[ 1011.594328][T15397]  chrdev_open+0x58c/0x600
[ 1011.598766][T15397]  ? cd_forget+0x160/0x160
[ 1011.603208][T15397]  ? fsnotify_perm+0x3ed/0x5e0
[ 1011.608043][T15397]  do_dentry_open+0x880/0x14b0
[ 1011.612830][T15397]  ? cd_forget+0x160/0x160
[ 1011.617274][T15397]  path_openat+0x284f/0x3270
[ 1011.621922][T15397]  ? do_sys_openat2+0xda/0x1d0
[ 1011.626721][T15397]  ? verify_lock_unused+0x140/0x140
[ 1011.631940][T15397]  ? do_filp_open+0x430/0x430
[ 1011.636644][T15397]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1011.642650][T15397]  do_filp_open+0x1f2/0x430
[ 1011.647176][T15397]  ? vfs_tmpfile+0x480/0x480
[ 1011.651794][T15397]  ? _raw_spin_unlock+0x28/0x40
[ 1011.656675][T15397]  ? alloc_fd+0x590/0x640
[ 1011.661035][T15397]  do_sys_openat2+0x134/0x1d0
[ 1011.665741][T15397]  ? do_sys_open+0xe0/0xe0
[ 1011.670183][T15397]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1011.676183][T15397]  ? lock_chain_count+0x20/0x20
[ 1011.681052][T15397]  __x64_sys_openat+0x139/0x160
[ 1011.685927][T15397]  do_syscall_64+0x55/0xb0
[ 1011.690372][T15397]  ? clear_bhb_loop+0x40/0x90
[ 1011.695156][T15397]  ? clear_bhb_loop+0x40/0x90
[ 1011.699856][T15397]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1011.705858][T15397] RIP: 0033:0x7f9ffdf5e68e
[ 1011.710358][T15397] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1011.730045][T15397] RSP: 002b:00007f9ffee31b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1011.738562][T15397] RAX: ffffffffffffffda RBX: 00007f9ffee326c0 RCX: 00007f9ffdf5e68e
[ 1011.746545][T15397] RDX: 0000000000000002 RSI: 00007f9ffee31c00 RDI: ffffffffffffff9c
[ 1011.754534][T15397] RBP: 00007f9ffee31c00 R08: 0000000000000000 R09: 0000000000000000
[ 1011.762525][T15397] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1011.770512][T15397] R13: 00007f9ffe226128 R14: 00007f9ffe226090 R15: 00007ffca46f8458
[ 1011.778521][T15397]  </TASK>
[ 1011.781553][T15397] 
[ 1011.783881][T15397] Allocated by task 1:
[ 1011.788045][T15397]  kasan_set_track+0x4e/0x70
[ 1011.792660][T15397]  __kasan_kmalloc+0x8f/0xa0
[ 1011.797268][T15397]  dvb_register_device+0x309/0x1df0
[ 1011.802482][T15397]  dvb_register_frontend+0x62d/0x900
[ 1011.807779][T15397]  vidtv_bridge_probe+0x9d6/0xf60
[ 1011.812916][T15397]  platform_probe+0x13b/0x1c0
[ 1011.817648][T15397]  really_probe+0x247/0xae0
[ 1011.822166][T15397]  __driver_probe_device+0x1f5/0x390
[ 1011.827470][T15397]  driver_probe_device+0x4f/0x420
[ 1011.832518][T15397]  __driver_attach+0x444/0x6d0
[ 1011.837297][T15397]  bus_for_each_dev+0x235/0x2b0
[ 1011.842171][T15397]  bus_add_driver+0x340/0x630
[ 1011.846878][T15397]  driver_register+0x23a/0x310
[ 1011.851657][T15397]  vidtv_bridge_init+0x3d/0x70
[ 1011.856512][T15397]  do_one_initcall+0x242/0x790
[ 1011.861319][T15397]  do_initcall_level+0x13d/0x1f0
[ 1011.866309][T15397]  do_initcalls+0x69/0xd0
[ 1011.870750][T15397]  kernel_init_freeable+0x3d9/0x560
[ 1011.875965][T15397]  kernel_init+0x1d/0x1c0
[ 1011.880301][T15397]  ret_from_fork+0x48/0x80
[ 1011.884735][T15397]  ret_from_fork_asm+0x11/0x20
[ 1011.889516][T15397] 
[ 1011.891838][T15397] The buggy address belongs to the object at ffff888140068200
[ 1011.891838][T15397]  which belongs to the cache kmalloc-256 of size 256
[ 1011.906015][T15397] The buggy address is located 24 bytes inside of
[ 1011.906015][T15397]  freed 256-byte region [ffff888140068200, ffff888140068300)
[ 1011.919745][T15397] 
[ 1011.922075][T15397] The buggy address belongs to the physical page:
[ 1011.928581][T15397] page:ffffea0005001a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888140068200 pfn:0x140068
[ 1011.940137][T15397] head:ffffea0005001a00 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1011.949080][T15397] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff)
[ 1011.957152][T15397] page_type: 0xffffffff()
[ 1011.961507][T15397] raw: 057ff00000000840 ffff888017c41b40 ffffea0005099c10 ffffea0005049e10
[ 1011.970108][T15397] raw: ffff888140068200 000000000010000f 00000001ffffffff 0000000000000000
[ 1011.978708][T15397] page dumped because: kasan: bad access detected
[ 1011.985147][T15397] page_owner tracks the page as allocated
[ 1011.990864][T15397] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16004428365, free_ts 0
[ 1012.010603][T15397]  post_alloc_hook+0x1c1/0x200
[ 1012.015424][T15397]  get_page_from_freelist+0x2181/0x22a0
[ 1012.020986][T15397]  __alloc_pages+0x1f0/0x460
[ 1012.025587][T15397]  alloc_page_interleave+0x24/0x1e0
[ 1012.030798][T15397]  alloc_slab_page+0x5d/0x180
[ 1012.035493][T15397]  new_slab+0x87/0x2d0
[ 1012.039584][T15397]  ___slab_alloc+0xc5c/0x12f0
[ 1012.044287][T15397]  __kmem_cache_alloc_node+0x11f/0x250
[ 1012.049764][T15397]  kmalloc_trace+0x2a/0xe0
[ 1012.054200][T15397]  bus_add_driver+0x162/0x630
[ 1012.058886][T15397]  driver_register+0x23a/0x310
[ 1012.063665][T15397]  usb_register_driver+0x205/0x3c0
[ 1012.068851][T15397]  do_one_initcall+0x242/0x790
[ 1012.073634][T15397]  do_initcall_level+0x13d/0x1f0
[ 1012.078592][T15397]  do_initcalls+0x69/0xd0
[ 1012.082937][T15397]  kernel_init_freeable+0x3d9/0x560
[ 1012.088163][T15397] page_owner free stack trace missing
[ 1012.093568][T15397] 
[ 1012.095895][T15397] Memory state around the buggy address:
[ 1012.101764][T15397]  ffff888140068100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1012.109835][T15397]  ffff888140068180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1012.117923][T15397] >ffff888140068200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1012.126080][T15397]                             ^
[ 1012.130933][T15397]  ffff888140068280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1012.139004][T15397]  ffff888140068300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1012.147078][T15397] ==================================================================
[ 1012.163466][T15397] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1012.170801][T15397] CPU: 1 PID: 15397 Comm: syz.2.2766 Not tainted syzkaller #0
[ 1012.178286][T15397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1012.188368][T15397] Call Trace:
[ 1012.191661][T15397]  <TASK>
[ 1012.194614][T15397]  dump_stack_lvl+0x18c/0x250
[ 1012.199319][T15397]  ? show_regs_print_info+0x20/0x20
[ 1012.204543][T15397]  ? load_image+0x420/0x420
[ 1012.209065][T15397]  panic+0x2ca/0x720
[ 1012.213023][T15397]  ? bpf_jit_dump+0xd0/0xd0
[ 1012.217545][T15397]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1012.223200][T15397]  ? dvb_device_open+0xc9/0x360
[ 1012.228420][T15397]  ? check_panic_on_warn+0x70/0xa0
[ 1012.233582][T15397]  ? dvb_device_open+0xc9/0x360
[ 1012.238467][T15397]  check_panic_on_warn+0x84/0xa0
[ 1012.243468][T15397]  ? dvb_device_open+0xc9/0x360
[ 1012.248340][T15397]  end_report+0x6f/0x130
[ 1012.252598][T15397]  kasan_report+0x128/0x150
[ 1012.257118][T15397]  ? chrdev_open+0x385/0x600
[ 1012.261727][T15397]  ? dvb_device_open+0xc9/0x360
[ 1012.266604][T15397]  dvb_device_open+0xc9/0x360
[ 1012.271303][T15397]  chrdev_open+0x58c/0x600
[ 1012.275738][T15397]  ? cd_forget+0x160/0x160
[ 1012.280174][T15397]  ? fsnotify_perm+0x3ed/0x5e0
[ 1012.284957][T15397]  do_dentry_open+0x880/0x14b0
[ 1012.289743][T15397]  ? cd_forget+0x160/0x160
[ 1012.294181][T15397]  path_openat+0x284f/0x3270
[ 1012.298800][T15397]  ? do_sys_openat2+0xda/0x1d0
[ 1012.303587][T15397]  ? verify_lock_unused+0x140/0x140
[ 1012.308803][T15397]  ? do_filp_open+0x430/0x430
[ 1012.313496][T15397]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1012.319504][T15397]  do_filp_open+0x1f2/0x430
[ 1012.324027][T15397]  ? vfs_tmpfile+0x480/0x480
[ 1012.328648][T15397]  ? _raw_spin_unlock+0x28/0x40
[ 1012.333523][T15397]  ? alloc_fd+0x590/0x640
[ 1012.337869][T15397]  do_sys_openat2+0x134/0x1d0
[ 1012.342563][T15397]  ? do_sys_open+0xe0/0xe0
[ 1012.346997][T15397]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1012.352996][T15397]  ? lock_chain_count+0x20/0x20
[ 1012.358122][T15397]  __x64_sys_openat+0x139/0x160
[ 1012.362995][T15397]  do_syscall_64+0x55/0xb0
[ 1012.367430][T15397]  ? clear_bhb_loop+0x40/0x90
[ 1012.372116][T15397]  ? clear_bhb_loop+0x40/0x90
[ 1012.376811][T15397]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1012.382737][T15397] RIP: 0033:0x7f9ffdf5e68e
[ 1012.387166][T15397] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1012.406793][T15397] RSP: 002b:00007f9ffee31b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1012.415227][T15397] RAX: ffffffffffffffda RBX: 00007f9ffee326c0 RCX: 00007f9ffdf5e68e
[ 1012.423222][T15397] RDX: 0000000000000002 RSI: 00007f9ffee31c00 RDI: ffffffffffffff9c
[ 1012.431321][T15397] RBP: 00007f9ffee31c00 R08: 0000000000000000 R09: 0000000000000000
[ 1012.439337][T15397] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1012.447334][T15397] R13: 00007f9ffe226128 R14: 00007f9ffe226090 R15: 00007ffca46f8458
[ 1012.455346][T15397]  </TASK>
[ 1012.458622][T15397] Kernel Offset: disabled
[ 1012.462974][T15397] Rebooting in 86400 seconds..