last executing test programs: 1m45.547158411s ago: executing program 2 (id=486): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x5, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x1, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x63c, 0x10, 0xa, 0x7f, 0x0, 0x0, 0x5, 0x197a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4010000], [0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x1, 0xfffffffc, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 1m45.326050252s ago: executing program 2 (id=490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)=""/5, 0x5}], 0x1, 0x1, 0xd) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m42.504535698s ago: executing program 2 (id=497): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c09, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x9, 0x9}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m40.742128986s ago: executing program 2 (id=509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r5, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) sendmmsg(r5, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_TYPE={0x0, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xe55}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}, 0x1, 0x0, 0x0, 0x359b171663d45917}, 0x0) 1m39.236972998s ago: executing program 2 (id=521): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="e90c610faca20180c2000002"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 1m38.495510919s ago: executing program 2 (id=525): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x200400c4}}], 0x1, 0xc000) 1m22.893133342s ago: executing program 32 (id=525): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x200400c4}}], 0x1, 0xc000) 9.380818196s ago: executing program 0 (id=862): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000011c0)=@multiplanar_overlay={0xbc8c, 0xa, 0x4, 0x2000, 0x6, {0x0, 0xea60}, {0x3, 0x2, 0xf7, 0xa, 0x3, 0x80, "16d3973f"}, 0x4, 0x3, {0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000380), &(0x7f0000000580)=r5}, 0x20) 9.251922239s ago: executing program 0 (id=866): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000500)={&(0x7f0000000580)=[{0x5, 0x1201, 0x0, 0x0}], 0x1}) 7.540706894s ago: executing program 5 (id=868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000000200), 0x4) listen(r3, 0x0) close(0x3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20004040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r5 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4004ae52, &(0x7f0000000000)=0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, &(0x7f0000001100), 0x0, &(0x7f0000001140)) 6.617882026s ago: executing program 4 (id=873): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x8044) sendto$inet6(r0, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 6.280515874s ago: executing program 4 (id=875): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000011c0)=@multiplanar_overlay={0xbc8c, 0xa, 0x4, 0x2000, 0x6, {0x0, 0xea60}, {0x3, 0x2, 0xf7, 0xa, 0x3, 0x80, "16d3973f"}, 0x4, 0x3, {0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_open_procfs$pagemap(0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x5, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x1, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x63c, 0x10, 0xa, 0x7f, 0x0, 0x0, 0x5, 0x197a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4010000], [0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x1, 0xfffffffc, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000380), &(0x7f0000000580)=r4}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60010700000cba3842b83a2e6dfe0000000000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) 6.141210763s ago: executing program 0 (id=876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r3, &(0x7f0000001300)=""/4118, 0x1016, 0x0) 5.415968883s ago: executing program 1 (id=877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1d, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x0, 0x2, 0x0, r3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x7f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x20004040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r5 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000001140)) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2a, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/38}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 5.026527328s ago: executing program 4 (id=878): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 4.823727922s ago: executing program 5 (id=879): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x395180, 0x149) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0x842) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) 4.202779569s ago: executing program 0 (id=880): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000011c0)=@multiplanar_overlay={0xbc8c, 0xa, 0x4, 0x2000, 0x6, {0x0, 0xea60}, {0x3, 0x2, 0xf7, 0xa, 0x3, 0x80, "16d3973f"}, 0x4, 0x3, {0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_open_procfs$pagemap(0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000380), &(0x7f0000000580)}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) 4.023213273s ago: executing program 4 (id=882): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 3.043469165s ago: executing program 0 (id=883): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x39, 0x34, 0x39, 0x32, 0x35, 0x66, 0x65, 0x33, 0x39, 0x65, 0x37, 0x34, 0x36, 0x33, 0x35, 0x62]}, &(0x7f0000000240)={0x0, "15a5c545ba0fe93d5a40760792085a8a35b65d422605d0574be3bd6c964727d78d4f3f37299aa31f5c5610eb9c976330ae16497f816611b4b6db0190e7af32f7", 0x12}, 0x48, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000002c0)='#', 0x1) 3.031233979s ago: executing program 3 (id=884): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 2.856553667s ago: executing program 3 (id=885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.856246427s ago: executing program 0 (id=886): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000500)={&(0x7f0000000580)=[{0x5, 0x1201, 0x0, 0x0}], 0x1}) 2.509175436s ago: executing program 1 (id=887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x78}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) close(r0) 2.446751308s ago: executing program 5 (id=888): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pptp(0x18, 0x1, 0x2) socket(0x400000000010, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 2.357442775s ago: executing program 1 (id=889): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) listen(r5, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=r5], 0x48) 2.217336574s ago: executing program 4 (id=890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r2, &(0x7f0000001300)=""/4118, 0x1016, 0x0) 1.883357514s ago: executing program 3 (id=891): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180)={0x560}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.878826976s ago: executing program 5 (id=892): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 1.779210898s ago: executing program 3 (id=893): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000011c0)=@multiplanar_overlay={0xbc8c, 0xa, 0x4, 0x2000, 0x6, {0x0, 0xea60}, {0x3, 0x2, 0xf7, 0xa, 0x3, 0x80, "16d3973f"}, 0x4, 0x3, {0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_open_procfs$pagemap(0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000380), &(0x7f0000000580)}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) 1.409749253s ago: executing program 4 (id=894): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x44, &(0x7f0000000a00)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x40, 0x19, 0x2, "9beb"}, 0x0, 0x0, 0x0, 0x0}) 759.687734ms ago: executing program 5 (id=895): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0088"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a0006000802"], 0x44}}, 0x28000) 717.390681ms ago: executing program 3 (id=896): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 447.692626ms ago: executing program 3 (id=897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1d, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x0, 0x2, 0x0, r3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x7f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x20004040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r5 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000001140)) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2a, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/38}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 446.682514ms ago: executing program 1 (id=898): unshare(0x22020600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xa) 296.631032ms ago: executing program 1 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x78}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) close(r0) 142.555771ms ago: executing program 1 (id=900): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 0s ago: executing program 5 (id=901): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x18014) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): sts in 'hsr' [ 83.571052][ T5797] Cannot create hsr debugfs directory [ 83.591720][ T5796] hsr_slave_0: entered promiscuous mode [ 83.592458][ T5796] hsr_slave_1: entered promiscuous mode [ 83.592986][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 83.593003][ T5796] Cannot create hsr debugfs directory [ 84.578307][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.623510][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.639504][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.689579][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.778552][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.800426][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.839541][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.892846][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.924791][ T5804] Bluetooth: hci0: command tx timeout [ 85.005439][ T5804] Bluetooth: hci4: command tx timeout [ 85.007497][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.014887][ T5808] Bluetooth: hci1: command tx timeout [ 85.014962][ T5807] Bluetooth: hci2: command tx timeout [ 85.015041][ T5804] Bluetooth: hci3: command tx timeout [ 85.076320][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.121972][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.152912][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.248704][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.285339][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.309700][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.353133][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.450996][ T5796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.491803][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.502309][ T5796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.534541][ T5796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.571187][ T5796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.647816][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.679409][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.692401][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.694229][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.727474][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.727599][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.771813][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.803701][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.813511][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.814137][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.851374][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.851532][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.901541][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.931477][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.933073][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.933176][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.971471][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.971606][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.037068][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.044270][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.081097][ T2630] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.081284][ T2630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.120782][ T2630] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.120928][ T2630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.143321][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.194158][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.205116][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.249586][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.256929][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.478144][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.552344][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.722897][ T5809] veth0_vlan: entered promiscuous mode [ 86.770589][ T5809] veth1_vlan: entered promiscuous mode [ 86.803129][ T5800] veth0_vlan: entered promiscuous mode [ 86.814141][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.831660][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.857764][ T5800] veth1_vlan: entered promiscuous mode [ 86.890279][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.922509][ T5809] veth0_macvtap: entered promiscuous mode [ 86.967757][ T5809] veth1_macvtap: entered promiscuous mode [ 87.005340][ T5804] Bluetooth: hci0: command tx timeout [ 87.089001][ T5800] veth0_macvtap: entered promiscuous mode [ 87.091620][ T5799] veth0_vlan: entered promiscuous mode [ 87.095946][ T5804] Bluetooth: hci3: command tx timeout [ 87.095972][ T5804] Bluetooth: hci2: command tx timeout [ 87.095990][ T5804] Bluetooth: hci1: command tx timeout [ 87.096007][ T5804] Bluetooth: hci4: command tx timeout [ 87.127244][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.158453][ T5797] veth0_vlan: entered promiscuous mode [ 87.172446][ T5800] veth1_macvtap: entered promiscuous mode [ 87.183173][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.204551][ T5799] veth1_vlan: entered promiscuous mode [ 87.245270][ T5797] veth1_vlan: entered promiscuous mode [ 87.246731][ T87] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.253658][ T87] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.279330][ T87] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.293474][ T87] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.309013][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.365181][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.481614][ T87] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.505589][ T87] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.512740][ T87] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.543728][ T87] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.559115][ T5799] veth0_macvtap: entered promiscuous mode [ 87.590923][ T5797] veth0_macvtap: entered promiscuous mode [ 87.618735][ T5799] veth1_macvtap: entered promiscuous mode [ 87.671791][ T5797] veth1_macvtap: entered promiscuous mode [ 87.678790][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.678814][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.761173][ T5796] veth0_vlan: entered promiscuous mode [ 87.801671][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.810615][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.810634][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.827384][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.832742][ T5796] veth1_vlan: entered promiscuous mode [ 87.846999][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.851193][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.922496][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.936747][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.942399][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.942989][ T2630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.943004][ T2630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.956358][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.982360][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.990521][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.016407][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.100492][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.126749][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.126768][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.328049][ T5796] veth0_macvtap: entered promiscuous mode [ 88.369516][ T5796] veth1_macvtap: entered promiscuous mode [ 88.432977][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.432994][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.454878][ T5888] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.561803][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.631544][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.631564][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.634086][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.634730][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 88.672183][ T5888] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 88.672236][ T5888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 88.672261][ T5888] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.672283][ T5888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.672308][ T5888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 88.673405][ T5888] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 88.673452][ T5888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 88.673477][ T5888] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.673501][ T5888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.673525][ T5888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 88.739101][ T2630] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.739515][ T2630] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.740393][ T2630] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.747105][ T2630] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.769188][ T2630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.769207][ T2630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.778275][ T5888] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 88.778634][ T5888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 88.778660][ T5888] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.778683][ T5888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.778707][ T5888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 88.892016][ T5888] usb 3-1: string descriptor 0 read error: -22 [ 88.892194][ T5888] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 88.892207][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.991840][ T5888] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 89.027110][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.027124][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.085315][ T5807] Bluetooth: hci0: command tx timeout [ 89.164923][ T5807] Bluetooth: hci4: command tx timeout [ 89.164952][ T5807] Bluetooth: hci1: command tx timeout [ 89.164978][ T5807] Bluetooth: hci2: command tx timeout [ 89.164993][ T5807] Bluetooth: hci3: command tx timeout [ 89.422939][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.422961][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.526699][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.526719][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.767815][ T5933] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2'. [ 91.253207][ T5888] usb 3-1: USB disconnect, device number 2 [ 91.403418][ T5949] Zero length message leads to an empty skb [ 92.714651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.986417][ T5969] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 93.017839][ T5969] bond0: entered promiscuous mode [ 93.017859][ T5969] bond_slave_0: entered promiscuous mode [ 93.018031][ T5969] bond_slave_1: entered promiscuous mode [ 93.018185][ T5969] bond0: entered allmulticast mode [ 93.018195][ T5969] bond_slave_0: entered allmulticast mode [ 93.018208][ T5969] bond_slave_1: entered allmulticast mode [ 93.077004][ T5969] bridge1: entered promiscuous mode [ 93.078288][ T5969] bridge1: entered allmulticast mode [ 93.079935][ T5969] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 93.486573][ T5978] misc userio: Invalid payload size [ 93.488978][ T5978] misc userio: The device must be registered before sending interrupts [ 94.144662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.144703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.144734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.144765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.144796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.144827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.144858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.144889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.144920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.902292][ T5995] usb usb8: usbfs: process 5995 (syz.3.25) did not claim interface 0 before use [ 95.007140][ T6001] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.654742][ T5830] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 95.744734][ T5885] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.821699][ T5830] usb 5-1: config 1 has an invalid interface number: 236 but max is 0 [ 95.821717][ T5830] usb 5-1: config 1 has no interface number 0 [ 95.821743][ T5830] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 95.821754][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.886847][ T5830] rndis_host 5-1:1.236: skipping garbage [ 95.886868][ T5830] rndis_host 5-1:1.236: More than one union descriptor, skipping ... [ 95.886886][ T5830] usb 5-1: bad CDC descriptors [ 95.895068][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 95.901130][ T5885] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 95.901154][ T5885] usb 1-1: config 179 has no interface number 0 [ 95.901196][ T5885] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 95.901221][ T5885] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 95.901247][ T5885] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 95.901270][ T5885] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 95.901295][ T5885] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 95.901327][ T5885] usb 1-1: config 179 interface 65 has no altsetting 0 [ 95.901357][ T5885] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 95.901378][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.993247][ T5830] cdc_acm 5-1:1.236: skipping garbage [ 95.993267][ T5830] cdc_acm 5-1:1.236: More than one union descriptor, skipping ... [ 96.079461][ T5830] usb 5-1: USB disconnect, device number 2 [ 96.313940][ T5885] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 96.429900][ T5148] input input5: unable to receive magic message: -110 [ 96.630975][ T5148] input input5: unable to receive magic message: -71 [ 96.702461][ T6032] input: syz1 as /devices/virtual/input/input6 [ 96.702591][ T6032] input: failed to attach handler leds to device input6, error: -6 [ 96.707207][ T5885] usb 1-1: USB disconnect, device number 2 [ 96.707329][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 96.865243][ T5830] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.953630][ T6039] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.966562][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'. [ 96.966640][ T6039] bridge_slave_1: left allmulticast mode [ 96.966661][ T6039] bridge_slave_1: left promiscuous mode [ 96.967134][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.020281][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.020315][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.023338][ T5830] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 97.023363][ T5830] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 97.023381][ T5830] usb 3-1: Manufacturer: syz [ 97.070102][ T5830] usb 3-1: config 0 descriptor?? [ 97.121692][ T6039] bridge_slave_0: left allmulticast mode [ 97.121720][ T6039] bridge_slave_0: left promiscuous mode [ 97.158791][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.801040][ T6055] bond0: entered promiscuous mode [ 97.801062][ T6055] bond_slave_0: entered promiscuous mode [ 97.801280][ T6055] bond_slave_1: entered promiscuous mode [ 97.803675][ T6055] batadv0: entered promiscuous mode [ 97.843296][ T6055] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 97.906113][ T5830] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 98.116844][ T5914] usb 3-1: USB disconnect, device number 3 [ 98.265567][ T6069] netlink: 'syz.0.52': attribute type 10 has an invalid length. [ 98.266092][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.266850][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.276220][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.276377][ T6069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.277289][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.277443][ T6069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.281579][ T6069] bridge0: entered promiscuous mode [ 98.281728][ T6069] bridge0: entered allmulticast mode [ 98.283311][ T6069] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 98.494735][ T5888] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 98.657429][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 98.657464][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 98.657504][ T5888] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 98.657524][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.714295][ T5888] usb 2-1: config 0 descriptor?? [ 98.715204][ T6064] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 99.032854][ T5888] usbhid 2-1:0.0: can't add hid device: -71 [ 99.032962][ T5888] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 99.078160][ T5888] usb 2-1: USB disconnect, device number 2 [ 101.704804][ T5914] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 101.819308][ T6100] syzkaller1: entered promiscuous mode [ 101.819335][ T6100] syzkaller1: entered allmulticast mode [ 101.858380][ T5914] usb 2-1: config 0 has no interfaces? [ 101.861185][ T5914] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 101.861214][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.861234][ T5914] usb 2-1: Product: syz [ 101.861247][ T5914] usb 2-1: Manufacturer: syz [ 101.861261][ T5914] usb 2-1: SerialNumber: syz [ 101.924856][ T5914] usb 2-1: config 0 descriptor?? [ 102.996428][ T5914] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.064759][ T5830] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.154696][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 103.156579][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.156623][ T5914] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 103.156645][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.160739][ T5914] usb 1-1: config 0 descriptor?? [ 103.214817][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 103.224473][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 103.231289][ T5830] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 103.231317][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.231335][ T5830] usb 3-1: Product: syz [ 103.231349][ T5830] usb 3-1: Manufacturer: syz [ 103.231362][ T5830] usb 3-1: SerialNumber: syz [ 103.252399][ T5830] usb 3-1: config 0 descriptor?? [ 103.276079][ T5830] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 103.277290][ T5830] dvb-usb: bulk message failed: -22 (4/0) [ 103.277310][ T5830] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 103.277434][ T5830] dvb-usb: bulk message failed: -22 (5/0) [ 103.277448][ T5830] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 103.307889][ T5830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.309630][ T5830] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 103.309767][ T5830] usb 3-1: media controller created [ 103.358738][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.398320][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 103.398354][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 103.398393][ T9] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 103.398423][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.408425][ T9] usb 5-1: config 0 descriptor?? [ 103.422870][ T5830] usb 3-1: selecting invalid altsetting 3 [ 103.423092][ T5830] ttusb2: set interface to alts=3 failed [ 103.461454][ T6110] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 103.533517][ T6113] capability: warning: `syz.2.63' uses deprecated v2 capabilities in a way that may be insecure [ 103.556805][ T6113] dvb-usb: bulk message failed: -22 (7/0) [ 103.556828][ T6113] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 103.556871][ T6113] ttusb2: i2c transfer failed. [ 103.613300][ T5830] DVB: Unable to find symbol tda10086_attach() [ 103.613347][ T5830] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 103.620248][ T5830] dvb-usb: bulk message failed: -22 (4/0) [ 103.620281][ T5830] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 103.620498][ T5830] dvb-usb: bulk message failed: -22 (5/0) [ 103.620511][ T5830] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 103.620574][ T5830] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 103.632646][ T5914] logitech 0003:046D:C286.0002: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0 [ 103.632694][ T5914] logitech 0003:046D:C286.0002: no inputs found [ 103.719856][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 103.719964][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 103.788659][ T5830] usb 3-1: USB disconnect, device number 4 [ 103.826845][ T9] usb 5-1: USB disconnect, device number 3 [ 103.879098][ T5914] usb 1-1: USB disconnect, device number 3 [ 104.020438][ T5830] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 104.924768][ T5914] usb 2-1: USB disconnect, device number 3 [ 104.934746][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.085542][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 105.087458][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 105.087502][ T9] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 105.087530][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.094000][ T9] usb 5-1: config 0 descriptor?? [ 105.505387][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 105.505495][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 105.538165][ T9] usb 5-1: USB disconnect, device number 4 [ 106.845549][ T6158] netlink: 80 bytes leftover after parsing attributes in process `syz.4.79'. [ 106.847695][ T6158] syzkaller1: entered promiscuous mode [ 106.847717][ T6158] syzkaller1: entered allmulticast mode [ 106.852598][ T6158] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 107.123814][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.81'. [ 108.854386][ T6180] process 'syz.2.86' launched '/dev/fd/4' with NULL argv: empty string added [ 109.366005][ T806] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.520126][ T806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.520147][ T806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.531533][ T806] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 109.531563][ T806] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 109.531582][ T806] usb 5-1: Manufacturer: syz [ 109.568345][ T806] usb 5-1: config 0 descriptor?? [ 110.391470][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 110.391688][ T806] uclogic 0003:256C:006D.0003: interface is invalid, ignoring [ 110.517142][ T807] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 110.636331][ T806] usb 5-1: USB disconnect, device number 5 [ 110.687278][ T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 110.687299][ T807] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 110.687322][ T807] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 110.687333][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.276229][ T807] usb 2-1: config 0 descriptor?? [ 111.277357][ T6208] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 111.577261][ T807] usbhid 2-1:0.0: can't add hid device: -71 [ 111.577331][ T807] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 111.672748][ T807] usb 2-1: USB disconnect, device number 4 [ 111.752368][ T6225] binder: 6221:6225 ioctl 4018620d 0 returned -22 [ 111.753547][ T6225] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.144721][ T807] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.222973][ T6212] ALSA: mixer_oss: invalid OSS volume '' [ 112.334777][ T807] usb 2-1: Using ep0 maxpacket: 32 [ 112.336543][ T807] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 112.336570][ T807] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 112.336582][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.339538][ T807] usb 2-1: config 0 descriptor?? [ 112.797834][ T807] usbhid 2-1:0.0: can't add hid device: -71 [ 112.797932][ T807] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 112.802333][ T807] usb 2-1: USB disconnect, device number 5 [ 113.545977][ T6239] i2c i2c-0: Invalid block write size 34 [ 113.621832][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 113.855145][ T6241] bridge_slave_1: left allmulticast mode [ 113.855172][ T6241] bridge_slave_1: left promiscuous mode [ 113.855327][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.983722][ T6241] bridge_slave_0: left allmulticast mode [ 113.983743][ T6241] bridge_slave_0: left promiscuous mode [ 113.983984][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.304712][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 114.454933][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 114.460293][ T9] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 114.460311][ T9] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 114.460321][ T9] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 114.460332][ T9] usb 5-1: config 250 has no interface number 0 [ 114.460359][ T9] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 114.460372][ T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 114.460384][ T9] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 114.460395][ T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 114.460406][ T9] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 114.460420][ T9] usb 5-1: config 250 interface 228 has no altsetting 0 [ 114.461945][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 114.461963][ T9] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 114.461973][ T9] usb 5-1: Product: syz [ 114.461981][ T9] usb 5-1: SerialNumber: syz [ 114.474762][ T5885] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.555373][ T9] hub 5-1:250.228: bad descriptor, ignoring hub [ 114.555411][ T9] hub 5-1:250.228: probe with driver hub failed with error -5 [ 114.653195][ T6241] bond0: (slave bridge0): Releasing backup interface [ 114.664702][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 114.670594][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.670688][ T5885] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 114.670713][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.683609][ T5885] usb 2-1: config 0 descriptor?? [ 114.724469][ T5885] hub 2-1:0.0: USB hub found [ 114.730019][ T6241] bridge0 (unregistering): left promiscuous mode [ 114.730038][ T6241] bridge0 (unregistering): left allmulticast mode [ 114.745737][ T9] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 114.896158][ T5885] hub 2-1:0.0: 1 port detected [ 115.046604][ T31] usb 5-1: USB disconnect, device number 6 [ 115.213516][ T31] usblp0: removed [ 115.242966][ T6268] binder: BINDER_SET_CONTEXT_MGR already set [ 115.242976][ T6268] binder: 6267:6268 ioctl 4018620d 200000004a80 returned -16 [ 115.650904][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 115.651857][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 115.652171][ T9] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 115.720761][ T6258] input: syz0 as /devices/virtual/input/input7 [ 115.728314][ T5885] usb 2-1: Failed to suspend device, error -71 [ 115.729071][ T5885] usb 2-1: USB disconnect, device number 6 [ 116.011265][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 116.175729][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 116.179039][ T31] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 116.179066][ T31] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 116.179085][ T31] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 116.179105][ T31] usb 5-1: config 250 has no interface number 0 [ 116.179160][ T31] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 116.179250][ T31] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 116.179274][ T31] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 116.179296][ T31] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 116.179318][ T31] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 116.179344][ T31] usb 5-1: config 250 interface 228 has no altsetting 0 [ 116.181540][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 116.181571][ T31] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 116.181773][ T31] usb 5-1: Product: syz [ 116.181787][ T31] usb 5-1: SerialNumber: syz [ 116.327678][ T31] hub 5-1:250.228: bad descriptor, ignoring hub [ 116.327716][ T31] hub 5-1:250.228: probe with driver hub failed with error -5 [ 116.542838][ T31] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 116.587887][ T31] usb 5-1: USB disconnect, device number 7 [ 116.674926][ T31] usblp0: removed [ 116.834744][ T806] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 116.989337][ T806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 116.989371][ T806] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 116.989410][ T806] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 116.989430][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.056864][ T806] usb 4-1: config 0 descriptor?? [ 117.057716][ T6282] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 117.281897][ T806] usbhid 4-1:0.0: can't add hid device: -71 [ 117.281999][ T806] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 117.289504][ T806] usb 4-1: USB disconnect, device number 2 [ 117.786163][ T806] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.934685][ T806] usb 4-1: Using ep0 maxpacket: 32 [ 117.937899][ T806] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 117.937946][ T806] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 117.937966][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.988226][ T806] usb 4-1: config 0 descriptor?? [ 118.093289][ T6302] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 118.395906][ T806] usbhid 4-1:0.0: can't add hid device: -71 [ 118.396038][ T806] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 118.398979][ T806] usb 4-1: USB disconnect, device number 3 [ 118.715975][ T6308] netlink: set zone limit has 4 unknown bytes [ 118.900007][ T6311] vlan2: entered allmulticast mode [ 118.900029][ T6311] vlan0: entered allmulticast mode [ 118.900049][ T6311] veth0_vlan: entered allmulticast mode [ 119.355106][ T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 119.520232][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.520265][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.551866][ T31] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 119.551897][ T31] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 119.551916][ T31] usb 5-1: Manufacturer: syz [ 119.606190][ T31] usb 5-1: config 0 descriptor?? [ 120.960698][ T31] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71 [ 120.960761][ T31] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 120.960777][ T31] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71 [ 120.960828][ T31] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 120.960939][ T31] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 120.973896][ T31] usb 5-1: USB disconnect, device number 8 [ 121.285692][ T6355] vlan2: entered allmulticast mode [ 121.394752][ T5885] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 121.766391][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 121.766428][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 121.766469][ T5885] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 121.766490][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.946413][ T5888] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 122.190899][ T5888] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 122.190957][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.191013][ T5888] usb 5-1: Product: syz [ 122.191066][ T5888] usb 5-1: Manufacturer: syz [ 122.191119][ T5888] usb 5-1: SerialNumber: syz [ 122.290281][ T5885] usb 3-1: config 0 descriptor?? [ 122.291807][ T6351] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.314746][ T5888] usb 5-1: config 0 descriptor?? [ 122.344411][ T5888] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 122.362356][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.363461][ T5888] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 122.363507][ T5888] usb 5-1: media controller created [ 122.417922][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.519142][ T5885] usbhid 3-1:0.0: can't add hid device: -71 [ 122.519261][ T5885] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 122.520422][ T6364] dvb-usb: bulk message failed: -22 (7/0) [ 122.618674][ T5885] usb 3-1: USB disconnect, device number 5 [ 122.640896][ T5888] DVB: Unable to find symbol mt352_attach() [ 122.783155][ T5888] DVB: Unable to find symbol nxt6000_attach() [ 122.783172][ T5888] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 122.817179][ T5888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 122.842005][ T5888] dvb-usb: schedule remote query interval to 1000 msecs. [ 122.842027][ T5888] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 122.842043][ T5888] dvb-usb: bulk message failed: -22 (7/0) [ 122.842059][ T5888] dvb-usb: bulk message failed: -22 (7/0) [ 123.014725][ T5885] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.175030][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 123.177261][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 123.177306][ T5885] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 123.177328][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.223849][ T5885] usb 3-1: config 0 descriptor?? [ 123.651055][ T5885] usbhid 3-1:0.0: can't add hid device: -71 [ 123.651167][ T5885] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 123.675416][ T5885] usb 3-1: USB disconnect, device number 6 [ 123.887844][ T5888] dvb-usb: bulk message failed: -22 (7/0) [ 123.887881][ T5888] dvb-usb: error while querying for an remote control event. [ 124.493471][ T5785] usb 5-1: USB disconnect, device number 9 [ 124.630778][ T6409] mmap: syz.2.161 (6409) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.706999][ T5785] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 126.850820][ T6408] ALSA: mixer_oss: invalid OSS volume '' [ 128.126092][ T5885] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 128.293056][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 128.293090][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 128.293129][ T5885] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 128.293152][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.026817][ T5885] usb 2-1: config 0 descriptor?? [ 129.140403][ T6436] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 130.048625][ T5885] usbhid 2-1:0.0: can't add hid device: -71 [ 130.048694][ T5885] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 130.055185][ T5885] usb 2-1: USB disconnect, device number 7 [ 130.101858][ T6455] usb usb8: usbfs: process 6455 (syz.0.177) did not claim interface 0 before use [ 130.597876][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.598076][ T807] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 130.791551][ T807] usb 2-1: Using ep0 maxpacket: 32 [ 130.795480][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 130.800595][ T807] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 130.800641][ T807] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 130.800732][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.800919][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 130.800962][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 130.800987][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 130.802330][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 130.802377][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 130.802404][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 130.803819][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 130.803863][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 130.803889][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 130.810906][ T9] usb 5-1: string descriptor 0 read error: -22 [ 130.811047][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 130.811069][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.970816][ T807] usb 2-1: config 0 descriptor?? [ 131.009648][ T9] adutux 5-1:168.0: interrupt endpoints not found [ 131.227123][ T5785] usb 5-1: USB disconnect, device number 10 [ 131.378504][ T807] usbhid 2-1:0.0: can't add hid device: -71 [ 131.378614][ T807] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 131.382853][ T807] usb 2-1: USB disconnect, device number 8 [ 131.794829][ T6476] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 132.614824][ T807] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 132.740094][ T6503] input: syz0 as /devices/virtual/input/input9 [ 132.767021][ T807] usb 1-1: Using ep0 maxpacket: 16 [ 132.770522][ T807] usb 1-1: config 0 has no interfaces? [ 132.773682][ T807] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 132.773700][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.773710][ T807] usb 1-1: Product: syz [ 132.773717][ T807] usb 1-1: Manufacturer: syz [ 132.773724][ T807] usb 1-1: SerialNumber: syz [ 132.817418][ T807] usb 1-1: config 0 descriptor?? [ 132.823710][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.823780][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.956169][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 133.104688][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 133.108176][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 133.108208][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 133.108223][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.109392][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 133.109421][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 133.109435][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.111594][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 133.111624][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 133.111638][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.221372][ T9] usb 2-1: string descriptor 0 read error: -22 [ 133.221460][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 133.221472][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.270496][ T9] adutux 2-1:168.0: interrupt endpoints not found [ 133.480449][ T9] usb 2-1: USB disconnect, device number 9 [ 134.634749][ T807] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.790904][ T807] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 134.790935][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.790947][ T807] usb 4-1: Product: syz [ 134.790954][ T807] usb 4-1: Manufacturer: syz [ 134.790962][ T807] usb 4-1: SerialNumber: syz [ 134.836694][ T807] usb 4-1: config 0 descriptor?? [ 134.851084][ T807] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 134.881216][ T807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.882940][ T807] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 134.882993][ T807] usb 4-1: media controller created [ 134.924504][ T807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.038030][ T807] DVB: Unable to find symbol mt352_attach() [ 135.103568][ T807] DVB: Unable to find symbol nxt6000_attach() [ 135.103592][ T807] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 135.128524][ T6549] netlink: 40 bytes leftover after parsing attributes in process `syz.1.213'. [ 135.177890][ T807] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 135.229190][ T807] dvb-usb: schedule remote query interval to 1000 msecs. [ 135.229210][ T807] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 135.229225][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 135.229240][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 135.395746][ T9] usb 1-1: USB disconnect, device number 4 [ 135.575369][ T5885] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 135.724868][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 135.727523][ T5885] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.727556][ T5885] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 135.727568][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.739379][ T5885] usb 5-1: config 0 descriptor?? [ 136.160801][ T5885] usbhid 5-1:0.0: can't add hid device: -71 [ 136.160914][ T5885] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 136.198004][ T5885] usb 5-1: USB disconnect, device number 11 [ 136.204965][ T5830] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.284690][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 136.284711][ T807] dvb-usb: error while querying for an remote control event. [ 136.366814][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.366848][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.367921][ T5830] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 136.367945][ T5830] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 136.367960][ T5830] usb 1-1: Manufacturer: syz [ 136.375839][ T5830] usb 1-1: config 0 descriptor?? [ 137.196246][ T5830] uclogic 0003:256C:006D.0005: failed retrieving Huion firmware version: -71 [ 137.196304][ T5830] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 137.196406][ T5830] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 137.208888][ T5830] usb 1-1: USB disconnect, device number 5 [ 137.324879][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 137.324899][ T807] dvb-usb: error while querying for an remote control event. [ 137.395436][ T5830] usb 4-1: USB disconnect, device number 4 [ 137.564528][ T5830] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 138.508489][ T5830] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 139.246475][ T5830] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 139.246533][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.246552][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.246563][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 139.248797][ T5830] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 139.248824][ T5830] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 139.248843][ T5830] usb 4-1: Manufacturer: syz [ 139.257656][ T5830] usb 4-1: config 0 descriptor?? [ 140.110259][ T5830] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 140.180292][ T5830] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 140.214685][ T807] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 140.370134][ T807] usb 2-1: Using ep0 maxpacket: 32 [ 140.372355][ T807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 140.372398][ T807] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 140.372420][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.383140][ T807] usb 2-1: config 0 descriptor?? [ 140.405300][ T5830] usb 4-1: USB disconnect, device number 5 [ 140.804360][ T807] usbhid 2-1:0.0: can't add hid device: -71 [ 140.804477][ T807] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 140.812987][ T6609] fido_id[6609]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 140.842516][ T807] usb 2-1: USB disconnect, device number 10 [ 141.324764][ T807] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 141.502933][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.502964][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.525379][ T807] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 141.525397][ T807] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 141.525407][ T807] usb 3-1: Manufacturer: syz [ 141.528968][ T807] usb 3-1: config 0 descriptor?? [ 141.564756][ T5888] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 141.636552][ T5885] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 141.714706][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 141.716710][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.716753][ T5888] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 141.716827][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.771353][ T5888] usb 5-1: config 0 descriptor?? [ 141.792512][ T5888] hub 5-1:0.0: USB hub found [ 141.818287][ T5885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.818313][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 141.818332][ T5885] usb 2-1: config 1 has no interface number 0 [ 141.818374][ T5885] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.823904][ T5885] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.823934][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.823952][ T5885] usb 2-1: Product: syz [ 141.823966][ T5885] usb 2-1: Manufacturer: syz [ 141.823980][ T5885] usb 2-1: SerialNumber: syz [ 141.908625][ T5885] usb 2-1: selecting invalid altsetting 1 [ 141.992577][ T5888] hub 5-1:0.0: 1 port detected [ 141.995887][ T6633] i2c i2c-0: Invalid block write size 34 [ 142.064251][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 142.100457][ T5885] cdc_ncm 2-1:1.1: bind() failure [ 142.133074][ T5885] usb 2-1: USB disconnect, device number 11 [ 142.338165][ T807] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71 [ 142.338441][ T807] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 142.338750][ T807] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 142.378331][ T807] usb 3-1: USB disconnect, device number 7 [ 142.610301][ T5888] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 142.616494][ T5885] usb 5-1: USB disconnect, device number 12 [ 142.618710][ T2608] usb 5-1: Failed to suspend device, error -19 [ 144.067717][ T807] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 144.220306][ T807] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 144.220335][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.220354][ T807] usb 5-1: Product: syz [ 144.220366][ T807] usb 5-1: Manufacturer: syz [ 144.220379][ T807] usb 5-1: SerialNumber: syz [ 144.256232][ T807] usb 5-1: config 0 descriptor?? [ 144.263868][ T807] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 144.298460][ T807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.299336][ T807] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 144.299390][ T807] usb 5-1: media controller created [ 144.346405][ T807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.411185][ T807] DVB: Unable to find symbol mt352_attach() [ 144.540645][ T807] DVB: Unable to find symbol nxt6000_attach() [ 144.540661][ T807] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 144.660085][ T6687] input: syz1 as /devices/virtual/input/input11 [ 144.826288][ T807] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 145.278488][ T807] dvb-usb: schedule remote query interval to 1000 msecs. [ 145.278590][ T807] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 145.278639][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 145.329239][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 146.284688][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 146.284709][ T807] dvb-usb: error while querying for an remote control event. [ 146.398505][ T5885] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 146.556933][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 146.560274][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.560322][ T5885] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 146.560344][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.951917][ T806] usb 5-1: USB disconnect, device number 13 [ 146.972814][ T5885] usb 2-1: config 0 descriptor?? [ 147.001192][ T5885] hub 2-1:0.0: USB hub found [ 147.218270][ T5885] hub 2-1:0.0: 1 port detected [ 147.238187][ T806] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 147.825935][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 147.826212][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 147.826485][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 147.826552][ T806] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 147.830717][ T806] usb 2-1: USB disconnect, device number 12 [ 148.767645][ T5785] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.932849][ T5785] usb 1-1: Using ep0 maxpacket: 8 [ 148.935461][ T5785] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 148.935486][ T5785] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 148.935504][ T5785] usb 1-1: config 179 has no interface number 0 [ 148.935546][ T5785] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 148.935567][ T5785] usb 1-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 148.935605][ T5785] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 148.935632][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.268726][ T5885] usb 1-1: USB disconnect, device number 6 [ 150.164767][ T5885] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 150.214719][ T806] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 150.324744][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 150.328116][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.328161][ T5885] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 150.328178][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.364712][ T806] usb 1-1: Using ep0 maxpacket: 32 [ 150.366363][ T806] usb 1-1: config 0 interface 0 has no altsetting 0 [ 150.366386][ T806] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 150.366398][ T806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.369264][ T806] usb 1-1: config 0 descriptor?? [ 150.441198][ T5885] usb 3-1: config 0 descriptor?? [ 150.496264][ T5885] hub 3-1:0.0: USB hub found [ 150.679439][ T5885] hub 3-1:0.0: 1 port detected [ 150.828880][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 150.829811][ T806] usbhid 1-1:0.0: can't add hid device: -71 [ 150.830605][ T806] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 150.891819][ T806] usb 1-1: USB disconnect, device number 7 [ 151.134990][ T6787] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lIؘØZ[#wð^’yiü1Ü*ø$Váe [ 151.294529][ T5885] usb 3-1: USB disconnect, device number 8 [ 151.301083][ T806] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 151.774820][ T5785] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 151.934906][ T5785] usb 2-1: Using ep0 maxpacket: 8 [ 151.937388][ T5785] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 151.937413][ T5785] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 151.937630][ T5785] usb 2-1: config 179 has no interface number 0 [ 151.937675][ T5785] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 151.937696][ T5785] usb 2-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 151.937735][ T5785] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 151.937755][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.372290][ T5785] usb 2-1: USB disconnect, device number 13 [ 152.676944][ T6826] delete_channel: no stack [ 152.724697][ T5785] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 152.899205][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.899238][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.899276][ T5785] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 152.899305][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.959907][ T5785] usb 1-1: config 0 descriptor?? [ 153.437949][ T5785] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 153.494684][ T5785] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 153.561564][ T6854] delete_channel: no stack [ 153.626778][ T5785] cp2112 0003:10C4:EA90.0008: Part Number: 0x82 Device Version: 0xFE [ 154.238358][ T5785] cp2112 0003:10C4:EA90.0008: error reading lock byte: -71 [ 154.255162][ T5785] usb 1-1: USB disconnect, device number 8 [ 154.641803][ T6885] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 154.807932][ T6892] delete_channel: no stack [ 155.544735][ T5785] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 155.763476][ T5785] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 155.763495][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.763505][ T5785] usb 2-1: Product: syz [ 155.763512][ T5785] usb 2-1: Manufacturer: syz [ 155.763519][ T5785] usb 2-1: SerialNumber: syz [ 155.777110][ T5785] usb 2-1: config 0 descriptor?? [ 155.812522][ T5785] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 155.835059][ T5785] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.845767][ T5785] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 155.845842][ T5785] usb 2-1: media controller created [ 155.916314][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.983261][ T6904] dvb-usb: bulk message failed: -22 (7/0) [ 156.022546][ T5785] DVB: Unable to find symbol mt352_attach() [ 156.144714][ T5785] DVB: Unable to find symbol nxt6000_attach() [ 156.144862][ T5785] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 156.167356][ T5785] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 156.200464][ T5785] dvb-usb: schedule remote query interval to 1000 msecs. [ 156.200479][ T5785] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 156.200488][ T5785] dvb-usb: bulk message failed: -22 (7/0) [ 156.200497][ T5785] dvb-usb: bulk message failed: -22 (7/0) [ 156.213556][ T5785] usb 2-1: USB disconnect, device number 14 [ 156.237088][ T6907] input: syz0 as /devices/virtual/input/input14 [ 156.618480][ T5785] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 157.977827][ T5888] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 158.174268][ T5888] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 158.174316][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.174341][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.174718][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 158.176101][ T5888] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 158.176125][ T5888] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 158.176144][ T5888] usb 4-1: Manufacturer: syz [ 158.184364][ T5888] usb 4-1: config 0 descriptor?? [ 158.620266][ T5888] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 158.627444][ T5888] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 158.734726][ T5885] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.881313][ T5888] usb 4-1: USB disconnect, device number 6 [ 158.894788][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 158.896684][ T5885] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 158.896706][ T5885] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 158.896725][ T5885] usb 3-1: config 179 has no interface number 0 [ 158.896767][ T5885] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 158.896799][ T5885] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 158.896825][ T5885] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 158.896864][ T5885] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 158.896886][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.045840][ T6961] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 159.261658][ T5885] usb 3-1: USB disconnect, device number 9 [ 161.635040][ T6997] input: syz1 as /devices/virtual/input/input15 [ 161.687082][ T6998] input: syz1 as /devices/virtual/input/input16 [ 163.824728][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 163.974706][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 163.977608][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 163.977874][ T9] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 163.977896][ T9] usb 1-1: config 179 has no interface number 0 [ 163.977940][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 163.977966][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 163.977993][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 163.978032][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 163.978054][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.074192][ T7019] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 164.180432][ T7011] ALSA: mixer_oss: invalid OSS volume '' [ 164.282261][ T5888] usb 1-1: USB disconnect, device number 9 [ 164.594237][ T7040] input: syz1 as /devices/virtual/input/input18 [ 168.355103][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.420'. [ 168.601294][ T7086] binder: BINDER_SET_CONTEXT_MGR already set [ 168.601309][ T7086] binder: 7085:7086 ioctl 4018620d 200000004a80 returned -16 [ 169.049086][ T7090] bridge1: port 1(veth3) entered blocking state [ 169.049286][ T7090] bridge1: port 1(veth3) entered disabled state [ 169.049605][ T7090] veth3: entered allmulticast mode [ 169.053980][ T7090] veth3: entered promiscuous mode [ 169.420084][ T7092] bridge1: port 2(veth5) entered blocking state [ 169.420234][ T7092] bridge1: port 2(veth5) entered disabled state [ 169.420463][ T7092] veth5: entered allmulticast mode [ 169.474491][ T7092] veth5: entered promiscuous mode [ 170.816239][ T7128] binder: BINDER_SET_CONTEXT_MGR already set [ 170.816253][ T7128] binder: 7127:7128 ioctl 4018620d 200000004a80 returned -16 [ 171.007973][ T7134] input: syz1 as /devices/virtual/input/input19 [ 171.313924][ T7149] i2c i2c-0: Invalid block write size 34 [ 171.425314][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 171.564809][ T7151] bridge_slave_1: left allmulticast mode [ 171.564837][ T7151] bridge_slave_1: left promiscuous mode [ 171.565078][ T7151] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.809577][ T7151] bridge_slave_0: left allmulticast mode [ 171.809604][ T7151] bridge_slave_0: left promiscuous mode [ 171.809836][ T7151] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.530682][ T7170] input: syz1 as /devices/virtual/input/input20 [ 172.927218][ T7164] ALSA: mixer_oss: invalid OSS volume '' [ 173.186434][ T7185] input: syz1 as /devices/virtual/input/input21 [ 174.017325][ T7195] binder: BINDER_SET_CONTEXT_MGR already set [ 174.017336][ T7195] binder: 7194:7195 ioctl 4018620d 200000004a80 returned -16 [ 174.257487][ T7197] netlink: 68 bytes leftover after parsing attributes in process `syz.3.461'. [ 174.838568][ T7206] input: syz1 as /devices/virtual/input/input22 [ 176.272545][ T7220] input: syz0 as /devices/virtual/input/input23 [ 176.570217][ T7210] ALSA: mixer_oss: invalid OSS volume '' [ 177.049520][ T7234] input: syz1 as /devices/virtual/input/input25 [ 177.072620][ T7229] input: syz1 as /devices/virtual/input/input24 [ 177.614766][ T5914] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 177.777955][ T5914] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.777989][ T5914] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 58398, setting to 1024 [ 177.778014][ T5914] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 177.778051][ T5914] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.778073][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.865506][ T7239] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 177.999181][ T5914] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.464762][ T5785] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 178.496788][ T5914] usb 2-1: USB disconnect, device number 15 [ 178.614720][ T5785] usb 4-1: Using ep0 maxpacket: 8 [ 178.616883][ T5785] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 178.616933][ T5785] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.617994][ T5785] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 178.618050][ T5785] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.619096][ T5785] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 178.619143][ T5785] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.623243][ T5785] usb 4-1: string descriptor 0 read error: -22 [ 178.623384][ T5785] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 178.623408][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.805912][ T5785] adutux 4-1:168.0: interrupt endpoints not found [ 179.003178][ T5914] usb 4-1: USB disconnect, device number 7 [ 179.054550][ T7257] qrtr: Invalid version 0 [ 179.220325][ T7262] input: syz1 as /devices/virtual/input/input26 [ 180.168524][ T7275] input: syz1 as /devices/virtual/input/input27 [ 182.449918][ T7292] input: syz1 as /devices/virtual/input/input28 [ 182.498178][ T7294] openvswitch: netlink: Message has 1 unknown bytes. [ 182.498205][ T7294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.234718][ T5914] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 183.257215][ T7309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.498'. [ 183.384725][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 183.386896][ T5914] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 183.386945][ T5914] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 183.388282][ T5914] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 183.388330][ T5914] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 183.392307][ T5914] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 183.392352][ T5914] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 183.395460][ T5914] usb 1-1: string descriptor 0 read error: -22 [ 183.395671][ T5914] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 183.395695][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.508713][ T5914] adutux 1-1:168.0: interrupt endpoints not found [ 183.555082][ T5888] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 183.686965][ T806] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 183.705103][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 183.706931][ T5888] usb 3-1: config 0 interface 0 has no altsetting 0 [ 183.706966][ T5888] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 183.706989][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.710847][ T7322] openvswitch: netlink: Flow key attr not present in new flow. [ 183.714099][ T5885] usb 1-1: USB disconnect, device number 10 [ 183.714219][ T5888] usb 3-1: config 0 descriptor?? [ 183.838931][ T806] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 183.838988][ T806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.839014][ T806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.839035][ T806] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 183.840849][ T806] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 183.840875][ T806] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 183.840894][ T806] usb 5-1: Manufacturer: syz [ 183.870233][ T806] usb 5-1: config 0 descriptor?? [ 184.353564][ T5888] usbhid 3-1:0.0: can't add hid device: -71 [ 184.353675][ T5888] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 184.355200][ T806] usbhid 5-1:0.0: can't add hid device: -71 [ 184.355305][ T806] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 184.367177][ T806] usb 5-1: USB disconnect, device number 14 [ 184.461946][ T5888] usb 3-1: USB disconnect, device number 10 [ 185.109222][ T7336] input: syz1 as /devices/virtual/input/input29 [ 185.821937][ T7341] netlink: 32 bytes leftover after parsing attributes in process `syz.2.509'. [ 186.784667][ T806] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 187.005126][ T806] usb 5-1: Using ep0 maxpacket: 8 [ 187.007117][ T806] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 187.007148][ T806] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 187.008969][ T806] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 187.009004][ T806] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 187.024818][ T806] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 187.024874][ T806] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 187.047201][ T806] usb 5-1: string descriptor 0 read error: -22 [ 187.047292][ T806] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 187.047304][ T806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.175849][ T806] adutux 5-1:168.0: interrupt endpoints not found [ 187.396285][ T5785] usb 5-1: USB disconnect, device number 15 [ 188.232840][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 188.304125][ T7398] vlan2: entered allmulticast mode [ 188.304147][ T7398] vlan0: entered allmulticast mode [ 188.304160][ T7398] veth0_vlan: entered allmulticast mode [ 190.765287][ T7408] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 190.774728][ T5804] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.778701][ T7408] Bluetooth: hci0: Opcode 0x0406 failed: -110 [ 191.448534][ T7408] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 191.528515][ T7408] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.528619][ T7408] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 191.585295][ T7408] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 191.655660][ T7408] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.655789][ T7408] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 191.737301][ T7408] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 191.737388][ T7408] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 191.810187][ T7408] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 191.859098][ T7408] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 191.859945][ T7408] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 191.929861][ T7408] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 192.264721][ T5885] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 192.409807][ T5830] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 192.426055][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 192.428097][ T5885] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 192.428122][ T5885] usb 2-1: config 0 has no interface number 0 [ 192.428166][ T5885] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=38.34 [ 192.428189][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.482698][ T5885] usb 2-1: config 0 descriptor?? [ 192.546183][ T5885] snd-usb-audio 2-1:0.255: probe with driver snd-usb-audio failed with error -71 [ 192.548517][ T5885] usb 2-1: USB disconnect, device number 16 [ 192.572240][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 192.574371][ T5830] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 192.574422][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 192.574449][ T5830] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.618325][ T5830] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 192.618377][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 192.618404][ T5830] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.620097][ T5830] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 192.620147][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 192.620173][ T5830] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.623123][ T5830] usb 4-1: string descriptor 0 read error: -22 [ 192.623248][ T5830] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 192.623270][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.725898][ T5830] adutux 4-1:168.0: interrupt endpoints not found [ 192.845187][ T5804] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.944436][ T5914] usb 4-1: USB disconnect, device number 8 [ 193.068054][ T7455] input: syz1 as /devices/virtual/input/input30 [ 193.565229][ T5804] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.725230][ T5804] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.805165][ T5804] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.885497][ T5804] Bluetooth: hci4: command 0x0c1a tx timeout [ 194.223847][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.223915][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.108460][ T5804] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.652184][ T7499] input: syz1 as /devices/virtual/input/input31 [ 195.655291][ T5804] Bluetooth: hci1: command 0x0c1a tx timeout [ 195.805267][ T5804] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.885769][ T5804] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.965566][ T5804] Bluetooth: hci4: command 0x0c1a tx timeout [ 196.855233][ T7507] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 197.709614][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 197.724651][ T5804] Bluetooth: hci1: command 0x0c1a tx timeout [ 197.740000][ T7515] vlan2: entered allmulticast mode [ 197.964671][ T5804] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.044827][ T5804] Bluetooth: hci4: command 0x0c1a tx timeout [ 198.593211][ T7535] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 199.261406][ T36] audit: type=1326 audit(1771020632.605:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc8e7bf79 code=0x7ffc0000 [ 199.264493][ T36] audit: type=1326 audit(1771020632.605:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc8e7bf79 code=0x7ffc0000 [ 199.310096][ T36] audit: type=1326 audit(1771020632.655:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfc8e7bf79 code=0x7ffc0000 [ 199.310127][ T36] audit: type=1326 audit(1771020632.655:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc8e7bf79 code=0x7ffc0000 [ 199.310146][ T36] audit: type=1326 audit(1771020632.655:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc8e7bf79 code=0x7ffc0000 [ 199.312349][ T36] audit: type=1326 audit(1771020632.655:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbfc8e7bf79 code=0x7ffc0000 [ 199.416513][ T36] audit: type=1326 audit(1771020632.655:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc8e7bf79 code=0x7ffc0000 [ 199.474424][ T36] audit: type=1326 audit(1771020632.805:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fbfc8e7bf79 code=0x7ffc0000 [ 199.474470][ T36] audit: type=1326 audit(1771020632.805:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc8e7bf79 code=0x7ffc0000 [ 199.474490][ T36] audit: type=1326 audit(1771020632.805:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc8e7bf79 code=0x7ffc0000 [ 199.674814][ T5888] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 199.855058][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 199.857260][ T5888] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 199.857284][ T5888] usb 4-1: config 0 has no interface number 0 [ 199.857325][ T5888] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=38.34 [ 199.857346][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.894384][ T5888] usb 4-1: config 0 descriptor?? [ 200.053646][ T7553] input: syz1 as /devices/virtual/input/input32 [ 200.733380][ T5888] snd-usb-audio 4-1:0.255: probe with driver snd-usb-audio failed with error -71 [ 200.740368][ T5888] usb 4-1: USB disconnect, device number 9 [ 202.041672][ T7566] pimreg: entered allmulticast mode [ 202.944981][ T7578] i2c i2c-0: Invalid block write size 34 [ 203.452433][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 203.467214][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 203.470405][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 203.471914][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.472625][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 203.795136][ T5888] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 203.935916][ T7593] tipc: Started in network mode [ 203.935951][ T7593] tipc: Node identity ee4069b0a512, cluster identity 4711 [ 203.936730][ T7593] tipc: Enabled bearer , priority 0 [ 203.947078][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 203.949200][ T5888] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 203.949224][ T5888] usb 1-1: config 0 has no interface number 0 [ 203.949265][ T5888] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=38.34 [ 203.949286][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.962593][ T5888] usb 1-1: config 0 descriptor?? [ 203.967881][ T7593] syzkaller0: entered promiscuous mode [ 203.967904][ T7593] syzkaller0: entered allmulticast mode [ 204.170461][ T7600] tipc: Resetting bearer [ 204.206859][ T7592] tipc: Resetting bearer [ 204.316781][ T7602] tipc: Failed to remove unknown binding: 66,1,1/0:3791893757/3791893759 [ 204.331077][ T7602] tipc: Failed to remove unknown binding: 66,1,1/0:3791893757/3791893759 [ 204.331195][ T7602] tipc: Failed to remove unknown binding: 66,1,1/0:3791893757/3791893759 [ 204.350236][ T5888] snd-usb-audio 1-1:0.255: probe with driver snd-usb-audio failed with error -71 [ 204.364900][ T5888] usb 1-1: USB disconnect, device number 11 [ 204.553218][ T7592] tipc: Disabling bearer [ 205.250080][ T5785] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 205.818045][ T7609] ALSA: mixer_oss: invalid OSS volume '' [ 205.940153][ T5807] Bluetooth: hci5: command tx timeout [ 206.117292][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.117333][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.117369][ T5785] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 206.117391][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.186328][ T5785] usb 1-1: config 0 descriptor?? [ 206.245513][ T7619] i2c i2c-0: Invalid block write size 34 [ 206.305566][ T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 206.435114][ T43] usb 4-1: device descriptor read/64, error -71 [ 206.634506][ T7612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.651158][ T7612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.694450][ T7585] chnl_net:caif_netlink_parms(): no params data found [ 206.777249][ T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 206.915102][ T43] usb 4-1: device descriptor read/64, error -71 [ 207.030865][ T43] usb usb4-port1: attempt power cycle [ 207.103385][ T7585] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.103592][ T7585] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.103759][ T7585] bridge_slave_0: entered allmulticast mode [ 207.109013][ T7585] bridge_slave_0: entered promiscuous mode [ 207.112199][ T7585] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.112339][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.112496][ T7585] bridge_slave_1: entered allmulticast mode [ 207.154781][ T7585] bridge_slave_1: entered promiscuous mode [ 207.290622][ T5785] usbhid 1-1:0.0: can't add hid device: -71 [ 207.290688][ T5785] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 207.318174][ T5785] usb 1-1: USB disconnect, device number 12 [ 207.425093][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 207.446309][ T43] usb 4-1: device descriptor read/8, error -71 [ 207.499874][ T7585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.508344][ T7585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.685208][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 207.706395][ T43] usb 4-1: device descriptor read/8, error -71 [ 207.816613][ T43] usb usb4-port1: unable to enumerate USB device [ 207.888657][ T7585] team0: Port device team_slave_0 added [ 207.891958][ T7585] team0: Port device team_slave_1 added [ 207.964772][ T5807] Bluetooth: hci5: command tx timeout [ 208.938106][ T7644] ALSA: mixer_oss: invalid OSS volume '' [ 209.136662][ T7652] i2c i2c-0: Invalid block write size 34 [ 209.294915][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 209.457222][ T7585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.457239][ T7585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.457263][ T7585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.464700][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 209.471699][ T9] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 209.471725][ T9] usb 1-1: config 0 has no interface number 0 [ 209.471766][ T9] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=38.34 [ 209.471788][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.486475][ T9] usb 1-1: config 0 descriptor?? [ 209.670116][ T7663] input: syz1 as /devices/virtual/input/input33 [ 210.044717][ T5807] Bluetooth: hci5: command tx timeout [ 211.086640][ T9] snd-usb-audio 1-1:0.255: probe with driver snd-usb-audio failed with error -110 [ 211.468405][ T9] usb 1-1: USB disconnect, device number 13 [ 211.579205][ T7585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.579217][ T7585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.579231][ T7585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.879255][ T4607] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.126248][ T5807] Bluetooth: hci5: command tx timeout [ 212.402641][ T4607] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.473578][ T7585] hsr_slave_0: entered promiscuous mode [ 212.474486][ T7585] hsr_slave_1: entered promiscuous mode [ 212.475539][ T7585] debugfs: 'hsr0' already exists in 'hsr' [ 212.475563][ T7585] Cannot create hsr debugfs directory [ 212.485453][ T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 212.644188][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 212.646656][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.646704][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.646743][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 212.646764][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.657036][ T43] usb 1-1: config 0 descriptor?? [ 212.668141][ T43] hub 1-1:0.0: bad descriptor, ignoring hub [ 212.668177][ T43] hub 1-1:0.0: probe with driver hub failed with error -5 [ 212.683921][ T43] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 212.865458][ T4607] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.212000][ T4607] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.643223][ T7705] input: syz1 as /devices/virtual/input/input34 [ 215.054740][ T5830] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 215.214807][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 215.219018][ T5830] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.219036][ T5830] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.219049][ T5830] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.219061][ T5830] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.219084][ T5830] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.219095][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.417057][ T806] usb 1-1: USB disconnect, device number 14 [ 215.497453][ T5830] usb 4-1: usb_control_msg returned -71 [ 215.497499][ T5830] usbtmc 4-1:16.0: can't read capabilities [ 215.583087][ T5830] usb 4-1: USB disconnect, device number 14 [ 215.623573][ T4607] bridge_slave_1: left allmulticast mode [ 215.623655][ T4607] bridge_slave_1: left promiscuous mode [ 215.643287][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.797703][ T4607] bridge_slave_0: left allmulticast mode [ 215.797733][ T4607] bridge_slave_0: left promiscuous mode [ 215.797966][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.084674][ T806] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 216.244716][ T806] usb 5-1: Using ep0 maxpacket: 8 [ 216.261015][ T806] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 216.261040][ T806] usb 5-1: config 0 has no interface number 0 [ 216.261083][ T806] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=38.34 [ 216.261178][ T806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.306096][ T806] usb 5-1: config 0 descriptor?? [ 216.972757][ T806] snd-usb-audio 5-1:0.255: probe with driver snd-usb-audio failed with error -71 [ 216.989135][ T806] usb 5-1: USB disconnect, device number 16 [ 217.915658][ T5785] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 217.975761][ T4607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.056004][ T4607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.074192][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.074215][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.074236][ T5785] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 218.074248][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.081726][ T5785] usb 5-1: config 0 descriptor?? [ 218.119180][ T4607] bond0 (unregistering): Released all slaves [ 218.378395][ T7749] input: syz1 as /devices/virtual/input/input35 [ 218.756067][ T5785] usbhid 5-1:0.0: can't add hid device: -71 [ 218.756146][ T5785] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 219.133346][ T5785] usb 5-1: USB disconnect, device number 17 [ 220.152669][ T7585] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.768526][ T7585] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.867246][ T7585] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.895341][ T7585] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 221.193425][ T4607] hsr_slave_0: left promiscuous mode [ 221.234301][ T4607] hsr_slave_1: left promiscuous mode [ 221.236844][ T4607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.236926][ T4607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.291678][ T4607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.291704][ T4607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.513739][ T4607] veth1_macvtap: left promiscuous mode [ 221.513975][ T4607] veth0_macvtap: left promiscuous mode [ 221.514248][ T4607] veth1_vlan: left promiscuous mode [ 221.514405][ T4607] veth0_vlan: left promiscuous mode [ 221.617833][ T7797] i2c i2c-0: Invalid block write size 34 [ 221.745427][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'. [ 221.816467][ T5785] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 221.965155][ T5785] usb 2-1: Using ep0 maxpacket: 16 [ 221.967459][ T5785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 221.969991][ T5785] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 221.970019][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.970037][ T5785] usb 2-1: Product: syz [ 221.970050][ T5785] usb 2-1: Manufacturer: syz [ 221.970063][ T5785] usb 2-1: SerialNumber: syz [ 222.003415][ T5785] usb 2-1: config 0 descriptor?? [ 222.030488][ T5785] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 222.030525][ T5785] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 222.625144][ T5785] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 223.085522][ T5785] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 223.085554][ T5785] em28xx 2-1:0.0: board has no eeprom [ 223.485128][ T5785] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 223.485169][ T5785] em28xx 2-1:0.0: dvb set to bulk mode. [ 223.489188][ T5888] em28xx 2-1:0.0: Binding DVB extension [ 224.695770][ T4607] team0 (unregistering): Port device team_slave_1 removed [ 224.868281][ T5888] em28xx 2-1:0.0: Registering input extension [ 224.868446][ T7793] em28xx 2-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 224.893988][ T5830] usb 2-1: USB disconnect, device number 17 [ 224.896102][ T5830] em28xx 2-1:0.0: Disconnecting em28xx [ 224.896399][ T5830] em28xx 2-1:0.0: Closing input extension [ 224.969570][ T4607] team0 (unregistering): Port device team_slave_0 removed [ 225.043354][ T5830] em28xx 2-1:0.0: Freeing device [ 227.262602][ T7848] input: syz1 as /devices/virtual/input/input37 [ 227.368765][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 227.614640][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 227.637491][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.637602][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 227.637654][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.677010][ T7585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.819988][ T9] usb 5-1: config 0 descriptor?? [ 228.088343][ T7585] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.102931][ T2608] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.121153][ T2608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.138880][ T2608] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.139010][ T2608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.291693][ T9] kye 0003:0458:5016.000A: control desc unexpectedly large [ 228.325572][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.000A/input/input38 [ 228.436648][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.000A/input/input39 [ 228.868398][ T5785] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 228.941985][ T9] kye 0003:0458:5016.000A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 229.004932][ T9] usb 5-1: USB disconnect, device number 18 [ 229.033519][ T5785] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.033538][ T5785] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 229.033552][ T5785] usb 4-1: config 0 interface 0 has no altsetting 0 [ 229.033570][ T5785] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 229.033582][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.155303][ T5785] usb 4-1: config 0 descriptor?? [ 229.584234][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.758551][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.761948][ T7870] fido_id[7870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 229.763332][ T5785] microsoft 0003:045E:009D.000B: item fetching failed at offset 2/5 [ 229.764051][ T5785] microsoft 0003:045E:009D.000B: parse failed [ 229.764149][ T5785] microsoft 0003:045E:009D.000B: probe with driver microsoft failed with error -22 [ 229.905198][ T7869] syz.1.663 (7869) used greatest stack depth: 18424 bytes left [ 229.975117][ T5888] usb 4-1: USB disconnect, device number 15 [ 230.191243][ T7585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.389053][ T7894] i2c i2c-0: Invalid block write size 34 [ 230.444523][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'. [ 231.175894][ T7909] netlink: 148 bytes leftover after parsing attributes in process `syz.3.669'. [ 232.153742][ T7585] veth0_vlan: entered promiscuous mode [ 232.247959][ T7585] veth1_vlan: entered promiscuous mode [ 232.313580][ T7585] veth0_macvtap: entered promiscuous mode [ 232.330124][ T7585] veth1_macvtap: entered promiscuous mode [ 232.361823][ T7585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.901352][ T7585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.943125][ T4607] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.955814][ T4607] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.961771][ T4607] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.961813][ T4607] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.376185][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.376204][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.527777][ T7955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.680'. [ 233.527810][ T7955] netlink: 52 bytes leftover after parsing attributes in process `syz.4.680'. [ 233.527825][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 234.003752][ T7956] input: syz1 as /devices/virtual/input/input40 [ 234.475711][ T4607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.475729][ T4607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.598745][ T7962] i2c i2c-0: Invalid block write size 34 [ 234.662465][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 235.401097][ T7988] input: syz1 as /devices/virtual/input/input41 [ 238.537450][ T5885] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 238.696487][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 238.698820][ T5885] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 238.698844][ T5885] usb 4-1: config 0 has no interface number 0 [ 238.698889][ T5885] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=38.34 [ 238.698912][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.748255][ T5885] usb 4-1: config 0 descriptor?? [ 238.918641][ T8026] team0: entered promiscuous mode [ 238.918664][ T8026] team_slave_0: entered promiscuous mode [ 238.918883][ T8026] team_slave_1: entered promiscuous mode [ 238.923261][ T8026] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 238.974769][ T5885] snd-usb-audio 4-1:0.255: probe with driver snd-usb-audio failed with error -71 [ 238.994211][ T8026] team0: left promiscuous mode [ 238.994233][ T8026] team_slave_0: left promiscuous mode [ 238.994465][ T8026] team_slave_1: left promiscuous mode [ 239.020113][ T5885] usb 4-1: USB disconnect, device number 16 [ 239.851377][ T8041] input: syz1 as /devices/virtual/input/input42 [ 240.879524][ T8053] netlink: 32 bytes leftover after parsing attributes in process `syz.5.705'. [ 241.215031][ T36] audit: type=1326 audit(1771020674.525:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8063 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4caf32bf79 code=0x7ffc0000 [ 241.215080][ T36] audit: type=1326 audit(1771020674.525:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8063 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4caf32bf79 code=0x7ffc0000 [ 241.278225][ T36] audit: type=1326 audit(1771020674.615:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8063 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4caf32bf79 code=0x7ffc0000 [ 241.278275][ T36] audit: type=1326 audit(1771020674.615:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8063 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4caf32bf79 code=0x7ffc0000 [ 241.278318][ T36] audit: type=1326 audit(1771020674.615:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8063 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f4caf32bf79 code=0x7ffc0000 [ 243.990592][ T8120] input: syz1 as /devices/virtual/input/input43 [ 244.605480][ T8126] netlink: 32 bytes leftover after parsing attributes in process `syz.4.719'. [ 245.485637][ T8152] i2c i2c-0: Invalid block write size 34 [ 245.728271][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.729'. [ 245.781862][ T8155] input: syz1 as /devices/virtual/input/input44 [ 246.846136][ T8154] bridge_slave_1: left allmulticast mode [ 246.846165][ T8154] bridge_slave_1: left promiscuous mode [ 246.846411][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.995505][ T36] audit: type=1326 audit(1771020680.275:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8172 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b87babf79 code=0x7ffc0000 [ 246.995560][ T36] audit: type=1326 audit(1771020680.275:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8172 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b87babf79 code=0x7ffc0000 [ 246.995596][ T36] audit: type=1326 audit(1771020680.275:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8172 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6b87babf79 code=0x7ffc0000 [ 246.995633][ T36] audit: type=1326 audit(1771020680.275:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8172 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b87babf79 code=0x7ffc0000 [ 246.995668][ T36] audit: type=1326 audit(1771020680.275:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8172 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b87babf79 code=0x7ffc0000 [ 246.995704][ T36] audit: type=1326 audit(1771020680.275:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8172 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f6b87babf79 code=0x7ffc0000 [ 246.995740][ T36] audit: type=1326 audit(1771020680.285:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8172 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b87babf79 code=0x7ffc0000 [ 246.995774][ T36] audit: type=1326 audit(1771020680.285:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8172 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b87babf79 code=0x7ffc0000 [ 246.995810][ T36] audit: type=1326 audit(1771020680.285:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8172 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b87babf79 code=0x7ffc0000 [ 246.995845][ T36] audit: type=1326 audit(1771020680.285:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8172 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b87babf79 code=0x7ffc0000 [ 247.043589][ T8188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.734'. [ 247.262532][ T8154] bridge_slave_0: left allmulticast mode [ 247.262552][ T8154] bridge_slave_0: left promiscuous mode [ 247.262722][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.431223][ T8207] input: syz1 as /devices/virtual/input/input45 [ 249.488972][ T8220] netlink: 72 bytes leftover after parsing attributes in process `syz.3.738'. [ 249.914652][ T5885] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 250.171967][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.172019][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.174410][ T5885] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 250.174437][ T5885] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 250.174456][ T5885] usb 1-1: Manufacturer: syz [ 250.231509][ T5885] usb 1-1: config 0 descriptor?? [ 250.263925][ T5885] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 250.739041][ T8251] netlink: 32 bytes leftover after parsing attributes in process `syz.5.747'. [ 250.904639][ T5914] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 251.075051][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 251.077239][ T5914] usb 2-1: config 0 has no interfaces? [ 251.079585][ T5914] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 251.079613][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.079632][ T5914] usb 2-1: Product: syz [ 251.079653][ T5914] usb 2-1: Manufacturer: syz [ 251.079667][ T5914] usb 2-1: SerialNumber: syz [ 251.107355][ T5914] usb 2-1: config 0 descriptor?? [ 252.510518][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.751'. [ 252.565043][ T5885] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 252.662449][ T5888] usb 1-1: USB disconnect, device number 15 [ 252.744625][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 252.750994][ T5885] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 252.751024][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.751043][ T5885] usb 4-1: Product: syz [ 252.751056][ T5885] usb 4-1: Manufacturer: syz [ 252.751070][ T5885] usb 4-1: SerialNumber: syz [ 252.802928][ T5885] usb 4-1: config 0 descriptor?? [ 253.020495][ T5885] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 253.549980][ T8300] netlink: 40 bytes leftover after parsing attributes in process `syz.0.754'. [ 253.655777][ T5785] usb 2-1: USB disconnect, device number 18 [ 253.825455][ T5885] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 253.858432][ T5885] usb 4-1: USB disconnect, device number 17 [ 254.802143][ T8321] binder: BINDER_SET_CONTEXT_MGR already set [ 254.802154][ T8321] binder: 8320:8321 ioctl 4018620d 200000004a80 returned -16 [ 255.652437][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.652505][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.925068][ T8328] tipc: Started in network mode [ 255.925097][ T8328] tipc: Node identity 8217e3f6081f, cluster identity 4711 [ 255.925270][ T8328] tipc: Enabled bearer , priority 0 [ 255.926068][ T8328] syzkaller0: entered promiscuous mode [ 255.926088][ T8328] syzkaller0: entered allmulticast mode [ 255.986875][ T8327] tipc: Resetting bearer [ 256.097247][ T8327] tipc: Disabling bearer [ 256.438789][ T5888] hid-generic E71A:0003:0004.000C: item fetching failed at offset 2/10 [ 256.458663][ T5888] hid-generic E71A:0003:0004.000C: probe with driver hid-generic failed with error -22 [ 256.949508][ T8346] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 256.996355][ T8339] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 256.996560][ T8339] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 256.996739][ T8339] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 256.996917][ T8339] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 256.997085][ T8339] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 256.997167][ T8339] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 257.170531][ T8339] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 257.263023][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.769'. [ 258.569252][ T8360] binder: BINDER_SET_CONTEXT_MGR already set [ 258.569268][ T8360] binder: 8359:8360 ioctl 4018620d 200000004a80 returned -16 [ 258.786567][ T8361] tipc: Enabled bearer , priority 0 [ 258.790013][ T8361] syzkaller0: entered promiscuous mode [ 258.790031][ T8361] syzkaller0: entered allmulticast mode [ 258.863974][ T8358] tipc: Resetting bearer [ 258.951056][ T8367] netlink: 72 bytes leftover after parsing attributes in process `syz.1.776'. [ 259.114638][ T5807] Bluetooth: hci3: command 0x0c1a tx timeout [ 259.114688][ T5807] Bluetooth: hci2: command 0x0c1a tx timeout [ 259.114721][ T5807] Bluetooth: hci1: command 0x0c1a tx timeout [ 259.114745][ T5807] Bluetooth: hci0: command 0x0c1a tx timeout [ 259.114828][ T5804] Bluetooth: hci5: command 0x0c1a tx timeout [ 260.779700][ T8358] tipc: Disabling bearer [ 260.897602][ T8388] binder: BINDER_SET_CONTEXT_MGR already set [ 260.897619][ T8388] binder: 8386:8388 ioctl 4018620d 200000004a80 returned -16 [ 260.979731][ T5888] tipc: Node number set to 1263692208 [ 261.164717][ T5804] Bluetooth: hci5: command 0x0c1a tx timeout [ 261.212765][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 261.308177][ T8405] input: syz1 as /devices/virtual/input/input46 [ 262.506590][ T8424] tipc: Started in network mode [ 262.506623][ T8424] tipc: Node identity 3a213ab079a5, cluster identity 4711 [ 262.506789][ T8424] tipc: Enabled bearer , priority 0 [ 262.508821][ T8424] syzkaller0: entered promiscuous mode [ 262.508846][ T8424] syzkaller0: entered allmulticast mode [ 262.624857][ T5885] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 262.754732][ T5885] usb 5-1: device descriptor read/64, error -71 [ 263.034654][ T5885] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 263.164645][ T5885] usb 5-1: device descriptor read/64, error -71 [ 263.244729][ T5804] Bluetooth: hci5: command 0x0c1a tx timeout [ 263.275100][ T5885] usb usb5-port1: attempt power cycle [ 263.598599][ T8442] binder: BINDER_SET_CONTEXT_MGR already set [ 263.598609][ T8442] binder: 8441:8442 ioctl 4018620d 200000004a80 returned -16 [ 263.634928][ T5885] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 263.658057][ T5885] usb 5-1: device descriptor read/8, error -71 [ 263.795946][ T5888] tipc: Node number set to 1132739248 [ 263.894684][ T5885] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 263.915495][ T5885] usb 5-1: device descriptor read/8, error -71 [ 264.025043][ T5885] usb usb5-port1: unable to enumerate USB device [ 264.137704][ T8450] input: syz1 as /devices/virtual/input/input47 [ 265.116876][ T8455] netlink: 32 bytes leftover after parsing attributes in process `syz.1.807'. [ 265.659775][ T8474] fuse: root generation should be zero [ 267.432319][ T8490] netlink: 32 bytes leftover after parsing attributes in process `syz.1.821'. [ 268.324670][ T5885] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 268.375113][ T5888] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 268.399374][ T8509] input: syz1 as /devices/virtual/input/input49 [ 268.484732][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 268.505206][ T5888] usb 1-1: device descriptor read/64, error -71 [ 268.820245][ T5888] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 268.990385][ T5885] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 268.990445][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.990495][ T5885] usb 2-1: Product: syz [ 268.990543][ T5885] usb 2-1: Manufacturer: syz [ 268.990557][ T5885] usb 2-1: SerialNumber: syz [ 269.233952][ T5885] usb 2-1: config 0 descriptor?? [ 269.304871][ T5888] usb 1-1: device descriptor read/64, error -71 [ 269.420290][ T5888] usb usb1-port1: attempt power cycle [ 269.755081][ T5888] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 269.776778][ T5888] usb 1-1: device descriptor read/8, error -71 [ 270.190823][ T5885] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 270.190917][ T5885] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 270.245527][ T5885] usb 2-1: USB disconnect, device number 19 [ 270.278902][ T5888] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 270.297408][ T5888] usb 1-1: device descriptor read/8, error -71 [ 270.407471][ T5888] usb usb1-port1: unable to enumerate USB device [ 270.634729][ T5885] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 270.784723][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 270.787678][ T5885] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 270.787704][ T5885] usb 5-1: config 0 has no interface number 0 [ 270.787749][ T5885] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=38.34 [ 270.787770][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.791634][ T5885] usb 5-1: config 0 descriptor?? [ 271.039354][ T5885] snd-usb-audio 5-1:0.255: probe with driver snd-usb-audio failed with error -71 [ 271.057632][ T5885] usb 5-1: USB disconnect, device number 23 [ 271.135029][ T5785] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 271.266339][ T5785] usb 2-1: device descriptor read/64, error -71 [ 271.505026][ T5785] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 271.641542][ T5785] usb 2-1: device descriptor read/64, error -71 [ 271.745451][ T5785] usb usb2-port1: attempt power cycle [ 272.014928][ T807] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 272.085274][ T5785] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 272.105941][ T5785] usb 2-1: device descriptor read/8, error -71 [ 272.165081][ T807] usb 4-1: Using ep0 maxpacket: 8 [ 272.167270][ T807] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 272.167295][ T807] usb 4-1: config 0 has no interface number 0 [ 272.167337][ T807] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=38.34 [ 272.167359][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.178937][ T807] usb 4-1: config 0 descriptor?? [ 272.355021][ T5785] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 272.375837][ T5785] usb 2-1: device descriptor read/8, error -71 [ 272.386036][ T807] snd-usb-audio 4-1:0.255: probe with driver snd-usb-audio failed with error -71 [ 272.421676][ T807] usb 4-1: USB disconnect, device number 18 [ 272.532449][ T5785] usb usb2-port1: unable to enumerate USB device [ 272.619508][ T8570] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 272.632700][ T8570] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 272.633817][ T8570] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 272.633996][ T8570] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 272.634168][ T8570] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 272.852320][ T8575] netlink: 72 bytes leftover after parsing attributes in process `syz.5.853'. [ 272.924722][ T5885] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 273.054665][ T5885] usb 1-1: device descriptor read/64, error -71 [ 273.294673][ T5885] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 273.444627][ T5885] usb 1-1: device descriptor read/64, error -71 [ 273.574593][ T5885] usb usb1-port1: attempt power cycle [ 273.934824][ T5885] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 273.958498][ T5885] usb 1-1: device descriptor read/8, error -71 [ 274.080285][ T8590] input: syz1 as /devices/virtual/input/input52 [ 274.214802][ T5885] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 274.240141][ T5885] usb 1-1: device descriptor read/8, error -71 [ 274.369941][ T5885] usb usb1-port1: unable to enumerate USB device [ 274.605279][ T5804] Bluetooth: hci0: command 0x0c1a tx timeout [ 274.695981][ T5804] Bluetooth: hci1: command 0x0c1a tx timeout [ 274.698428][ T5808] Bluetooth: hci3: command 0x0c1a tx timeout [ 274.699541][ T5805] Bluetooth: hci2: command 0x0c1a tx timeout [ 274.699766][ T5807] Bluetooth: hci5: command 0x0c1a tx timeout [ 275.284715][ T5885] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 275.444694][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 275.620299][ T5885] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 275.620328][ T5885] usb 2-1: config 0 has no interface number 0 [ 275.620374][ T5885] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=38.34 [ 275.620398][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.689995][ T5885] usb 2-1: config 0 descriptor?? [ 275.911800][ T5885] snd-usb-audio 2-1:0.255: probe with driver snd-usb-audio failed with error -71 [ 275.959582][ T5885] usb 2-1: USB disconnect, device number 24 [ 276.854886][ T807] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 277.085486][ T807] usb 1-1: device descriptor read/64, error -71 [ 277.325158][ T807] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 277.454957][ T807] usb 1-1: device descriptor read/64, error -71 [ 277.565157][ T807] usb usb1-port1: attempt power cycle [ 277.904948][ T807] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 277.930467][ T807] usb 1-1: device descriptor read/8, error -71 [ 278.174888][ T807] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 278.197522][ T807] usb 1-1: device descriptor read/8, error -71 [ 278.310431][ T807] usb usb1-port1: unable to enumerate USB device [ 279.216117][ T8643] netlink: 32 bytes leftover after parsing attributes in process `syz.1.870'. [ 279.741530][ T8651] input: syz1 as /devices/virtual/input/input54 [ 280.700272][ T8663] binder: BINDER_SET_CONTEXT_MGR already set [ 280.700283][ T8663] binder: 8662:8663 ioctl 4018620d 200000004a80 returned -16 [ 280.700404][ T8663] binder: 8662:8663 ioctl c0306201 0 returned -14 [ 282.563381][ T8678] binder: 8677:8678 ioctl 4018620d 0 returned -22 [ 283.161548][ T5885] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 283.273170][ T8693] bond0: entered promiscuous mode [ 283.273190][ T8693] bond_slave_0: entered promiscuous mode [ 283.273365][ T8693] bond_slave_1: entered promiscuous mode [ 283.276072][ T8693] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 283.278093][ T8693] bond0: left promiscuous mode [ 283.278110][ T8693] bond_slave_0: left promiscuous mode [ 283.278317][ T8693] bond_slave_1: left promiscuous mode [ 283.316632][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.316657][ T5885] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 283.316691][ T5885] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 283.316783][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.360849][ T5885] usb 1-1: config 0 descriptor?? [ 283.836896][ T8704] binder: 8702:8704 ioctl c0306201 0 returned -14 [ 285.009298][ T8716] netlink: 16 bytes leftover after parsing attributes in process `syz.5.895'. [ 285.104712][ T5830] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 285.254663][ T5830] usb 5-1: Using ep0 maxpacket: 16 [ 285.259092][ T5830] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 285.259123][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.259144][ T5830] usb 5-1: Product: syz [ 285.259158][ T5830] usb 5-1: Manufacturer: syz [ 285.259172][ T5830] usb 5-1: SerialNumber: syz [ 285.486503][ T5830] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 285.489605][ T5830] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 285.489843][ T5830] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 285.489882][ T5830] usb 5-1: media controller created [ 285.532375][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.706696][ T8731] ------------[ cut here ]------------ [ 285.706710][ T8731] usb 5-1: BOGUS control dir, pipe 80001880 doesn't match bRequestType c0 [ 285.706734][ T8731] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#0: syz.0.886/8731 [ 285.706779][ T8731] Modules linked in: [ 285.706818][ T8731] CPU: 0 UID: 0 PID: 8731 Comm: syz.0.886 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 285.706845][ T8731] Tainted: [L]=SOFTLOCKUP [ 285.706852][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 285.706867][ T8731] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 285.706890][ T8731] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 285.706909][ T8731] RSP: 0018:ffffc90003f378c8 EFLAGS: 00010246 [ 285.706926][ T8731] RAX: 0000000000000000 RBX: ffff888030f10f00 RCX: 0000000080001880 [ 285.706942][ T8731] RDX: ffff8880206d3b60 RSI: ffffffff8bcd4d20 RDI: ffffffff8f553290 [ 285.706957][ T8731] RBP: 1ffff110047dda38 R08: 00000000000000c0 R09: 0000000000000000 [ 285.706971][ T8731] R10: ffffc90003f379c0 R11: fffff520007e6f44 R12: ffff88803340d100 [ 285.706985][ T8731] R13: ffff888023eed1c0 R14: 0000000080001880 R15: ffff8880206d3b60 [ 285.707001][ T8731] FS: 00007fbfc642b6c0(0000) GS:ffff888126595000(0000) knlGS:0000000000000000 [ 285.707020][ T8731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.707035][ T8731] CR2: 000000110c3e3e38 CR3: 0000000030d4a000 CR4: 00000000003526f0 [ 285.707050][ T8731] Call Trace: [ 285.707061][ T8731] [ 285.707075][ T8731] ? __init_swait_queue_head+0xa9/0x150 [ 285.707104][ T8731] usb_start_wait_urb+0x12b/0x510 [ 285.707133][ T8731] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 285.707160][ T8731] usb_control_msg+0x232/0x3e0 [ 285.707176][ T8731] gl861_ctrl_msg+0x207/0x420 [ 285.707192][ T8731] ? lockdep_hardirqs_on+0x7a/0x110 [ 285.707208][ T8731] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 285.707222][ T8731] ? rt_mutex_slowlock+0x1fd/0x710 [ 285.707233][ T8731] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 285.707247][ T8731] gl861_i2c_master_xfer+0x439/0x6a0 [ 285.707264][ T8731] __i2c_transfer+0x79a/0x1ee0 [ 285.707281][ T8731] ? i2c_transfer+0xc8/0x2d0 [ 285.707292][ T8731] i2c_transfer+0x1cc/0x2d0 [ 285.707304][ T8731] i2cdev_ioctl_rdwr+0x460/0x740 [ 285.707320][ T8731] i2cdev_ioctl+0x6a8/0x890 [ 285.707330][ T8731] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 285.707344][ T8731] ? __fget_files+0x3a6/0x420 [ 285.707358][ T8731] ? __fget_files+0x2a/0x420 [ 285.707373][ T8731] ? bpf_lsm_file_ioctl+0x9/0x20 [ 285.707386][ T8731] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 285.707396][ T8731] __se_sys_ioctl+0xff/0x170 [ 285.707409][ T8731] do_syscall_64+0x14d/0xf80 [ 285.707422][ T8731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.707433][ T8731] ? trace_irq_disable+0x37/0x100 [ 285.707441][ T8731] ? clear_bhb_loop+0x40/0x90 [ 285.707454][ T8731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.707463][ T8731] RIP: 0033:0x7fbfc8e7bf79 [ 285.707479][ T8731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.707488][ T8731] RSP: 002b:00007fbfc642b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.707499][ T8731] RAX: ffffffffffffffda RBX: 00007fbfc90f6450 RCX: 00007fbfc8e7bf79 [ 285.707507][ T8731] RDX: 0000200000000500 RSI: 0000000000000707 RDI: 0000000000000004 [ 285.707516][ T8731] RBP: 00007fbfc8f127e0 R08: 0000000000000000 R09: 0000000000000000 [ 285.707523][ T8731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.707530][ T8731] R13: 00007fbfc90f64e8 R14: 00007fbfc90f6450 R15: 00007ffcfc9d1248 [ 285.707547][ T8731] [ 285.707559][ T8731] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 285.707569][ T8731] CPU: 0 UID: 0 PID: 8731 Comm: syz.0.886 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 285.707584][ T8731] Tainted: [L]=SOFTLOCKUP [ 285.707593][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 285.707599][ T8731] Call Trace: [ 285.707604][ T8731] [ 285.707608][ T8731] vpanic+0x1e0/0x670 [ 285.707625][ T8731] panic+0xc5/0xd0 [ 285.707639][ T8731] ? __pfx_panic+0x10/0x10 [ 285.707661][ T8731] __warn+0x315/0x4a0 [ 285.707674][ T8731] ? usb_submit_urb+0x1052/0x18b0 [ 285.707687][ T8731] ? usb_submit_urb+0x1052/0x18b0 [ 285.707699][ T8731] __report_bug+0x29a/0x540 [ 285.707715][ T8731] ? usb_submit_urb+0x1052/0x18b0 [ 285.707727][ T8731] ? __pfx___report_bug+0x10/0x10 [ 285.707742][ T8731] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 285.707755][ T8731] ? lockdep_hardirqs_on+0x7a/0x110 [ 285.707767][ T8731] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 285.707780][ T8731] ? stack_depot_save_flags+0x3f3/0x810 [ 285.707795][ T8731] report_bug_entry+0x19a/0x290 [ 285.707807][ T8731] ? usb_submit_urb+0x1114/0x18b0 [ 285.707818][ T8731] ? usb_submit_urb+0x1119/0x18b0 [ 285.707829][ T8731] handle_bug+0xca/0x200 [ 285.707843][ T8731] exc_invalid_op+0x1a/0x50 [ 285.707861][ T8731] asm_exc_invalid_op+0x1a/0x20 [ 285.707870][ T8731] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 285.707882][ T8731] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 285.707891][ T8731] RSP: 0018:ffffc90003f378c8 EFLAGS: 00010246 [ 285.707900][ T8731] RAX: 0000000000000000 RBX: ffff888030f10f00 RCX: 0000000080001880 [ 285.707907][ T8731] RDX: ffff8880206d3b60 RSI: ffffffff8bcd4d20 RDI: ffffffff8f553290 [ 285.707914][ T8731] RBP: 1ffff110047dda38 R08: 00000000000000c0 R09: 0000000000000000 [ 285.707922][ T8731] R10: ffffc90003f379c0 R11: fffff520007e6f44 R12: ffff88803340d100 [ 285.707929][ T8731] R13: ffff888023eed1c0 R14: 0000000080001880 R15: ffff8880206d3b60 [ 285.707945][ T8731] ? usb_submit_urb+0x10a3/0x18b0 [ 285.707959][ T8731] ? __init_swait_queue_head+0xa9/0x150 [ 285.707974][ T8731] usb_start_wait_urb+0x12b/0x510 [ 285.707989][ T8731] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 285.708012][ T8731] usb_control_msg+0x232/0x3e0 [ 285.708028][ T8731] gl861_ctrl_msg+0x207/0x420 [ 285.708043][ T8731] ? lockdep_hardirqs_on+0x7a/0x110 [ 285.708058][ T8731] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 285.708071][ T8731] ? rt_mutex_slowlock+0x1fd/0x710 [ 285.708082][ T8731] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 285.708096][ T8731] gl861_i2c_master_xfer+0x439/0x6a0 [ 285.708112][ T8731] __i2c_transfer+0x79a/0x1ee0 [ 285.708128][ T8731] ? i2c_transfer+0xc8/0x2d0 [ 285.708139][ T8731] i2c_transfer+0x1cc/0x2d0 [ 285.708150][ T8731] i2cdev_ioctl_rdwr+0x460/0x740 [ 285.708166][ T8731] i2cdev_ioctl+0x6a8/0x890 [ 285.708176][ T8731] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 285.708188][ T8731] ? __fget_files+0x3a6/0x420 [ 285.708201][ T8731] ? __fget_files+0x2a/0x420 [ 285.708215][ T8731] ? bpf_lsm_file_ioctl+0x9/0x20 [ 285.708228][ T8731] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 285.708238][ T8731] __se_sys_ioctl+0xff/0x170 [ 285.708250][ T8731] do_syscall_64+0x14d/0xf80 [ 285.708262][ T8731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.708272][ T8731] ? trace_irq_disable+0x37/0x100 [ 285.708281][ T8731] ? clear_bhb_loop+0x40/0x90 [ 285.708293][ T8731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.708303][ T8731] RIP: 0033:0x7fbfc8e7bf79 [ 285.708311][ T8731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.708320][ T8731] RSP: 002b:00007fbfc642b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.708330][ T8731] RAX: ffffffffffffffda RBX: 00007fbfc90f6450 RCX: 00007fbfc8e7bf79 [ 285.708337][ T8731] RDX: 0000200000000500 RSI: 0000000000000707 RDI: 0000000000000004 [ 285.708343][ T8731] RBP: 00007fbfc8f127e0 R08: 0000000000000000 R09: 0000000000000000 [ 285.708350][ T8731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.708356][ T8731] R13: 00007fbfc90f64e8 R14: 00007fbfc90f6450 R15: 00007ffcfc9d1248 [ 285.708372][ T8731] [ 285.708732][ T8731] Kernel Offset: disabled